[ 26.157903] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.120319] random: sshd: uninitialized urandom read (32 bytes read) [ 30.354903] audit: type=1400 audit(1536153511.314:6): avc: denied { map } for pid=4803 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.399379] random: sshd: uninitialized urandom read (32 bytes read) [ 31.100739] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.224' (ECDSA) to the list of known hosts. [ 36.749260] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/05 13:18:37 fuzzer started [ 36.858891] audit: type=1400 audit(1536153517.819:7): avc: denied { map } for pid=4814 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 37.836182] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/05 13:18:39 dialing manager at 10.128.0.26:45619 2018/09/05 13:18:44 syscalls: 1 2018/09/05 13:18:44 code coverage: enabled 2018/09/05 13:18:44 comparison tracing: enabled 2018/09/05 13:18:44 setuid sandbox: enabled 2018/09/05 13:18:44 namespace sandbox: enabled 2018/09/05 13:18:44 fault injection: enabled 2018/09/05 13:18:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/05 13:18:44 net packed injection: enabled 2018/09/05 13:18:44 net device setup: enabled [ 44.205768] random: crng init done 13:20:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) dup2(r0, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 13:20:57 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x16550000}) 13:20:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x3, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 13:20:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1400000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) 13:20:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) 13:20:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") unshare(0x400) getsockopt$inet6_mtu(r0, 0x29, 0x33, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:20:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/136, 0x200002c8, 0x930002) 13:20:57 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 176.095414] audit: type=1400 audit(1536153657.055:8): avc: denied { map } for pid=4814 comm="syz-fuzzer" path="/root/syzkaller-shm046083848" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 176.129476] audit: type=1400 audit(1536153657.087:9): avc: denied { map } for pid=4830 comm="syz-executor7" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13860 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 176.287222] IPVS: ftp: loaded support on port[0] = 21 [ 176.295265] IPVS: ftp: loaded support on port[0] = 21 [ 176.301225] IPVS: ftp: loaded support on port[0] = 21 [ 176.342751] IPVS: ftp: loaded support on port[0] = 21 [ 176.384155] IPVS: ftp: loaded support on port[0] = 21 [ 176.391095] IPVS: ftp: loaded support on port[0] = 21 [ 176.392994] IPVS: ftp: loaded support on port[0] = 21 [ 176.410757] IPVS: ftp: loaded support on port[0] = 21 [ 177.881315] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.891252] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.921905] device bridge_slave_0 entered promiscuous mode [ 177.930304] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.936772] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.944488] device bridge_slave_0 entered promiscuous mode [ 177.972086] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.978660] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.017187] device bridge_slave_0 entered promiscuous mode [ 178.036818] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.043365] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.059172] device bridge_slave_0 entered promiscuous mode [ 178.070769] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.077158] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.084786] device bridge_slave_0 entered promiscuous mode [ 178.092207] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.098731] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.108173] device bridge_slave_1 entered promiscuous mode [ 178.117332] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.123879] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.132675] device bridge_slave_1 entered promiscuous mode [ 178.141119] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.147715] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.155130] device bridge_slave_0 entered promiscuous mode [ 178.164218] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.170632] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.182271] device bridge_slave_0 entered promiscuous mode [ 178.189690] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.196166] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.203220] device bridge_slave_0 entered promiscuous mode [ 178.211593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.218879] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.225264] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.232704] device bridge_slave_1 entered promiscuous mode [ 178.243875] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.250658] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.265761] device bridge_slave_1 entered promiscuous mode [ 178.276609] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.283004] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.291192] device bridge_slave_1 entered promiscuous mode [ 178.299269] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.305868] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.316768] device bridge_slave_1 entered promiscuous mode [ 178.326495] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.332907] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.344318] device bridge_slave_1 entered promiscuous mode [ 178.351216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.360048] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.366469] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.374136] device