Starting mcstransd: [ 98.562683][ T26] audit: type=1400 audit(1581381344.552:37): avc: denied { watch } for pid=10529 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 98.586671][ T26] audit: type=1400 audit(1581381344.552:38): avc: denied { watch } for pid=10529 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 98.906508][ T26] audit: type=1800 audit(1581381344.902:39): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. 2020/02/11 00:35:52 fuzzer started syzkaller login: [ 106.940263][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 106.940278][ T26] audit: type=1400 audit(1581381352.932:42): avc: denied { map } for pid=10626 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/02/11 00:35:54 dialing manager at 10.128.0.26:37313 2020/02/11 00:35:54 syscalls: 2965 2020/02/11 00:35:54 code coverage: enabled 2020/02/11 00:35:54 comparison tracing: enabled 2020/02/11 00:35:54 extra coverage: enabled 2020/02/11 00:35:54 setuid sandbox: enabled 2020/02/11 00:35:54 namespace sandbox: enabled 2020/02/11 00:35:54 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/11 00:35:54 fault injection: enabled 2020/02/11 00:35:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/11 00:35:54 net packet injection: enabled 2020/02/11 00:35:54 net device setup: enabled 2020/02/11 00:35:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/11 00:35:54 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 108.962912][ T26] audit: type=1400 audit(1581381354.952:43): avc: denied { integrity } for pid=10641 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 00:38:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="0627e4f8fc4b7d3fc1d5039b6bcb623ecd161d010104b2b312ab1180e14fe5e30c772565fd4d23f998f1bb527dc2a94bf84600151ce1", 0x36}, {&(0x7f0000000240)="86506b7e443df875d0805d4a395e1f34ec850c4c07c18d2ae201a40a52db7f3e7f54ad470d2171446526cb65c8da5458e8f413f30de55ae1729a013f6e5d4a96582da62bc1edf7bca8c635d336e4cdfed89ca0e150b1c0cbedf796fd960763a0d82c95c18e802051eac6387714c363c792421aefbe1e649172a0906abaa357f506b46cbf25af578d3e54a75de12dd189e99ef769233ba1c6c4edf4755968f9cb23d3d0e6bba3221cb80347de71bb7a62c0a956380a6470cc2d009be9b8d78d997015", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000680)='^', 0x1}, {&(0x7f0000000740)="96", 0x1}], 0x2, &(0x7f0000003d40)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@mcast1]}}}], 0x28}}], 0x2, 0x0) [ 251.201345][ T26] audit: type=1400 audit(1581381497.192:44): avc: denied { map } for pid=10643 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22705 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 00:38:17 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) [ 251.416576][ T26] audit: type=1400 audit(1581381497.402:45): avc: denied { map } for pid=10626 comm="syz-fuzzer" path="/root/syzkaller-shm056178889" dev="sda1" ino=16495 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 251.418033][T10644] IPVS: ftp: loaded support on port[0] = 21 [ 251.587399][T10644] chnl_net:caif_netlink_parms(): no params data found 00:38:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x6a002, 0x0) sendto$inet6(r4, &(0x7f00000009c0), 0x3e5, 0xc001, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x400c000, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r6 = open(0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./bus\x00', 0x3, 0x0, 0x0, 0x2, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) socket$bt_hidp(0x1f, 0x3, 0x6) r7 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r7]) ioctl$RTC_AIE_OFF(r7, 0x7002) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x20) syz_mount_image$vfat(0x0, 0x0, 0x3, 0x4, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {&(0x7f0000000640)="e97dcf101d7250fd5c243d5a069af8eb6e4218c1cad0f27c5bff8826edf083d754c33f521c26cee15122b7cf8b24c3170bb2d4c4d879480e41496336df81f62bd1fafd62c9144d12a2265d4949e8d4ffedbba77a2d3448c9", 0x58, 0x1000}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32]) r8 = open(0x0, 0x0, 0x0) r9 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) prlimit64(r9, 0x0, 0x0, &(0x7f00000001c0)) ioctl$RTC_AIE_OFF(r8, 0x7002) r10 = accept$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) fchdir(r10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x5000, 0x6, 0x4}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x3) io_setup(0x3, &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x8}, 0xd8) listen(0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000640)=[{&(0x7f0000000200)="5800000014008fd427323b470c45b4560a067fffffff93004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="5800000014008fd427323b470c45b4560a067fffffff93004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ff", 0x3f}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r12, 0x0) recvmmsg(r12, &(0x7f00000006c0), 0x1591, 0x3e6, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r13, &(0x7f00000006c0), 0x1591, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) [ 251.735281][T10648] IPVS: ftp: loaded support on port[0] = 21 [ 251.752693][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.766922][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.785895][T10644] device bridge_slave_0 entered promiscuous mode [ 251.817104][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.824294][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.847227][T10644] device bridge_slave_1 entered promiscuous mode [ 251.882263][T10653] IPVS: ftp: loaded support on port[0] = 21 [ 251.908181][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.961732][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:38:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) r3 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x1, r3, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.052369][T10644] team0: Port device team_slave_0 added [ 252.077331][T10644] team0: Port device team_slave_1 added [ 252.083349][T10648] chnl_net:caif_netlink_parms(): no params data found [ 252.229506][T10653] chnl_net:caif_netlink_parms(): no params data found [ 252.275901][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.282996][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.311565][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.343526][T10657] IPVS: ftp: loaded support on port[0] = 21 [ 252.374863][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 00:38:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0x2}, 0xc) [ 252.384801][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.415292][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.537583][T10648] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.544690][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.577080][T10648] device bridge_slave_0 entered promiscuous mode [ 252.620861][T10648] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.633746][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.644748][T10648] device bridge_slave_1 entered promiscuous mode 00:38:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000600)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) [ 252.709156][T10644] device hsr_slave_0 entered promiscuous mode [ 252.748140][T10644] device hsr_slave_1 entered promiscuous mode [ 252.826561][T10663] IPVS: ftp: loaded support on port[0] = 21 [ 252.855549][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.863585][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.874431][T10653] device bridge_slave_0 entered promiscuous mode [ 252.896725][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.921196][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.928785][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.938316][T10653] device bridge_slave_1 entered promiscuous mode [ 252.950586][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.001914][T10648] team0: Port device team_slave_0 added [ 253.003522][T10667] IPVS: ftp: loaded support on port[0] = 21 [ 253.017137][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.039840][T10648] team0: Port device team_slave_1 added [ 253.058709][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.093201][T10653] team0: Port device team_slave_0 added [ 253.103537][T10653] team0: Port device team_slave_1 added [ 253.129942][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.137089][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.163188][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.178870][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.186819][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.213919][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.244927][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.252029][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.278074][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.293389][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.300525][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.327076][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.431367][T10657] chnl_net:caif_netlink_parms(): no params data found [ 253.499093][T10648] device hsr_slave_0 entered promiscuous mode [ 253.556341][T10648] device hsr_slave_1 entered promiscuous mode [ 253.625989][T10648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.633776][T10648] Cannot create hsr debugfs directory [ 253.677261][T10663] chnl_net:caif_netlink_parms(): no params data found [ 253.739108][T10653] device hsr_slave_0 entered promiscuous mode [ 253.796278][T10653] device hsr_slave_1 entered promiscuous mode [ 253.846299][T10653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.854009][T10653] Cannot create hsr debugfs directory [ 254.018213][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.025290][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.033757][T10657] device bridge_slave_0 entered promiscuous mode [ 254.057955][ T26] audit: type=1400 audit(1581381500.042:46): avc: denied { create } for pid=10644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 254.099772][ T26] audit: type=1400 audit(1581381500.042:47): avc: denied { write } for pid=10644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 254.100962][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.130748][ T26] audit: type=1400 audit(1581381500.042:48): avc: denied { read } for pid=10644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 254.133949][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.164227][T10663] device bridge_slave_0 entered promiscuous mode [ 254.171672][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.179116][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.187034][T10657] device bridge_slave_1 entered promiscuous mode [ 254.194008][T10644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.250921][T10644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.318575][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.325681][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.334427][T10663] device bridge_slave_1 entered promiscuous mode [ 254.357439][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.367977][T10644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.420570][T10644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.491653][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.582890][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.592301][T10667] chnl_net:caif_netlink_parms(): no params data found [ 254.608908][T10657] team0: Port device team_slave_0 added [ 254.631798][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.650729][T10657] team0: Port device team_slave_1 added [ 254.688689][T10648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.762997][T10663] team0: Port device team_slave_0 added [ 254.774813][T10663] team0: Port device team_slave_1 added [ 254.783459][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.790642][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.818114][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.829517][T10648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.891590][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.902305][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.928546][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.943065][T10648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.050456][T10648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.127636][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.134630][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.164157][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.175484][T10653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.254284][T10653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.314781][T10653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.373597][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.381770][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.407935][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.431390][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.438800][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.447439][T10667] device bridge_slave_0 entered promiscuous mode [ 255.457328][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.464406][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.475447][T10667] device bridge_slave_1 entered promiscuous mode [ 255.482818][T10653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.598867][T10657] device hsr_slave_0 entered promiscuous mode [ 255.636273][T10657] device hsr_slave_1 entered promiscuous mode [ 255.676219][T10657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.683851][T10657] Cannot create hsr debugfs directory [ 255.759138][T10663] device hsr_slave_0 entered promiscuous mode [ 255.826138][T10663] device hsr_slave_1 entered promiscuous mode [ 255.895969][T10663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.903587][T10663] Cannot create hsr debugfs directory [ 255.926833][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.981041][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.074624][T10667] team0: Port device team_slave_0 added [ 256.106910][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.118905][T10667] team0: Port device team_slave_1 added [ 256.187475][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.203573][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.210665][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.237015][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.250662][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.257681][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.289545][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.302436][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.311327][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.319237][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.327996][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.336738][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.343899][ T3219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.420436][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.430875][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.440357][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.449135][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.456257][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.464522][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.473366][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.539138][T10667] device hsr_slave_0 entered promiscuous mode [ 256.598030][T10667] device hsr_slave_1 entered promiscuous mode [ 256.637130][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.644731][T10667] Cannot create hsr debugfs directory [ 256.650476][T10663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.713312][T10663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.800382][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.813662][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.824035][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.832559][T10663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.931129][T10657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.968451][T10663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.028500][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.037193][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.053971][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.064583][T10657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.124555][T10657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.208122][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.216496][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.233443][T10644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.245097][T10644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.256996][T10657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.295700][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.304218][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.358994][T10648] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.377714][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.386669][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.394327][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.429524][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.457578][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.465049][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.473228][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.485546][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.494059][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.501154][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.512301][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.521315][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.529989][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.539060][ T2867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.550189][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.565519][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.589233][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.597801][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.629373][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.640863][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.688076][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.702408][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.711283][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.718389][ T3219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.727306][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.736524][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.744849][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.752041][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.759932][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.769383][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.778029][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.789099][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.798075][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.806145][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.851863][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.862776][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.873445][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.884882][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.893704][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.904067][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.917919][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.934018][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.943721][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.992541][T10648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.005729][T10648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.014368][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.024223][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.032740][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.041838][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.050628][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.059081][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.085511][T10653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.097083][T10653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.109604][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.127329][T10667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.158574][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.166954][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.175018][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.183252][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.193669][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.201460][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.222894][T10644] device veth0_vlan entered promiscuous mode [ 258.244576][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.254913][T10667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.294814][T10667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.356386][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.364213][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.378745][T10667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.436450][T10644] device