bridge_slave_1 entered promiscuous mode [ 178.383092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.391750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.398939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.406944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.417264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.435024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.454868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.479821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.497069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.504972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.514078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.530275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.566902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.587690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.713681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.753587] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.796585] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.817896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.828325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.839511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.848517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.864163] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.882029] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.906802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.921325] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.949157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.960607] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.969382] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.004600] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.032756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.323698] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.347189] team0: Port device team_slave_0 added [ 179.365875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.378015] team0: Port device team_slave_0 added [ 179.411686] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.433146] team0: Port device team_slave_0 added [ 179.444056] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.459957] team0: Port device team_slave_0 added [ 179.467537] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.477723] team0: Port device team_slave_0 added [ 179.485888] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.493175] team0: Port device team_slave_1 added [ 179.500784] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.509878] team0: Port device team_slave_0 added [ 179.516995] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.524586] team0: Port device team_slave_0 added [ 179.541258] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.551638] team0: Port device team_slave_0 added [ 179.564156] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.581981] team0: Port device team_slave_1 added [ 179.588790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.595949] team0: Port device team_slave_1 added [ 179.604978] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.614051] team0: Port device team_slave_1 added [ 179.623502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.633609] team0: Port device team_slave_1 added [ 179.641332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.650978] team0: Port device team_slave_1 added [ 179.658959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.668357] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.676660] team0: Port device team_slave_1 added [ 179.688556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.695719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.702993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.720011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.734914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.743295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.751147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.759535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.767407] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.774731] team0: Port device team_slave_1 added [ 179.782971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.792842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.801527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.812160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.820411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.843324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.858952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.868873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.876702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.884523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.892316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.900143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.908012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.914985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.922947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.932147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.940624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.949457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.958673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.965701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.972866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.980543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.009054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.034258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.044400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.051888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