veth1_vlan entered promiscuous mode [ 258.450270][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.460639][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.469788][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.476896][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.486665][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.494142][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.501663][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.509543][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.533823][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.547499][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.555415][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.565717][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.574265][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.581581][ T2867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.592890][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.634990][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.659090][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.671243][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.680504][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.691664][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.701649][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.744847][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.758126][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.767259][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.775462][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.784595][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.793645][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.827916][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.840800][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.849248][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.859232][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.868108][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.875746][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.885332][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.904744][T10648] device veth0_vlan entered promiscuous mode [ 258.920493][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.943712][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.952426][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.961603][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.970986][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.980549][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.988982][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.003349][T10648] device veth1_vlan entered promiscuous mode [ 259.011763][T10644] device veth0_macvtap entered promiscuous mode [ 259.055289][T10644] device veth1_macvtap entered promiscuous mode [ 259.065156][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.075957][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.083811][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.092316][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.101489][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.110005][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.117226][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.161933][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.171415][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.179893][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.189754][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.198564][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.205615][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.213743][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.222825][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.231251][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.277354][T10653] device veth0_vlan entered promiscuous mode [ 259.292473][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.301710][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.309609][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.318442][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.326155][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.333566][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.342643][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.351831][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.364132][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.374239][T10663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.396685][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.411438][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.428854][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.440163][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.449190][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.464285][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.487058][T10648] device veth0_macvtap entered promiscuous mode [ 259.498726][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.508037][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.517841][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.527296][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.536426][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.556287][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.564613][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.577794][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.586405][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.617370][T10653] device veth1_vlan entered promiscuous mode [ 259.625446][T10648] device veth1_macvtap entered promiscuous mode [ 259.641806][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.650559][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.663131][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.742310][T10657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.762702][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.859153][ T26] audit: type=1400 audit(1581381505.852:49): avc: denied { associate } for pid=10644 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 259.947809][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.956926][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.965270][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.972364][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.980604][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.988409][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.995933][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.004438][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.013529][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.022216][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.030752][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.037851][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.045864][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.063247][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.075729][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.093712][T10653] device veth0_macvtap entered promiscuous mode [ 260.138936][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.171125][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.188352][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.201614][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.210531][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.222226][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.231179][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.245034][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.256588][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.268642][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1 00:38:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.297302][T10653] device veth1_macvtap entered promiscuous mode [ 260.307064][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.315149][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.327262][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.336139][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.344995][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.354349][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.364324][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.379699][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 00:38:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.391549][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.404691][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.419277][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.460745][T10663] device veth0_vlan entered promiscuous mode 00:38:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.578963][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.596618][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 00:38:26 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.639241][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.668397][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.682076][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:38:26 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.710603][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.729799][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.742582][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.761056][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.780348][T10663] device veth1_vlan entered promiscuous mode 00:38:26 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 260.866368][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.874388][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.896821][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.905561][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.926741][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.948565][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.960099][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.970415][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.981326][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.993534][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.050319][T10667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.061998][T10667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.070317][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.080171][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.088543][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.097245][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.105992][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.114152][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.134499][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.142697][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.150775][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.160957][T10657] device