.059604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.067070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.074737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.082185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.089891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.097723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.105363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.114970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.122196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.130489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.141485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.151266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.159955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.169588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.180119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.187760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.200925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.228816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.241223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.249100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.257159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.265039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.273021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.280894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.288820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.297018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.305125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.314244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.323852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.330941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.339063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.349839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.359349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.367115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.377003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.386695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.399973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.418920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.440563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.448819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.456931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.464807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.472710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.481687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.491058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.499326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.510248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.519192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.534932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.546409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.563766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.575512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.596172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.626903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.641110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.651707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.659415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.667314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.681410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.705002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.725939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.732491] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.739013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.746166] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.752588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.781600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.788376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.818484] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.824990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.831792] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.838227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.886383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.897180] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.903627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.910323] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.916752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.928538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.936945] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.943347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.950086] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.956520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.964572] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.975697] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.982121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.988848] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.995259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.003362] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.022603] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.029020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.035719] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.042117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.088381] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.167899] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.174349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.181085] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.187515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.225589] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.250877] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.257311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.264030] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.270485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.309340] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.819480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.833264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.863378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.888065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.896014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.911000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.918377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.047710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.096788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.239252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.315902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.397636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.421621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.494215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.592421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.601294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.635316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.717669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.782232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.879830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.887614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.977332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.042157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.053429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.066826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.081190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.134361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.142602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.157146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.348534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.354844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.373356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.450415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.456711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.468189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.499712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.508321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.534739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.561994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.573677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.587158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.618561] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.638648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.678499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.698774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.721042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.732560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.755130] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.774030] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.966289] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.019535] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.116134] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.141972] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.161325] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.330972] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.111815] audit: type=1400 audit(1536153671.071:10): avc: denied { create } for pid=6841 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:21:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 13:21:11 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) [ 190.225097] audit: type=1400 audit(1536153671.110:11): avc: denied { getattr } for pid=6841 comm="syz-executor1" path="socket:[21083]" dev="sockfs" ino=21083 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:21:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 190.404642] hrtimer: interrupt took 78733 ns [ 190.407121] audit: type=1400 audit(1536153671.322:12): avc: denied { name_connect } for pid=6867 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 190.541910] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 190.570759] audit: type=1400 audit(1536153671.414:13): avc: denied { map } for pid=6868 comm="syz-executor3" path="/dev/nullb0" dev="devtmpfs" ino=1237 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 190.597156] audit: type=1400 audit(1536153671.494:14): avc: denied { create } for pid=6884 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 13:21:11 executing program 2: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") [ 190.621207] audit: type=1400 audit(1536153671.499:15): avc: denied { write } for pid=6884 comm="syz-executor6" path="socket:[21124]" dev="sockfs" ino=21124 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 190.663405] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 190.666687] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 13:21:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) close(r3) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r4}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010470000000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 13:21:11 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) 13:21:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 13:21:11 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') sendfile(r0, r1, &(0x7f0000000180), 0x8001) [ 190.871628] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 190.923930] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 13:21:12 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) dup2(r0, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 13:21:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc058534b, &(0x7f000023efa8)) [ 191.059903] audit: type=1400 audit(1536153672.001:16): avc: denied { name_bind } for pid=6936 comm="syz-executor0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 191.082718] audit: type=1400 audit(1536153672.002:17): avc: denied { node_bind } for pid=6936 comm="syz-executor0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 13:21:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:21:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/136, 0x200002c8, 0x930002) 13:21:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 13:21:12 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) 13:21:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc058534b, &(0x7f000023efa8)) 13:21:12 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) [ 191.248260] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 13:21:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc058534b, &(0x7f000023efa8)) 13:21:12 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) dup2(r0, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) [ 191.302808] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 13:21:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/136, 0x200002c8, 0x930002) 13:21:12 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 191.558297] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 191.571169] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 13:21:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) close(r3) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r4}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010470000000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 13:21:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc058534b, &(0x7f000023efa8)) 13:21:12 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) dup2(r0, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 13:21:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/136, 0x200002c8, 0x930002) 13:21:12 executing program 6: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:21:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) 13:21:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600), 0x4000) 13:21:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:12 executing program 6: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:13 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 13:21:13 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) 13:21:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:21:13 executing program 6: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) close(r3) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r4}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010470000000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 13:21:13 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) 13:21:13 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000014c0)={0x18, 0x2e, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 13:21:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 192.639950] audit: type=1400 audit(1536153673.599:18): avc: denied { write } for pid=7052 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:21:13 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 13:21:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x0, 0x10000, 0x81d, 0x6e}) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f0000000040)) io_setup(0x40000100000003, &(0x7f0000000200)) mount$9p_tcp(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30784d4d123030303030303030303030306361636865af6824088d3d6e6f726f750000000000"]) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x80, 0x4) 13:21:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="71ca6c46959b3c41dc7220f205de815c7b5b2ee75255ee29e790a123b5b5881f4d19815e21be6d86eaf21dcf9e7cca1409b370de89aa73e50312ac66b004aa4c2a26a9a3afe5c47f27ec0ce086d993c1699e2c6eee2497c11143187f4945ed655f0832e8443c45fa0a511ddac3b58e4bec0d1c7307774847986ff82814f706352dbbda6db637e1888b00ba5cdcadbd563bab6c1e997f441c83f7817c57530d3a529676824591166b33bdec05b76f42473d8447f85c6e5eb4e1ddde4bdc45b4f6816b8ac246285ed579355bf53ed04a9b6394b1c936818f19ac0c58242ed8a828c6ffb8244e068a38d011b0567bcc3f75f14374cd0ce6c7d123cc751e6cac3f982ae2b8d4cc30396be15951d7bb3a41aa97c2387986f2a84393532e8850c5740cb21a56c912b03db47306b1d5e089218aed560eaa03e0cd503e38b665f9657fe60e67edf1019325fea5c98aa886d8439a1ac9ae9995902e72f95e9828b2bd5f7b82b6aab2fff0824eaeca07e83e011ab4e7bb7653e033f8f4b29d9ea192f07d30562ed63b9e0875cf9f2693339156e8164d5c3e87e9c246788457744a6c4edfe64f6e64a74cf4ed05cf1853a5d14211a2290a8f5a17c43c86f3fd78b574ad06280d2d4b1b69d7827192c003c52eb0f7b28c3233fcaa1c059c2862f7828326e1a17602224c40968b5a814bfa19db0d1eb529bb7dddc9db7ec273342cf74a349b4ade31cfc9559df989814e53d1353f7e9095d1d75f59ebba2f4638a7bebb4cbc24a60c345e6f7c97ef855b87946a5f0cf6a4d56c6fbe905c7fe1063d728c698fd7b77fb2335317d57a139561d0bc571b51eae507b8807a3d2df24523f1a184b6b465860f4434d2d20ae41a519d073419dad6b09dfc07ee1a6ade4feebc9ec62167cd681a98124dbae2e6d06d3d1d5c0586e3c60c5fe611ed78e14c8c43373ca2133cf700ed6dad416d649038fa24ff0f48847cdd52cbe4b5fe49e7989cebbfa871ab5bf3d4975cbe46d710d83b6a03f8f23529a05393b21e1ae08be818bc34e6256e67a0ea338ca4919ce2bfd330417d1d4de321bccc84b30f5202c8516de847714b9f3ec36edf46b17f5f39e3668c7cd8ce262a2c38b451da6660992f17ea36fffc1f941d88b8c03365a22de58f06e720b858d56adffe9643fbdd80b56c1388d2f65dfabb7548c82c90915cb83fccdf801b2b4dbf1a1ae8f84688b3cd7cfcef4534a3bad3e8bae61e86431dde2ce32f4e769d009536dd15665e12a3a1637b40ccf52d7ab0ad45a38d709025ce46c0500fbddb121e79df9ef91b9d3566a29c4213edd1b80ef30b1092416bf4131c7ad6bcddeb90957e9b1f3bccfcb9eab8837a92ff2f2edc434e3264c950d0d69e06748f2d22afd3078f5171e476b16a2ce7334f200c653e5b0881be4074be7a6ea54b3481adee89ac7a0429e8102c2b220f28cd8bb28a6db0ba8a8228a6a89a937f8b707bdbfa5587aa653aaff814ad916cb589061a429403ba25e49b6a25c7e00f9dc3322f1c3f398e54e8965c24b10c70a85d23dba516016b59178ff5f75cc38bc8b18e733ac396f40b3c60bd88a7eddb17bdb2ebf5a25c13a36a479a5ae80dfa8d85170b0313bea2ea2c562d02d92ae807d55aabfc6f12cecc9ac2e5a70d017072e5a2619c394009c48494ad02b237d597088e700f65354e5ab18e7c6df2bdbeee2df9f5893989313902d7645d9698d22f3b42ec2fc56751a60356", 