veth0_vlan entered promiscuous mode [ 261.302394][T10657] device veth1_vlan entered promiscuous mode [ 261.311347][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.317047][T10714] llc_conn_state_process: llc_conn_service failed [ 261.319735][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.340042][T10714] llc_conn_state_process: llc_conn_service failed 00:38:27 executing program 1: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @loopback}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='auxv\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x4, 0x1) write$P9_RGETATTR(r0, 0x0, 0x0) getegid() openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write(r4, &(0x7f0000000100), 0x2d4c83d8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{}, 'syz1\x00'}) [ 261.354133][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.364709][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.384646][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.452650][ T26] audit: type=1400 audit(1581381507.442:50): avc: denied { open } for pid=10718 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 261.483252][T10663] device veth0_macvtap entered promiscuous mode [ 261.567254][T10663] device veth1_macvtap entered promiscuous mode [ 261.581950][ T26] audit: type=1400 audit(1581381507.442:51): avc: denied { confidentiality } for pid=10718 comm="syz-executor.1" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 261.629483][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.652969][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.699784][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.736828][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.760538][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.771819][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.783593][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.794906][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.805164][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.815941][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.829859][T10663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.848501][ T26] audit: type=1400 audit(1581381507.832:52): avc: denied { kernel } for pid=10726 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 261.880892][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.941782][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.993131][T10657] device veth0_macvtap entered promiscuous mode [ 262.010782][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.045974][ T26] audit: type=1400 audit(1581381508.032:53): avc: denied { getrlimit } for pid=10726 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 [ 262.060504][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.087605][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.099294][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.109267][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.120249][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.131721][T10663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.147117][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.168887][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.182639][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.197386][T10657] device veth1_macvtap entered promiscuous mode [ 262.206254][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.214160][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.237221][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.337621][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.348328][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.358213][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.368859][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.378761][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.389930][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.400664][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.411255][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.422602][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.438907][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.448858][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.457596][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.466356][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.475126][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.483537][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.491650][ T0] NOHZ: local_softirq_pending 08 [ 262.527159][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.540628][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.550588][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.561770][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.571777][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.582830][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.597011][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.608111][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.637915][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.647732][T10667] device veth0_vlan entered promiscuous mode [ 262.735984][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.744665][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.829810][T10667] device veth1_vlan entered promiscuous mode 00:38:28 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 263.153975][T10667] device veth0_macvtap entered promiscuous mode [ 263.169942][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.180820][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.190269][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.199412][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.209960][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.224792][T10667] device veth1_macvtap entered promiscuous mode [ 263.254597][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.267232][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.309603][T10759] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 263.312682][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.350004][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.360805][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.371850][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.382073][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.394028][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.406154][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.416702][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.431137][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.461480][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.472034][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.499345][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.511602][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.523609][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.534210][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.544609][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:38:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(r1, &(0x7f0000000340)=@known='system.posix_acl_default\x00') openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r3 = syz_open_pts(r2, 0x1) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x6) dup3(r3, r2, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 263.555156][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.585006][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.612145][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.615802][ C0] hrtimer: interrupt took 46998 ns [ 263.646255][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.697825][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.714552][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.729593][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.746810][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:38:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r2 = syz_open_pts(r1, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x6) dup3(r2, r1, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) open(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r2 = syz_open_pts(r1, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffdc9) dup3(r2, r1, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:30 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:30 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(r1, &(0x7f0000000340)=@known='system.posix_acl_default\x00') openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r3 = syz_open_pts(r2, 0x1) fcntl$setstatus(r3, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x6) dup3(r3, r2, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@broadcast, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 00:38:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(r1, &(0x7f0000000340)=@known='system.posix_acl_default\x00') openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r3 = syz_open_pts(r2, 0x1) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x6) dup3(r3, r2, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:30 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 00:38:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:38:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x521240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f20c0c00f000000440f22c0b949090000f3e1000fae44ee08", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x7bf23000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = fcntl$dupfd(r4, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) 00:38:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r3 = syz_open_pts(r2, 0x1) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x6) dup3(r3, r2, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 00:38:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) [ 264.873780][ T26] audit: type=1400 audit(1581381510.862:54): avc: denied { map } for pid=10820 comm="syz-executor.4" path="pipe:[40441]" dev="pipefs" ino=40441 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 00:38:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x521240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f20c0c00f000000440f22c0b949090000f3e1000fae44ee08", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x7bf23000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = fcntl$dupfd(r4, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) 