0x4c9, 0xfffffffffffffffd) 13:21:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYPTR], &(0x7f0000000840)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003a80)={r0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003ac0)="a7685cb722d515ce2dd36136bddfd74f", 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@empty, @remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="80000200010000002f00945766bd8f87ff0002000300ffcdd461e73b66d83a"], &(0x7f0000000240)=0x1) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x3c07f944825fb10b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=@framed={{0xffffff87, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x1c4, &(0x7f0000000000)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000380), 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) close(r0) 13:21:13 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) [ 192.879522] audit: type=1400 audit(1536153673.838:19): avc: denied { prog_load } for pid=7073 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 192.882876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:21:13 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000540)={0x14}, 0x14) write$9p(r5, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffffffffffc2}, &(0x7f00000001c0)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x1d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r7 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r7) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580}, 0x6) 13:21:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x11, 0x80a, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) bind(r1, &(0x7f0000000100)=@pptp, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)) 13:21:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) 13:21:14 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) [ 193.031654] 9pnet: p9_fd_create_tcp (7070): problem connecting socket to 127.0.0.1 13:21:14 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) [ 193.315724] ================================================================== [ 193.323260] BUG: KASAN: use-after-free in _free_event+0x49a/0x15e0 [ 193.329594] Write of size 4 at addr ffff8801d829e1a0 by task syz-executor6/7104 [ 193.337046] [ 193.338689] CPU: 1 PID: 7104 Comm: syz-executor6 Not tainted 4.19.0-rc2+ #1 [ 193.345878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.355236] Call Trace: [ 193.357820] dump_stack+0x1c9/0x2b4 [ 193.361443] ? dump_stack_print_info.cold.2+0x52/0x52 [ 193.366637] ? printk+0xa7/0xcf [ 193.369909] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 193.374657] ? _free_event+0x49a/0x15e0 [ 193.378666] print_address_description+0x6c/0x20b [ 193.383507] ? _free_event+0x49a/0x15e0 [ 193.387487] kasan_report.cold.7+0x242/0x30d [ 193.391933] check_memory_region+0x13e/0x1b0 [ 193.396351] kasan_check_write+0x14/0x20 [ 193.400405] _free_event+0x49a/0x15e0 [ 193.404210] ? trace_hardirqs_on+0xbd/0x2c0 [ 193.408530] ? event_function_call+0x458/0x600 [ 193.413482] ? ring_buffer_attach+0x840/0x840 [ 193.418073] ? __perf_remove_from_context+0x1d8/0x440 [ 193.423255] ? do_raw_spin_lock+0xc1/0x200 [ 193.427487] ? kasan_check_write+0x14/0x20 [ 193.431710] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 193.436635] ? event_sched_out.isra.99+0xf10/0xf10 [ 193.441564] ? wait_for_completion+0x8d0/0x8d0 [ 193.446142] ? event_sched_out.isra.99+0xf10/0xf10 [ 193.451068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.456605] free_event+0xb4/0x180 [ 193.460210] ? _free_event+0x15e0/0x15e0 [ 193.464275] perf_event_release_kernel+0x7d5/0xfc0 [ 193.469230] ? put_event+0x60/0x60 [ 193.472770] ? mark_held_locks+0x160/0x160 [ 193.477006] ? lock_downgrade+0x8f0/0x8f0 [ 193.481148] ? trace_hardirqs_off+0xb8/0x2b0 [ 193.485559] ? kasan_check_read+0x11/0x20 [ 193.489708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 193.494108] ? trace_hardirqs_on+0x2c0/0x2c0 [ 193.498626] ? do_raw_spin_lock+0xc1/0x200 [ 193.502855] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 193.507974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.513701] ? locks_remove_file+0x3df/0x590 [ 193.518106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.523640] ? ima_file_free+0x132/0x650 [ 193.527745] ? ima_file_check+0x130/0x130 [ 193.531977] ? fsnotify+0x14e0/0x14e0 [ 193.535790] ? perf_event_release_kernel+0xfc0/0xfc0 [ 193.540994] perf_release+0x37/0x50 [ 193.544627] __fput+0x38a/0xa40 [ 193.547895] ? __alloc_file+0x400/0x400 [ 193.551857] ? trace_hardirqs_on+0xbd/0x2c0 [ 193.556165] ? kasan_check_read+0x11/0x20 [ 193.560301] ? task_work_run+0x1af/0x2a0 [ 193.564361] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 193.569474] ? kasan_check_write+0x14/0x20 [ 193.573717] ? do_raw_spin_lock+0xc1/0x200 [ 193.577948] ____fput+0x15/0x20 [ 193.581215] task_work_run+0x1e8/0x2a0 [ 193.585091] ? task_work_cancel+0x240/0x240 [ 193.589405] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 193.594944] ? switch_task_namespaces+0xa2/0xd0 [ 193.599613] do_exit+0x1ae4/0x26e0 [ 193.603143] ? lockdep_hardirqs_on+0x421/0x5c0 [ 193.607716] ? mm_update_next_owner+0x9a0/0x9a0 [ 193.612453] ? profiling_store+0xd0/0xd0 [ 193.616529] ? kasan_check_write+0x14/0x20 [ 193.620762] ? do_raw_spin_lock+0xc1/0x200 [ 193.625040] ? do_coredump+0x477/0x3fff [ 193.629011] ? unwind_get_return_address+0x61/0xa0 [ 