00:38:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:31 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x521240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f20c0c00f000000440f22c0b949090000f3e1000fae44ee08", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x7bf23000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = fcntl$dupfd(r4, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) 00:38:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 00:38:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 00:38:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005020000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000070000000a000100726f75746500000044000200400006003c0001000b000000880500000000000028ff028024000200004000000000000000000000000000000000000000000000000000000000000004000600"], 0x74}}, 0x0) 00:38:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4c}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4c}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:32 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x521240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f20c0c00f000000440f22c0b949090000f3e1000fae44ee08", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x7bf23000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = fcntl$dupfd(r4, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) 00:38:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x24e0, @ipv4={[], [], @local}, 0x6}}, 0x80000000, 0x1, 0xd2, 0x1, 0x104, 0x8, 0x4d}, &(0x7f00000001c0)=0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) 00:38:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:32 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(r0, &(0x7f0000000340)=@known='system.posix_acl_default\x00') openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r2 = syz_open_pts(r1, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(r2, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x6) [ 266.200055][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 266.284853][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x39) bind$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r2 = syz_open_pts(r1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x6) 00:38:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:32 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) open(&(0x7f0000000b80)='./file0\x00', 0x200c2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=@known='system.posix_acl_default\x00') openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00001000800000000000000000003fde00"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x6) dup3(r1, r0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) 00:38:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000633377fbac141411e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 00:38:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) [ 266.946277][ T26] audit: type=1400 audit(1581381512.942:55): avc: denied { prog_load } for pid=10930 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 267.094520][ T26] audit: type=1400 audit(1581381512.942:56): avc: denied { write } for pid=10879 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 00:38:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4c}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) [ 267.289252][ T26] audit: type=1400 audit(1581381513.262:57): avc: denied { prog_run } for pid=10930 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 00:38:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 00:38:33 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0xffffffffffffffff, 0x11e) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xfb, "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"}, &(0x7f00000002c0)=0x11f) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x4, @dev}, 0x4a) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c04f6ca49e4080000004f27e339"], 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000008f40)) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') [ 267.610960][ T26] audit: type=1400 audit(1581381513.602:58): avc: denied { name_connect } for pid=10959 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 00:38:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 00:38:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 00:38:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="cb", 0x19fff}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7b, &(0x7f0000000400), &(0x7f0000000440)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 00:38:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', "5d9b88e5596e36536f873a6415034a1fbe9aeeafeda6b66d58cc665e43b76fe2", "9979f90a71788f75457798d0b0db53eb957b7700c70e3307e974ae5a66c57051"}}}]}, 0x268}}, 0x0) 00:38:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 00:38:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 00:38:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) [ 268.046377][ T26] audit: type=1400 audit(1581381514.042:59): avc: denied { create } for pid=10979 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:38:34 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) 00:38:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 268.187171][ T26] audit: type=1400 audit(1581381514.082:60): avc: denied { write } for pid=10979 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:38:34 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="cb", 0x19fff}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 00:38:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb92e0a480e0a0f000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) 00:38:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="cb", 0x19fff}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7b, &(0x7f0000000400), &(0x7f0000000440)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 00:38:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300ffff00000000000007000000000100"/37], 0x6) 00:38:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 00:38:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 00:38:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000002c0)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000300)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000001400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="080001006d3089aa38d440edf2dba8f9daade4dca46fc0693515535ecc2e697954276027568cddd7", @ANYPTR, @ANYBLOB="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", @ANYBLOB], 0x6, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x3, 0x8000, {}, {}, 0x800, 0xe000000}) llistxattr(0x0, &(0x7f00000001c0)=""/134, 0x86) syz_open_procfs(0x0, 0x0) 00:38:35 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 00:38:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000000}, 0x0) 00:38:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 269.882393][T11052] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/4' not defined. 00:38:35 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000002c0)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x7, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) llistxattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 00:38:36 executing program 4: 00:38:36 executing program 2: 00:38:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:36 executing program 4: 00:38:36 executing program 1: 00:38:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 00:38:36 executing program 3: 00:38:36 executing program 1: 00:38:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:36 executing program 4: 00:38:36 executing program 2: 00:38:36 executing program 3: 00:38:36 executing program 2: 00:38:36 executing program 1: 00:38:36 executing program 4: 00:38:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:38:37 executing program 1: 00:38:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 00:38:37 executing program 2: 00:38:37 executing program 3: 00:38:37 executing program 0: 00:38:37 executing program 4: 00:38:37 executing program 1: 00:38:37 executing program 2: 00:38:37 executing program 4: 00:38:37 executing program 3: 00:38:37 executing program 1: 00:38:37 executing program 0: 00:38:38 executing program 2: 00:38:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:38 executing program 3: 00:38:38 executing program 0: 00:38:38 executing program 1: 00:38:38 executing program 4: 00:38:38 executing program 2: 00:38:38 executing program 4: 00:38:38 executing program 1: 00:38:38 executing program 0: 00:38:38 executing program 2: 00:38:38 executing program 3: 00:38:38 executing program 4: 00:38:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:39 executing program 1: 00:38:39 executing program 3: 00:38:39 executing program 2: 00:38:39 executing program 0: 00:38:39 executing program 4: 00:38:39 executing program 0: 00:38:39 executing program 2: 00:38:39 executing program 4: 00:38:39 executing program 1: 00:38:39 executing program 3: 00:38:39 executing program 2: 00:38:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:39 executing program 1: 00:38:39 executing program 4: 00:38:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:39 executing program 0: 00:38:39 executing program 2: 00:38:39 executing program 4: 00:38:39 executing program 1: [ 273.958281][T11199] [ 273.960689][T11199] ===================================================== [ 273.967632][T11199] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 273.975086][T11199] 5.6.0-rc1-syzkaller #0 Not tainted [ 273.980358][T11199] ----------------------------------------------------- [ 273.987377][T11199] syz-executor.3/11199 [HC0[0]:SC0[2]:HE1:SE0] is trying to acquire: [ 273.995436][T11199] ffff8880992a8098 (&(&s->cache_lock)->rlock){+.+.}, at: sidtab_sid2str_put.part.0+0x36/0x880 [ 274.005776][T11199] [ 274.005776][T11199] and this task is already holding: [ 274.013153][T11199] ffffffff89a64588 (&(&nf_conntrack_locks[i])->rlock){+.-.}, at: nf_conntrack_lock+0x17/0x70 [ 274.023406][T11199] which would create a new lock dependency: [ 274.029274][T11199] (&(&nf_conntrack_locks[i])->rlock){+.-.} -> (&(&s->cache_lock)->rlock){+.+.} [ 274.038284][T11199] [ 274.038284][T11199] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 274.047711][T11199] (&(&nf_conntrack_locks[i])->rlock){+.-.} [ 274.047721][T11199] [ 274.047721][T11199] ... which became SOFTIRQ-irq-safe at: [ 274.061354][T11199] lock_acquire+0x190/0x410 [ 274.066020][T11199] _raw_spin_lock+0x2f/0x40 [ 274.070602][T11199] nf_conntrack_lock+0x17/0x70 [ 274.075446][T11199] nf_conntrack_double_lock.isra.0+0xac/0x100 [ 274.081597][T11199] __nf_conntrack_confirm+0x252/0x1710 [ 274.087131][T11199] nf_confirm+0x3e7/0x4d0 [ 274.091539][T11199] ipv4_confirm+0x14c/0x240 [ 274.096113][T11199] nf_hook_slow+0xbc/0x1e0 [ 274.100642][T11199] ip_local_deliver+0x352/0x520 [ 274.105566][T11199] ip_sublist_rcv_finish+0x9b/0x2d0 [ 274.110836][T11199] ip_sublist_rcv+0x5a6/0xa20 [ 274.115575][T11199] ip_list_rcv+0x37e/0x4bf [ 274.120126][T11199] __netif_receive_skb_list_core+0x5fc/0x9d0 [ 274.126177][T11199] netif_receive_skb_list_internal+0x7eb/0xe50 [ 274.132460][T11199] gro_normal_list.part.0+0x1e/0xb0 [ 274.137739][T11199] napi_complete_done+0x208/0x510 [ 274.142896][T11199] virtqueue_napi_complete+0x31/0xa0 [ 274.148257][T11199] virtnet_poll+0xbad/0xe90 [ 274.152827][T11199] net_rx_action+0x508/0x1120 [ 274.157575][T11199] __do_softirq+0x262/0x98c [ 274.162258][T11199] irq_exit+0x19b/0x1e0 [ 274.166500][T11199] do_IRQ+0xe3/0x280 [ 274.170474][T11199] ret_from_intr+0x0/0x36 [ 274.174884][T11199] native_safe_halt+0xe/0x10 [ 274.179595][T11199] arch_cpu_idle+0xa/0x10 [ 274.184007][T11199] default_idle_call+0x84/0xb0 [ 274.188912][T11199] do_idle+0x3c8/0x6e0 [ 274.193055][T11199] cpu_startup_entry+0x1b/0x20 [ 274.197944][T11199] start_secondary+0x2f4/0x410 [ 274.202869][T11199] secondary_startup_64+0xa4/0xb0 [ 274.207954][T11199] [ 274.207954][T11199] to a SOFTIRQ-irq-unsafe lock: [ 274.214948][T11199] (&(&s->cache_lock)->rlock){+.+.} [ 274.214957][T11199] [ 274.214957][T11199] ... which became SOFTIRQ-irq-unsafe at: [ 274.227988][T11199] ... [ 274.228003][T11199] lock_acquire+0x190/0x410 [ 274.235150][T11199] _raw_spin_lock+0x2f/0x40 [ 274.239724][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 274.245404][T11199] sidtab_sid2str_put+0xa0/0xc0 [ 274.250334][T11199] sidtab_entry_to_string+0xf2/0x110 [ 274.255691][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 274.261657][T11199] security_sid_to_context+0x34/0x40 [ 274.267072][T11199] avc_audit_post_callback+0x102/0x790 [ 274.272653][T11199] common_lsm_audit+0x5ac/0x1e00 [ 274.277663][T11199] slow_avc_audit+0x16a/0x1f0 [ 274.282407][T11199] avc_has_perm+0x543/0x610 [ 274.286974][T11199] inode_has_perm+0x1a8/0x230 [ 274.291726][T11199] selinux_mmap_file+0x10a/0x1d0 [ 274.296787][T11199] security_mmap_file+0xa4/0x1e0 [ 274.301816][T11199] vm_mmap_pgoff+0xf0/0x230 [ 274.306391][T11199] vm_mmap+0x94/0xc0 [ 274.310410][T11199] elf_map+0x23a/0x2b0 [ 274.314668][T11199] load_elf_binary+0xc6b/0x4b30 [ 274.319645][T11199] search_binary_handler+0x16d/0x570 [ 274.325007][T11199] __do_execve_file.isra.0+0x12fc/0x2270 [ 274.330763][T11199] __x64_sys_execve+0x8f/0xc0 [ 274.335555][T11199] do_syscall_64+0xfa/0x790 [ 274.340128][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.346080][T11199] [ 274.346080][T11199] other info that might help us debug this: [ 274.346080][T11199] [ 274.356293][T11199] Possible interrupt unsafe locking scenario: [ 274.356293][T11199] [ 274.364598][T11199] CPU0 CPU1 [ 274.369953][T11199] ---- ---- [ 274.375322][T11199] lock(&(&s->cache_lock)->rlock); [ 274.380501][T11199] local_irq_disable(); [ 274.387236][T11199] lock(&(&nf_conntrack_locks[i])->rlock); [ 274.395802][T11199] lock(&(&s->cache_lock)->rlock); [ 274.403503][T11199] [ 274.406936][T11199] lock(&(&nf_conntrack_locks[i])->rlock); [ 274.412987][T11199] [ 274.412987][T11199] *** DEADLOCK *** [ 274.412987][T11199] [ 274.421119][T11199] 4 locks held by syz-executor.3/11199: [ 274.426733][T11199] #0: ffffffff8c3f1568 (&table[i].mutex){+.+.}, at: nfnetlink_rcv_msg+0x9ee/0xfb0 [ 274.436016][T11199] #1: ffff8880a8e6e5d8 (nlk_cb_mutex-NETFILTER){+.+.}, at: netlink_dump+0xe7/0xfb0 [ 274.445440][T11199] #2: ffffffff89a64588 (&(&nf_conntrack_locks[i])->rlock){+.-.}, at: nf_conntrack_lock+0x17/0x70 [ 274.456016][T11199] #3: ffffffff8ba218c8 (&selinux_ss.policy_rwlock){.+.?}, at: security_sid_to_context_core+0x1ca/0x3c0 [ 274.467175][T11199] [ 274.467175][T11199] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 274.477576][T11199] -> (&(&nf_conntrack_locks[i])->rlock){+.-.} { [ 274.483815][T11199] HARDIRQ-ON-W at: [ 274.487788][T11199] lock_acquire+0x190/0x410 [ 274.493932][T11199] _raw_spin_lock+0x2f/0x40 [ 274.500076][T11199] nf_conntrack_lock+0x17/0x70 [ 274.506554][T11199] nf_ct_iterate_cleanup+0x1d2/0x4e0 [ 274.513470][T11199] nf_ct_iterate_destroy+0x12e/0x160 [ 274.520393][T11199] nf_conntrack_helper_unregister+0x111/0x160 [ 274.528105][T11199] nf_conntrack_helpers_register+0xaa/0xe0 [ 274.535612][T11199] nf_conntrack_sip_init+0x266/0x2a4 [ 274.542539][T11199] do_one_initcall+0x120/0x820 [ 274.549015][T11199] kernel_init_freeable+0x522/0x5d0 [ 274.555941][T11199] kernel_init+0x12/0x1bf [ 274.561911][T11199] ret_from_fork+0x24/0x30 [ 274.567965][T11199] IN-SOFTIRQ-W at: [ 274.571936][T11199] lock_acquire+0x190/0x410 [ 274.578089][T11199] _raw_spin_lock+0x2f/0x40 [ 274.584237][T11199] nf_conntrack_lock+0x17/0x70 [ 274.590637][T11199] nf_conntrack_double_lock.isra.0+0xac/0x100 [ 274.598342][T11199] __nf_conntrack_confirm+0x252/0x1710 [ 274.605431][T11199] nf_confirm+0x3e7/0x4d0 [ 274.611401][T11199] ipv4_confirm+0x14c/0x240 [ 274.617544][T11199] nf_hook_slow+0xbc/0x1e0 [ 274.623596][T11199] ip_local_deliver+0x352/0x520 [ 274.630088][T11199] ip_sublist_rcv_finish+0x9b/0x2d0 [ 274.636939][T11199] ip_sublist_rcv+0x5a6/0xa20 [ 274.643248][T11199] ip_list_rcv+0x37e/0x4bf [ 274.649297][T11199] __netif_receive_skb_list_core+0x5fc/0x9d0 [ 274.656917][T11199] netif_receive_skb_list_internal+0x7eb/0xe50 [ 274.664724][T11199] gro_normal_list.part.0+0x1e/0xb0 [ 274.671560][T11199] napi_complete_done+0x208/0x510 [ 274.678234][T11199] virtqueue_napi_complete+0x31/0xa0 [ 274.685171][T11199] virtnet_poll+0xbad/0xe90 [ 274.691315][T11199] net_rx_action+0x508/0x1120 [ 274.697625][T11199] __do_softirq+0x262/0x98c [ 274.703765][T11199] irq_exit+0x19b/0x1e0 [ 274.709559][T11199] do_IRQ+0xe3/0x280 [ 274.715098][T11199] ret_from_intr+0x0/0x36 [ 274.721064][T11199] native_safe_halt+0xe/0x10 [ 274.727295][T11199] arch_cpu_idle+0xa/0x10 [ 274.733269][T11199] default_idle_call+0x84/0xb0 [ 274.739668][T11199] do_idle+0x3c8/0x6e0 [ 274.745367][T11199] cpu_startup_entry+0x1b/0x20 [ 274.751768][T11199] start_secondary+0x2f4/0x410 [ 274.758175][T11199] secondary_startup_64+0xa4/0xb0 [ 274.764835][T11199] INITIAL USE at: [ 274.768728][T11199] lock_acquire+0x190/0x410 [ 274.774771][T11199] _raw_spin_lock+0x2f/0x40 [ 274.780816][T11199] nf_conntrack_lock+0x17/0x70 [ 274.787142][T11199] nf_ct_iterate_cleanup+0x1d2/0x4e0 [ 274.793981][T11199] nf_ct_iterate_destroy+0x12e/0x160 [ 274.800810][T11199] nf_conntrack_helper_unregister+0x111/0x160 [ 274.808427][T11199] nf_conntrack_helpers_register+0xaa/0xe0 [ 274.815791][T11199] nf_conntrack_sip_init+0x266/0x2a4 [ 274.822626][T11199] do_one_initcall+0x120/0x820 [ 274.828935][T11199] kernel_init_freeable+0x522/0x5d0 [ 274.835681][T11199] kernel_init+0x12/0x1bf [ 274.841561][T11199] ret_from_fork+0x24/0x30 [ 274.847517][T11199] } [ 274.850054][T11199] ... key at: [] __key.80038+0x0/0x40 [ 274.857492][T11199] ... acquired at: [ 274.861293][T11199] lock_acquire+0x190/0x410 [ 274.865954][T11199] _raw_spin_lock+0x2f/0x40 [ 274.870614][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 274.876321][T11199] sidtab_sid2str_get+0x3b5/0x66e [ 274.881511][T11199] sidtab_entry_to_string+0x37/0x110 [ 274.886956][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 274.893000][T11199] security_sid_to_context+0x34/0x40 [ 274.898440][T11199] selinux_secid_to_secctx+0x2d/0x40 [ 274.903877][T11199] security_secid_to_secctx+0x75/0xc0 [ 274.909473][T11199] ctnetlink_dump_secctx.isra.0+0x8c/0x330 [ 274.915448][T11199] ctnetlink_fill_info+0x750/0xd40 [ 274.920727][T11199] ctnetlink_dump_table+0x68c/0x1130 [ 274.926177][T11199] netlink_dump+0x558/0xfb0 [ 274.930831][T11199] __netlink_dump_start+0x673/0x930 [ 274.936183][T11199] ctnetlink_get_conntrack+0x55e/0x6a0 [ 274.941794][T11199] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 274.946887][T11199] netlink_rcv_skb+0x177/0x450 [ 274.951804][T11199] nfnetlink_rcv+0x1ba/0x460 [ 274.956552][T11199] netlink_unicast+0x59e/0x7e0 [ 274.961481][T11199] netlink_sendmsg+0x91c/0xea0 [ 274.966466][T11199] sock_sendmsg+0xd7/0x130 [ 274.971051][T11199] ____sys_sendmsg+0x753/0x880 [ 274.975972][T11199] ___sys_sendmsg+0x100/0x170 [ 274.980804][T11199] __sys_sendmsg+0x105/0x1d0 [ 274.985629][T11199] __x64_sys_sendmsg+0x78/0xb0 [ 274.990581][T11199] do_syscall_64+0xfa/0x790 [ 274.995240][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.001282][T11199] [ 275.003605][T11199] [ 275.003605][T11199] the dependencies between the lock to be acquired [ 275.003609][T11199] and SOFTIRQ-irq-unsafe lock: [ 275.017183][T11199] -> (&(&s->cache_lock)->rlock){+.+.} { [ 275.022715][T11199] HARDIRQ-ON-W at: [ 275.026690][T11199] lock_acquire+0x190/0x410 [ 275.032836][T11199] _raw_spin_lock+0x2f/0x40 [ 275.038982][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 275.046174][T11199] sidtab_sid2str_put+0xa0/0xc0 [ 275.053001][T11199] sidtab_entry_to_string+0xf2/0x110 [ 275.059925][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 275.067452][T11199] security_sid_to_context+0x34/0x40 [ 275.074369][T11199] avc_audit_post_callback+0x102/0x790 [ 275.081472][T11199] common_lsm_audit+0x5ac/0x1e00 [ 275.088052][T11199] slow_avc_audit+0x16a/0x1f0 [ 275.094373][T11199] avc_has_perm+0x543/0x610 [ 275.100516][T11199] inode_has_perm+0x1a8/0x230 [ 275.106824][T11199] selinux_mmap_file+0x10a/0x1d0 [ 275.113406][T11199] security_mmap_file+0xa4/0x1e0 [ 275.119982][T11199] vm_mmap_pgoff+0xf0/0x230 [ 275.126124][T11199] vm_mmap+0x94/0xc0 [ 275.131659][T11199] elf_map+0x23a/0x2b0 [ 275.137360][T11199] load_elf_binary+0xc6b/0x4b30 [ 275.143955][T11199] search_binary_handler+0x16d/0x570 [ 275.150876][T11199] __do_execve_file.isra.0+0x12fc/0x2270 [ 275.158227][T11199] __x64_sys_execve+0x8f/0xc0 [ 275.164544][T11199] do_syscall_64+0xfa/0x790 [ 275.170697][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.178215][T11199] SOFTIRQ-ON-W at: [ 275.182207][T11199] lock_acquire+0x190/0x410 [ 275.188367][T11199] _raw_spin_lock+0x2f/0x40 [ 275.194520][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 275.201697][T11199] sidtab_sid2str_put+0xa0/0xc0 [ 275.208184][T11199] sidtab_entry_to_string+0xf2/0x110 [ 275.215111][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 275.222632][T11199] security_sid_to_context+0x34/0x40 [ 275.229557][T11199] avc_audit_post_callback+0x102/0x790 [ 275.236660][T11199] common_lsm_audit+0x5ac/0x1e00 [ 275.243238][T11199] slow_avc_audit+0x16a/0x1f0 [ 275.249558][T11199] avc_has_perm+0x543/0x610 [ 275.255713][T11199] inode_has_perm+0x1a8/0x230 [ 275.262046][T11199] selinux_mmap_file+0x10a/0x1d0 [ 275.268616][T11199] security_mmap_file+0xa4/0x1e0 [ 