193.634061] ? __save_stack_trace+0x8d/0xf0 [ 193.638420] ? dump_align+0xa0/0xa0 [ 193.642052] ? save_stack+0xa9/0xd0 [ 193.645711] ? save_stack+0x43/0xd0 [ 193.649328] ? __kasan_slab_free+0x11a/0x170 [ 193.653725] ? kasan_slab_free+0xe/0x10 [ 193.657699] ? kmem_cache_free+0x86/0x280 [ 193.661837] ? __sigqueue_free.part.29+0x7d/0xa0 [ 193.666581] ? __dequeue_signal+0x530/0x7d0 [ 193.670886] ? dequeue_signal+0xbc/0x620 [ 193.674937] ? get_signal+0x3f0/0x18e0 [ 193.678852] ? do_signal+0x9c/0x21c0 [ 193.682573] ? exit_to_usermode_loop+0x2e5/0x380 [ 193.687323] ? prepare_exit_to_usermode+0x342/0x3b0 [ 193.692373] ? trace_hardirqs_off+0xb8/0x2b0 [ 193.696780] ? kasan_check_read+0x11/0x20 [ 193.700918] ? do_raw_spin_unlock+0xa7/0x2f0 [ 193.705323] ? trace_hardirqs_on+0x2c0/0x2c0 [ 193.709725] ? kasan_check_write+0x14/0x20 [ 193.713950] ? graph_lock+0x170/0x170 [ 193.717741] ? trace_hardirqs_off+0xb8/0x2b0 [ 193.722149] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 193.727248] ? __lock_is_held+0xb5/0x140 [ 193.731300] ? __sigqueue_free.part.29+0x7d/0xa0 [ 193.736050] ? graph_lock+0x170/0x170 [ 193.739850] ? __sigqueue_free.part.29+0x7d/0xa0 [ 193.744619] ? rcu_read_lock_sched_held+0x108/0x120 [ 193.749638] ? kmem_cache_free+0x246/0x280 [ 193.754019] ? __sigqueue_free.part.29+0x7d/0xa0 [ 193.758776] ? find_held_lock+0x36/0x1c0 [ 193.762885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.768480] ? proc_coredump_connector+0x4d0/0x610 [ 193.773426] ? proc_comm_connector+0x500/0x500 [ 193.778105] do_group_exit+0x177/0x440 [ 193.781995] ? __ia32_sys_exit+0x50/0x50 [ 193.786054] get_signal+0x851/0x18e0 [ 193.789762] ? ptrace_notify+0x130/0x130 [ 193.793821] ? force_sig_info+0x281/0x310 [ 193.797969] ? force_sigsegv+0x3d/0x110 [ 193.801953] ? signal_setup_done+0xc1/0x2f0 [ 193.806322] ? set_current_blocked+0x40/0x40 [ 193.810732] do_signal+0x9c/0x21c0 [ 193.814267] ? setup_sigcontext+0x7d0/0x7d0 [ 193.818598] ? bad_area+0x69/0x80 [ 193.822391] ? exit_to_usermode_loop+0x8c/0x380 [ 193.827096] exit_to_usermode_loop+0x2e5/0x380 [ 193.831930] ? syscall_slow_exit_work+0x490/0x490 [ 193.836767] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 193.841773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.846602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.851447] prepare_exit_to_usermode+0x342/0x3b0 [ 193.856338] ? perf_trace_sys_enter+0xb10/0xb10 [ 193.861008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.865853] ? page_fault+0x8/0x30 [ 193.869386] retint_user+0x8/0x18 [ 193.872826] RIP: 0033: (null) [ 193.876694] Code: Bad RIP value. [ 193.880042] RSP: 002b:0000000020000048 EFLAGS: 00010217 [ 193.885396] RAX: 0000000000000000 RBX: 00007f8922e7e6d4 RCX: 0000000000457099 [ 193.892657] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 193.899935] RBP: 00000000009300a0 R08: 0000000020000080 R09: 0000000000000000 [ 193.907194] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 193.914469] R13: 00000000004cbae8 R14: 00000000004c33c7 R15: 0000000000000000 [ 193.921744] [ 193.923369] Allocated by task 7103: [ 193.926989] save_stack+0x43/0xd0 [ 193.930442] kasan_kmalloc+0xc4/0xe0 [ 193.934205] kasan_slab_alloc+0x12/0x20 [ 193.938175] kmem_cache_alloc_node+0x144/0x720 [ 193.942748] copy_process+0x1dd0/0x7ad0 [ 193.946883] _do_fork+0x1ca/0x1170 [ 193.950408] __x64_sys_clone+0xbf/0x150 [ 193.954472] do_syscall_64+0x1b9/0x820 [ 193.958456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.963644] [ 193.965255] Freed by task 7103: [ 193.968535] save_stack+0x43/0xd0 [ 193.971991] __kasan_slab_free+0x11a/0x170 [ 193.976271] kasan_slab_free+0xe/0x10 [ 193.980070] kmem_cache_free+0x86/0x280 [ 193.984040] free_task+0x16e/0x1f0 [ 193.987583] copy_process+0x1b21/0x7ad0 [ 193.991562] _do_fork+0x1ca/0x1170 [ 193.995102] __x64_sys_clone+0xbf/0x150 [ 193.999064] do_syscall_64+0x1b9/0x820 [ 194.002955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.008166] [ 194.009786] The buggy address belongs to the object at ffff8801d829e180 [ 194.009786] which belongs to the cache task_struct of size 5952 [ 194.022537] The buggy address is located 32 bytes inside of [ 194.022537] 5952-byte region [ffff8801d829e180, ffff8801d829f8c0) [ 194.034418] The buggy address belongs to the page: [ 194.039345] page:ffffea000760a780 count:1 mapcount:0 mapping:ffff8801dad49200 index:0x0 compound_mapcount: 0 [ 194.049312] flags: 0x2fffc0000008100(slab|head) [ 194.053988] raw: 02fffc0000008100 ffffea0006c53808 ffffea0006cfa588 ffff8801dad49200 [ 194.061884] raw: 0000000000000000 ffff8801d829e180 0000000100000001 0000000000000000 [ 194.069752] page dumped because: kasan: bad access detected [ 194.075458] [ 194.077078] Memory state around the buggy address: [ 194.082063] ffff8801d829e080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.089697] ffff8801d829e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.097053] >ffff8801d829e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.104592] ^ [ 194.109009] ffff8801d829e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.116364] ffff8801d829e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.123804] ================================================================== [ 194.131151] Disabling lock debugging due to kernel taint [ 194.139177] Kernel panic - not syncing: panic_on_warn set ... [ 194.139177] [ 194.146578] CPU: 1 PID: 7104 Comm: syz-executor6 Tainted: G B 4.19.0-rc2+ #1 [ 194.155156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.164510] Call Trace: [ 194.167142] dump_stack+0x1c9/0x2b4 [ 194.170786] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.175978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 194.180743] panic+0x238/0x4e7 [ 194.183937] ? add_taint.cold.5+0x16/0x16 [ 194.188091] ? trace_hardirqs_on+0xb4/0x2c0 [ 194.192413] ? trace_hardirqs_on+0x9a/0x2c0 [ 194.196733] ? _free_event+0x49a/0x15e0 [ 194.200705] kasan_end_report+0x47/0x4f [ 194.204684] kasan_report.cold.7+0x76/0x30d [ 194.209021] check_memory_region+0x13e/0x1b0 [ 194.213436] kasan_check_write+0x14/0x20 [ 194.217508] _free_event+0x49a/0x15e0 [ 194.221310] ? trace_hardirqs_on+0xbd/0x2c0 [ 194.225631] ? event_function_call+0x458/0x600 [ 194.230212] ? ring_buffer_attach+0x840/0x840 [ 194.234712] ? __perf_remove_from_context+0x1d8/0x440 [ 194.239910] ? do_raw_spin_lock+0xc1/0x200 [ 194.244150] ? kasan_check_write+0x14/0x20 [ 194.248422] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 194.253358] ? event_sched_out.isra.99+0xf10/0xf10 [ 194.258303] ? wait_for_completion+0x8d0/0x8d0 [ 194.262894] ? event_sched_out.isra.99+0xf10/0xf10 [ 194.267832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.273372] free_event+0xb4/0x180 [ 194.276916] ? _free_event+0x15e0/0x15e0 [ 194.280989] perf_event_release_kernel+0x7d5/0xfc0 [ 194.285931] ? put_event+0x60/0x60 [ 194.289478] ? mark_held_locks+0x160/0x160 [ 194.293716] ? lock_downgrade+0x8f0/0x8f0 [ 194.297867] ? trace_hardirqs_off+0xb8/0x2b0 [ 194.302276] ? kasan_check_read+0x11/0x20 [ 194.306449] ? do_raw_spin_unlock+0xa7/0x2f0 [ 194.310862] ? trace_hardirqs_on+0x2c0/0x2c0 [ 194.315271] ? do_raw_spin_lock+0xc1/0x200 [ 194.319506] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 194.324632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.330170] ? locks_remove_file+0x3df/0x590 [ 194.334587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.340128] ? ima_file_free+0x132/0x650 [ 194.344192] ? ima_file_check+0x130/0x130 [ 194.348339] ? fsnotify+0x14e0/0x14e0 [ 194.352148] ? perf_event_release_kernel+0xfc0/0xfc0 [ 194.357251] perf_release+0x37/0x50 [ 194.360878] __fput+0x38a/0xa40 [ 194.364160] ? __alloc_file+0x400/0x400 [ 194.368131] ? trace_hardirqs_on+0xbd/0x2c0 [ 194.372453] ? kasan_check_read+0x11/0x20 [ 194.376602] ? task_work_run+0x1af/0x2a0 [ 194.380662] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 194.385766] ? kasan_check_write+0x14/0x20 [ 194.390014] ? do_raw_spin_lock+0xc1/0x200 [ 194.394254] ____fput+0x15/0x20 [ 194.397532] task_work_run+0x1e8/0x2a0 [ 194.401429] ? task_work_cancel+0x240/0x240 [ 194.405759] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 194.411301] ? switch_task_namespaces+0xa2/0xd0 [ 194.415981] do_exit+0x1ae4/0x26e0 [ 194.419526] ? lockdep_hardirqs_on+0x421/0x5c0 [ 194.424116] ? mm_update_next_owner+0x9a0/0x9a0 [ 194.428787] ? profiling_store+0xd0/0xd0 [ 194.432849] ? kasan_check_write+0x14/0x20 [ 194.437091] ? do_raw_spin_lock+0xc1/0x200 [ 194.441324] ? do_coredump+0x477/0x3fff [ 194.445300] ? unwind_get_return_address+0x61/0xa0 [ 194.450243] ? __save_stack_trace+0x8d/0xf0 [ 194.454595] ? dump_align+0xa0/0xa0 [ 194.458225] ? save_stack+0xa9/0xd0 [ 194.461855] ? save_stack+0x43/0xd0 [ 194.465489] ? __kasan_slab_free+0x11a/0x170 [ 194.469898] ? kasan_slab_free+0xe/0x10 [ 194.473872] ? kmem_cache_free+0x86/0x280 [ 194.478029] ? __sigqueue_free.part.29+0x7d/0xa0 [ 194.482790] ? __dequeue_signal+0x530/0x7d0 [ 194.487113] ? dequeue_signal+0xbc/0x620 [ 194.491174] ? get_signal+0x3f0/0x18e0 [ 194.495060] ? do_signal+0x9c/0x21c0 [ 194.498780] ? exit_to_usermode_loop+0x2e5/0x380 [ 194.503534] ? prepare_exit_to_usermode+0x342/0x3b0 [ 194.508588] ? trace_hardirqs_off+0xb8/0x2b0 [ 194.513011] ? kasan_check_read+0x11/0x20 [ 194.517178] ? do_raw_spin_unlock+0xa7/0x2f0 [ 194.521592] ? trace_hardirqs_on+0x2c0/0x2c0 [ 194.526012] ? kasan_check_write+0x14/0x20 [ 194.530248] ? graph_lock+0x170/0x170 [ 194.534049] ? trace_hardirqs_off+0xb8/0x2b0 [ 194.538460] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 194.543583] ? __lock_is_held+0xb5/0x140 [ 194.547660] ? __sigqueue_free.part.29+0x7d/0xa0 [ 194.552414] ? graph_lock+0x170/0x170 [ 194.556219] ? __sigqueue_free.part.29+0x7d/0xa0 [ 194.560979] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.566008] ? kmem_cache_free+0x246/0x280 [ 194.570246] ? __sigqueue_free.part.29+0x7d/0xa0 [ 194.575031] ? find_held_lock+0x36/0x1c0 [ 194.579115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.584750] ? proc_coredump_connector+0x4d0/0x610 [ 194.589691] ? proc_comm_connector+0x500/0x500 [ 194.594284] do_group_exit+0x177/0x440 [ 194.598180] ? __ia32_sys_exit+0x50/0x50 [ 194.602245] get_signal+0x851/0x18e0 [ 194.605966] ? ptrace_notify+0x130/0x130 [ 194.610120] ? force_sig_info+0x281/0x310 [ 194.614272] ? force_sigsegv+0x3d/0x110 [ 194.618253] ? signal_setup_done+0xc1/0x2f0 [ 194.622586] ? set_current_blocked+0x40/0x40 [ 194.627005] do_signal+0x9c/0x21c0 [ 194.630560] ? setup_sigcontext+0x7d0/0x7d0 [ 194.634890] ? bad_area+0x69/0x80 [ 194.638373] ? exit_to_usermode_loop+0x8c/0x380 [ 194.643060] exit_to_usermode_loop+0x2e5/0x380 [ 194.647654] ? syscall_slow_exit_work+0x490/0x490 [ 194.652500] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 194.657518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.662368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.667216] prepare_exit_to_usermode+0x342/0x3b0 [ 194.672059] ? perf_trace_sys_enter+0xb10/0xb10 [ 194.676737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.681584] ? page_fault+0x8/0x30 [ 194.685124] retint_user+0x8/0x18 [ 194.688579] RIP: 0033: (null) [ 194.692459] Code: Bad RIP value. [ 194.695820] RSP: 002b:0000000020000048 EFLAGS: 00010217 [ 194.701182] RAX: 0000000000000000 RBX: 00007f8922e7e6d4 RCX: 0000000000457099 [ 194.708473] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 194.715747] RBP: 00000000009300a0 R08: 0000000020000080 R09: 0000000000000000 [ 194.723025] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 194.730297] R13: 00000000004cbae8 R14: 00000000004c33c7 R15: 0000000000000000 [ 194.737981] Dumping ftrace buffer: [ 194.741629] (ftrace buffer empty) [ 194.745326] Kernel Offset: disabled [ 194.748960] Rebooting in 86400 seconds..