275.275193][T11199] vm_mmap_pgoff+0xf0/0x230 [ 275.282289][T11199] vm_mmap+0x94/0xc0 [ 275.287827][T11199] elf_map+0x23a/0x2b0 [ 275.293537][T11199] load_elf_binary+0xc6b/0x4b30 [ 275.300033][T11199] search_binary_handler+0x16d/0x570 [ 275.306958][T11199] __do_execve_file.isra.0+0x12fc/0x2270 [ 275.314237][T11199] __x64_sys_execve+0x8f/0xc0 [ 275.320555][T11199] do_syscall_64+0xfa/0x790 [ 275.326707][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.334243][T11199] INITIAL USE at: [ 275.338132][T11199] lock_acquire+0x190/0x410 [ 275.344681][T11199] _raw_spin_lock+0x2f/0x40 [ 275.350734][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 275.357833][T11199] sidtab_sid2str_put+0xa0/0xc0 [ 275.364239][T11199] sidtab_entry_to_string+0xf2/0x110 [ 275.371081][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 275.378519][T11199] security_sid_to_context+0x34/0x40 [ 275.385368][T11199] avc_audit_post_callback+0x102/0x790 [ 275.392388][T11199] common_lsm_audit+0x5ac/0x1e00 [ 275.398888][T11199] slow_avc_audit+0x16a/0x1f0 [ 275.405133][T11199] avc_has_perm+0x543/0x610 [ 275.411191][T11199] inode_has_perm+0x1a8/0x230 [ 275.417431][T11199] selinux_mmap_file+0x10a/0x1d0 [ 275.423937][T11199] security_mmap_file+0xa4/0x1e0 [ 275.430430][T11199] vm_mmap_pgoff+0xf0/0x230 [ 275.436498][T11199] vm_mmap+0x94/0xc0 [ 275.441964][T11199] elf_map+0x23a/0x2b0 [ 275.447619][T11199] load_elf_binary+0xc6b/0x4b30 [ 275.454034][T11199] search_binary_handler+0x16d/0x570 [ 275.460870][T11199] __do_execve_file.isra.0+0x12fc/0x2270 [ 275.468059][T11199] __x64_sys_execve+0x8f/0xc0 [ 275.474305][T11199] do_syscall_64+0xfa/0x790 [ 275.480356][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.487785][T11199] } [ 275.490320][T11199] ... key at: [] __key.69644+0x0/0x40 [ 275.497763][T11199] ... acquired at: [ 275.501559][T11199] lock_acquire+0x190/0x410 [ 275.506221][T11199] _raw_spin_lock+0x2f/0x40 [ 275.510958][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 275.516664][T11199] sidtab_sid2str_get+0x3b5/0x66e [ 275.521845][T11199] sidtab_entry_to_string+0x37/0x110 [ 275.527295][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 275.533355][T11199] security_sid_to_context+0x34/0x40 [ 275.538799][T11199] selinux_secid_to_secctx+0x2d/0x40 [ 275.544254][T11199] security_secid_to_secctx+0x75/0xc0 [ 275.549796][T11199] ctnetlink_dump_secctx.isra.0+0x8c/0x330 [ 275.555884][T11199] ctnetlink_fill_info+0x750/0xd40 [ 275.561162][T11199] ctnetlink_dump_table+0x68c/0x1130 [ 275.566710][T11199] netlink_dump+0x558/0xfb0 [ 275.571378][T11199] __netlink_dump_start+0x673/0x930 [ 275.576732][T11199] ctnetlink_get_conntrack+0x55e/0x6a0 [ 275.582344][T11199] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 275.587446][T11199] netlink_rcv_skb+0x177/0x450 [ 275.592373][T11199] nfnetlink_rcv+0x1ba/0x460 [ 275.597118][T11199] netlink_unicast+0x59e/0x7e0 [ 275.602036][T11199] netlink_sendmsg+0x91c/0xea0 [ 275.606965][T11199] sock_sendmsg+0xd7/0x130 [ 275.611545][T11199] ____sys_sendmsg+0x753/0x880 [ 275.616470][T11199] ___sys_sendmsg+0x100/0x170 [ 275.621302][T11199] __sys_sendmsg+0x105/0x1d0 [ 275.626053][T11199] __x64_sys_sendmsg+0x78/0xb0 [ 275.630994][T11199] do_syscall_64+0xfa/0x790 [ 275.635671][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.641802][T11199] [ 275.644110][T11199] [ 275.644110][T11199] stack backtrace: [ 275.649992][T11199] CPU: 1 PID: 11199 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0 [ 275.658648][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.668689][T11199] Call Trace: [ 275.672058][T11199] dump_stack+0x197/0x210 [ 275.676376][T11199] check_irq_usage.cold+0x586/0x6fe [ 275.681554][T11199] ? check_usage_forwards+0x330/0x330 [ 275.686925][T11199] ? lockdep_on+0x50/0x50 [ 275.691250][T11199] ? check_path+0x26/0x40 [ 275.695641][T11199] ? __kasan_check_read+0x11/0x20 [ 275.700658][T11199] ? check_noncircular+0x16d/0x3e0 [ 275.705753][T11199] ? print_circular_bug.isra.0+0x230/0x230 [ 275.711543][T11199] ? save_stack+0x23/0x90 [ 275.715870][T11199] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 275.721680][T11199] ? kasan_kmalloc+0x9/0x10 [ 275.726177][T11199] ? __kmalloc_track_caller+0x15f/0x760 [ 275.731725][T11199] ? alloc_list_entry+0xc0/0xc0 [ 275.736643][T11199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.742943][T11199] ? find_first_zero_bit+0x9a/0xc0 [ 275.748093][T11199] __lock_acquire+0x25b4/0x4a00 [ 275.752946][T11199] ? __lock_acquire+0x25b4/0x4a00 [ 275.757961][T11199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.764053][T11199] ? mark_held_locks+0xf0/0xf0 [ 275.768891][T11199] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 275.775045][T11199] lock_acquire+0x190/0x410 [ 275.779584][T11199] ? sidtab_sid2str_put.part.0+0x36/0x880 [ 275.785320][T11199] _raw_spin_lock+0x2f/0x40 [ 275.789812][T11199] ? sidtab_sid2str_put.part.0+0x36/0x880 [ 275.795516][T11199] sidtab_sid2str_put.part.0+0x36/0x880 [ 275.801069][T11199] ? __kasan_check_read+0x11/0x20 [ 275.806092][T11199] sidtab_sid2str_get+0x3b5/0x66e [ 275.811116][T11199] sidtab_entry_to_string+0x37/0x110 [ 275.816384][T11199] security_sid_to_context_core+0x2c6/0x3c0 [ 275.822275][T11199] security_sid_to_context+0x34/0x40 [ 275.827554][T11199] selinux_secid_to_secctx+0x2d/0x40 [ 275.832824][T11199] security_secid_to_secctx+0x75/0xc0 [ 275.838180][T11199] ctnetlink_dump_secctx.isra.0+0x8c/0x330 [ 275.843984][T11199] ? memset+0x32/0x40 [ 275.847959][T11199] ? ctnetlink_done_list+0x90/0x90 [ 275.853069][T11199] ? memcpy+0x46/0x50 [ 275.857109][T11199] ? nla_put+0x110/0x150 [ 275.861339][T11199] ctnetlink_fill_info+0x750/0xd40 [ 275.866442][T11199] ? ctnetlink_glue_build+0xad0/0xad0 [ 275.871818][T11199] ? _raw_spin_lock+0x37/0x40 [ 275.876486][T11199] ctnetlink_dump_table+0x68c/0x1130 [ 275.881775][T11199] ? kasan_kmalloc+0x9/0x10 [ 275.886273][T11199] ? ctnetlink_exp_ct_dump_table+0xa30/0xa30 [ 275.892241][T11199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 275.898525][T11199] ? __alloc_skb+0x3d0/0x5e0 [ 275.903115][T11199] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 275.908651][T11199] ? lock_downgrade+0x8a0/0x920 [ 275.913495][T11199] ? __kasan_check_write+0x14/0x20 [ 275.918592][T11199] netlink_dump+0x558/0xfb0 [ 275.923082][T11199] ? __netlink_sendskb+0xc0/0xc0 [ 275.928010][T11199] __netlink_dump_start+0x673/0x930 [ 275.933195][T11199] ? ctnetlink_alloc_filter+0x230/0x230 [ 275.938729][T11199] ctnetlink_get_conntrack+0x55e/0x6a0 [ 275.944185][T11199] ? nfnetlink_rcv_msg+0x9be/0xfb0 [ 275.949286][T11199] ? ctnetlink_parse_tuple+0x720/0x720 [ 275.954825][T11199] ? nfnetlink_rcv_msg+0x9be/0xfb0 [ 275.959925][T11199] ? ctnetlink_alloc_filter+0x230/0x230 [ 275.965474][T11199] ? ctnetlink_exp_ct_dump_table+0xa30/0xa30 [ 275.971446][T11199] ? ctnetlink_dump_helpinfo+0x3a0/0x3a0 [ 275.977068][T11199] ? lock_downgrade+0x920/0x920 [ 275.981912][T11199] ? ctnetlink_parse_tuple+0x720/0x720 [ 275.987365][T11199] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 275.992293][T11199] ? nfnetlink_bind+0x2c0/0x2c0 [ 275.997141][T11199] ? avc_has_extended_perms+0x10f0/0x10f0 [ 276.002872][T11199] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 276.008500][T11199] ? __local_bh_enable_ip+0x15a/0x270 [ 276.013866][T11199] ? __check_heap_object+0x43/0xb3 [ 276.019037][T11199] netlink_rcv_skb+0x177/0x450 [ 276.023824][T11199] ? nfnetlink_bind+0x2c0/0x2c0 [ 276.028675][T11199] ? netlink_ack+0xb50/0xb50 [ 276.033256][T11199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.039540][T11199] ? ns_capable_common+0x93/0x100 [ 276.044569][T11199] ? ns_capable+0x20/0x30 [ 276.048900][T11199] ? __netlink_ns_capable+0x104/0x140 [ 276.054277][T11199] nfnetlink_rcv+0x1ba/0x460 [ 276.058888][T11199] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 276.064336][T11199] ? netlink_deliver_tap+0x248/0xbf0 [ 276.069623][T11199] netlink_unicast+0x59e/0x7e0 [ 276.074386][T11199] ? netlink_attachskb+0x870/0x870 [ 276.079492][T11199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.085750][T11199] netlink_sendmsg+0x91c/0xea0 [ 276.090522][T11199] ? netlink_unicast+0x7e0/0x7e0 [ 276.095536][T11199] ? tomoyo_socket_sendmsg+0x26/0x30 [ 276.100818][T11199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.107056][T11199] ? security_socket_sendmsg+0x8d/0xc0 [ 276.112708][T11199] ? netlink_unicast+0x7e0/0x7e0 [ 276.117685][T11199] sock_sendmsg+0xd7/0x130 [ 276.122104][T11199] ____sys_sendmsg+0x753/0x880 [ 276.126856][T11199] ? kernel_sendmsg+0x50/0x50 [ 276.131547][T11199] ? __fget_files+0x337/0x520 [ 276.136213][T11199] ? find_held_lock+0x35/0x130 [ 276.141131][T11199] ___sys_sendmsg+0x100/0x170 [ 276.145945][T11199] ? sendmsg_copy_msghdr+0x70/0x70 [ 276.151048][T11199] ? __kasan_check_read+0x11/0x20 [ 276.156067][T11199] ? __fget_files+0x359/0x520 [ 276.160747][T11199] ? ksys_dup3+0x3e0/0x3e0 [ 276.165252][T11199] ? __fget_light+0x1ad/0x270 [ 276.169921][T11199] ? __fdget+0x1b/0x20 [ 276.174004][T11199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 276.180250][T11199] __sys_sendmsg+0x105/0x1d0 [ 276.185123][T11199] ? __sys_sendmsg_sock+0xc0/0xc0 [ 276.190272][T11199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 276.195739][T11199] ? do_syscall_64+0x26/0x790 [ 276.200415][T11199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.206514][T11199] ? do_syscall_64+0x26/0x790 [ 276.211196][T11199] __x64_sys_sendmsg+0x78/0xb0 [ 276.215960][T11199] do_syscall_64+0xfa/0x790 [ 276.220633][T11199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.226627][T11199] RIP: 0033:0x45b3b9 [ 276.230654][T11199] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.250256][T11199] RSP: 002b:00007f787bf69c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.258808][T11199] RAX: ffffffffffffffda RBX: 00007f787bf6a6d4 RCX: 000000000045b3b9 00:38:42 executing program 2: 00:38:42 executing program 0: [ 276.266786][T11199] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 276.274769][T11199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 276.282740][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 276.291094][T11199] R13: 00000000000009ca R14: 00000000004cb3c8 R15: 000000000075bf2c 00:38:42 executing program 1: 00:38:42 executing program 4: [ 276.418736][ T26] audit: type=1400 audit(1581381522.412:61): avc: denied { read } for pid=11195 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:38:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:42 executing program 2: 00:38:42 executing program 0: 00:38:42 executing program 4: 00:38:42 executing program 1: 00:38:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:42 executing program 1: 00:38:42 executing program 4: 00:38:42 executing program 0: 00:38:42 executing program 2: 00:38:42 executing program 1: 00:38:42 executing program 4: 00:38:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:43 executing program 0: 00:38:43 executing program 2: 00:38:43 executing program 4: 00:38:43 executing program 1: 00:38:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde983010000000000001ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13eba05778a03d93d7fb1f0c6c3b6e9f396f9cc58265c20aefadbdafe954fa47e2f584d8f28f70b45717551e97e467376ba30ca0d94db946bdafe34aec8bca7dfb1081b8dcff487085595a1a4b6de77c402a7e5fb64a84a913289db375330958a774790b6e228d14cd93a69fbc6d2b4172389fc7cc560fb84f160a06b00443f988c0f3b45d0166ee8748672a4d0ccaf738a2cc107ec744cc305fc7e35b7e2c7f6a5cf9a8a815310095b4b2bd3689bcca5ea93c65d9bf9b6c6d928fd100157bd99bd80000000000000000003dfdde2d420496a23c3b1e10ca852f1ce617825f7b0e296a76b3ce49fd93fe849ae1e422c4c9b0a550c71700"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:43 executing program 2: 00:38:43 executing program 0: 00:38:43 executing program 1: 00:38:43 executing program 4: 00:38:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:43 executing program 4: 00:38:43 executing program 2: 00:38:43 executing program 1: 00:38:43 executing program 0: 00:38:43 executing program 2: 00:38:43 executing program 1: 00:38:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:44 executing program 4: 00:38:44 executing program 0: 00:38:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:44 executing program 1: 00:38:44 executing program 2: 00:38:44 executing program 2: 00:38:44 executing program 4: 00:38:44 executing program 1: 00:38:44 executing program 0: 00:38:44 executing program 4: 00:38:44 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$P9_RGETATTR(r2, 0x0, 0x0) 00:38:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:45 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 00:38:45 executing program 0: 00:38:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:45 executing program 4: 00:38:45 executing program 1: 00:38:45 executing program 0: 00:38:45 executing program 4: 00:38:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) write$P9_RRENAME(r2, 0x0, 0x0) 00:38:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r0, 0x0, 0x0) 00:38:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:45 executing program 2: mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 00:38:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:46 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$P9_RREADLINK(r2, 0x0, 0x0) 00:38:46 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:46 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fcntl$setflags(r0, 0x2, 0x0) 00:38:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000100)=0xffffffffffffff10) 00:38:46 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:46 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fcntl$setflags(r0, 0x2, 0x0) 00:38:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 00:38:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) 00:38:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') fcntl$lock(r0, 0x6, &(0x7f0000000000)) 00:38:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:47 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') write$binfmt_elf64(r0, 0x0, 0x0) 00:38:47 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 00:38:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 00:38:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:47 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:47 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$getflags(r2, 0x0) 00:38:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 00:38:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 00:38:47 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) 00:38:48 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/351], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:48 executing program 4: r0 = open(&(0x7f0000000000)='./file1\x00', 0x40, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)=0xfffffffffffffe86) 00:38:48 executing program 0: r0 = inotify_init1(0x0) fcntl$lock(r0, 0x10, &(0x7f0000000800)) 00:38:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 00:38:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:48 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) 00:38:48 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) 00:38:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') write$cgroup_int(r0, 0x0, 0x0) 00:38:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 00:38:48 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde983010000000000001ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13eba05778a03d93d7fb1f0c6c3b6e9f396f9cc58265c20aefadbdafe954fa47e2f584d8f28f70b45717551e97e467376ba30ca0d94db946bdafe34aec8bca7dfb1081b8dcff487085595a1a4b6de77c402a7e5fb64a84a913289db375330958a774790b6e228d14cd93a69fbc6d2b4172389fc7cc560fb84f160a06b00443f988c0f3b45d0166ee8748672a4d0ccaf738a2cc107ec744cc305fc7e35b7e2c7f6a5cf9a8a815310095b4b2bd3689bcca5ea93c65d9bf9b6c6d928fd100157bd99bd80000000000000000003dfdde2d420496a23c3b1e10ca852f1ce617825f7b0e296a76b3ce49fd93fe849ae1e422c4c9b0a550c71700"/351], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="82a6d22cfd2708fd18ce2b5d41febf5e5c5e511038ef46a554132e48df037e7857a01bd94340340a2c44db23af878c923cce8589b7c964", 0x37}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700012bf2000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df465cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0) tkill(0x0, 0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) 00:38:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x52, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df465cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0) tkill(0x0, 0x9) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) 00:38:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') dup3(0xffffffffffffffff, r0, 0x0) 00:38:48 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde983010000000000001ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13eba05778a03d93d7fb1f0c6c3b6e9f396f9cc58265c20aefadbdafe954fa47e2f584d8f28f70b45717551e97e467376ba30ca0d94db946bdafe34aec8bca7dfb1081b8dcff487085595a1a4b6de77c402a7e5fb64a84a913289db375330958a774790b6e228d14cd93a69fbc6d2b4172389fc7cc560fb84f160a06b00443f988c0f3b45d0166ee8748672a4d0ccaf738a2cc107ec744cc305fc7e35b7e2c7f6a5cf9a8a815310095b4b2bd3689bcca5ea93c65d9bf9b6c6d928fd100157bd99bd80000000000000000003dfdde2d420496a23c3b1e10ca852f1ce617825f7b0e296a76b3ce49fd93fe849ae1e422c4c9b0a550c71700"/351], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 282.627465][T11468] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 282.638020][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.662439][T11468] device gretap0 entered promiscuous mode [ 282.675191][T11468] device macvlan2 entered promiscuous mode [ 282.705271][T11468] device gretap0 left promiscuous mode [ 282.773012][T11474] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 282.781657][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.796836][T11474] device gretap0 entered promiscuous mode [ 282.802682][T11474] device macvlan2 entered promiscuous mode [ 282.811784][T11474] device gretap0 left promiscuous mode 00:38:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') dup3(0xffffffffffffffff, r0, 0x0) 00:38:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 00:38:48 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:38:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001680)='maps\x00') dup3(0xffffffffffffffff, r0, 0x0) [ 283.154738][T11480] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 283.164443][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.179478][T11480] device gretap0 entered promiscuous mode [ 283.185305][T11480] device macvlan2 entered promiscuous mode [ 283.195373][T11480] device gretap0 left promiscuous mode [ 283.267790][T11468] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 283.276937][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.288229][T11468] device gretap0 entered promiscuous mode [ 283.294392][T11468] device macvlan2 entered promiscuous mode [ 283.302247][T11468] device gretap0 left promiscuous mode 00:38:49 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="82a6d22cfd2708fd18ce2b5d41febf5e5c5e511038ef46a554132e48df037e7857a01bd94340340a2c44db23af878c923cce8589b7c964", 0x37}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700012bf2000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df465cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0) tkill(0x0, 0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) 00:38:49 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:38:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 00:38:49 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x3}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}, 0x4a) 00:38:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0x37}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 00:38:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 00:38:49 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:38:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:38:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde983010000000000001ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13eba05778a03d93d7fb1f0c6c3b6e9f396f9cc58265c20aefadbdafe954fa47e2f584d8f28f70b45717551e97e467376ba30ca0d94db946bdafe34aec8bca7dfb1081b8dcff487085595a1a4b6de77c402a7e5fb64a84a913289db375330958a774790b6e228d14cd93a69fbc6d2b4172389fc7cc560fb84f160a06b00443f988c0f3b45d0166ee8748672a4d0ccaf738a2cc107ec744cc305fc7e35b7e2c7f6a5cf9a8a815310095b4b2bd3689bcca5ea93c65d9bf9b6c6d928fd100157bd99bd80000000000000000003dfdde2d420496a23c3b1e10ca852f1ce617825f7b0e296a76b3ce49fd93fe849ae1e422c4c9b0a550c71700"/351], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 00:38:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 00:38:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8800000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0x0, 0x98, 0x98, 0x0, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffc, 0x3ff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "708e902d5a5769bc1bd7f17b5038be6b00d1494224c8cce0dec1b983c2fb"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 283.874392][T11517] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 283.882882][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.895464][T11517] device gretap0 entered promiscuous mode [ 283.903035][T11517] device macvlan2 entered promiscuous mode [ 283.911348][T11517] device gretap0 left promiscuous mode