ffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl(r0, 0x4148, 0x0) [ 2884.287681] binder: 8838:8841 got transaction with invalid offsets ptr [ 2884.310835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2884.326401] binder: 8838:8841 transaction failed 29201/-14, size 0-104 line 2997 08:35:26 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x10}, {r0, 0x8}, {r0, 0x4}, {r0, 0x8}, {r0, 0x4082}, {r0, 0x200}, {r0, 0x8004}], 0x7, 0x20) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl(r0, 0x4148, 0x0) 08:35:26 executing program 2: ioctl(0xffffffffffffffff, 0x4161, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x80000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x3, r2}) 08:35:26 executing program 4: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x1, 0x5001, 0x9, 0x5, 0x6b}) [ 2884.357411] binder: undelivered TRANSACTION_ERROR: 29201 08:35:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000400d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xcc7, 0x4) syz_emit_ethernet(0x423, &(0x7f00000006c0)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 08:35:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:27 executing program 4: symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fcntl$getflags(r0, 0x408) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x7fff, 0x4) [ 2885.162609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:27 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) ioctl(r0, 0x4148, 0x0) dup3(r0, r0, 0x80000) 08:35:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000500d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 08:35:27 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) [ 2885.757043] binder: 9052:9075 got transaction with invalid offsets ptr [ 2885.785356] binder: 9052:9075 transaction failed 29201/-14, size 0-108 line 2997 [ 2885.861717] binder: undelivered TRANSACTION_ERROR: 29201 08:35:28 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) ioctl(r1, 0x4148, 0x0) [ 2886.271431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000600d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2886.562386] kauditd_printk_skb: 109 callbacks suppressed [ 2886.562401] audit: type=1400 audit(1555317328.510:8743): avc: denied { map } for pid=9126 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2886.733837] audit: type=1400 audit(1555317328.600:8744): avc: denied { map } for pid=9126 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:28 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80000001) preadv(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/96) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 2886.910813] audit: type=1400 audit(1555317328.610:8745): avc: denied { map } for pid=9126 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:29 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x114, r1, 0x408, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e00000000000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 08:35:29 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$void(r0, 0x5450) ioctl(r0, 0x4148, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 08:35:29 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x5) [ 2887.128234] audit: type=1400 audit(1555317328.760:8746): avc: denied { map } for pid=9244 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000700d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2887.303475] audit: type=1400 audit(1555317328.790:8747): avc: denied { map } for pid=9244 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2887.421829] audit: type=1400 audit(1555317328.790:8748): avc: denied { map } for pid=9244 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2887.506769] binder: 9315:9319 got transaction with invalid offsets ptr [ 2887.575462] binder: 9315:9319 transaction failed 29201/-14, size 0-116 line 2997 [ 2887.603076] audit: type=1400 audit(1555317328.830:8749): avc: denied { map } for pid=9244 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2887.659698] binder: undelivered TRANSACTION_ERROR: 29201 [ 2887.807442] audit: type=1400 audit(1555317328.890:8750): avc: denied { map } for pid=9244 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2887.963593] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 08:35:30 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x400000000000006, 0x390fe8479d817283) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)="ec9e59f4482c8c942a0eab795e72e8cff51a00c3") ioctl(r0, 0xffffffffffff0003, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x2, 0x2}, 0x8) [ 2888.028242] audit: type=1400 audit(1555317328.930:8751): avc: denied { map } for pid=9244 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2888.050703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2888.068819] EXT4-fs (loop1): group descriptors corrupted! [ 2888.108209] net_ratelimit: 24 callbacks suppressed [ 2888.108217] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.118183] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.118372] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.123342] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.133505] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.138631] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.143883] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.149016] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.154181] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.159315] protocol 88fb is buggy, dev hsr_slave_1 08:35:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000a00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 2888.292670] audit: type=1400 audit(1555317328.940:8752): avc: denied { map } for pid=9244 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:30 executing program 4: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/170, &(0x7f00000000c0)=0xaa) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xfffffffffffffffe, 0x1000}) 08:35:30 executing program 2: socket$unix(0x1, 0x5, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x400000, 0x0) ioctl(r0, 0x4159, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x3) 08:35:30 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) [ 2889.085804] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000e00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:31 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x400002) 08:35:31 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@rodir='rodir'}]}) 08:35:31 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x4fab, 0x1}}, 0x28) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) 08:35:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000f00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2890.055681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:32 executing program 4: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x1) ioctl(r0, 0x4161, 0x0) [ 2890.713342] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2890.745022] binder: 9791:9796 got transaction with invalid offsets ptr [ 2890.788306] binder: 9791:9796 transaction failed 29201/-14, size 0-768 line 2997 08:35:32 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2200000000004, 0x100fed) ioctl(r0, 0x4148, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x1, 0x8, 0x61a, 0x0, 0x400, 0x20000, 0x4, 0x4, 0x5, 0x8, 0x9, 0x7fffffff, 0x2, 0x8001, 0x101, 0x9, 0x7fff, 0xfffffffffffffff9, 0x6, 0x4, 0x100000001, 0x3, 0x101, 0x400, 0x8001, 0xadc, 0x74b, 0x8, 0x5128, 0x2, 0x1, 0x0, 0x7, 0x400, 0x69, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x2010, 0x1, 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x3}, 0xffffffffffffffff, 0x7, r0, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) socket$pptp(0x18, 0x1, 0x2) [ 2890.839510] FAT-fs (loop1): bogus number of reserved sectors [ 2890.856101] binder: undelivered TRANSACTION_ERROR: 29201 [ 2890.858240] FAT-fs (loop1): Can't find a valid FAT filesystem 08:35:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000004800d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2891.045748] FAT-fs (loop1): bogus number of reserved sectors [ 2891.093796] FAT-fs (loop1): Can't find a valid FAT filesystem 08:35:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl(r0, 0x4161, 0x0) 08:35:33 executing program 1: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) fcntl$setpipe(r1, 0x407, 0x0) 08:35:33 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2891.655246] kauditd_printk_skb: 190 callbacks suppressed [ 2891.655259] audit: type=1400 audit(1555317333.600:8943): avc: denied { create } for pid=9910 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2891.671509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000004c00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2891.823200] audit: type=1400 audit(1555317333.610:8944): avc: denied { write } for pid=9910 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2891.965293] audit: type=1400 audit(1555317333.700:8945): avc: denied { create } for pid=9910 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:35:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0xe, 0x5, 0x401}) ioctl(r0, 0x4148, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) 08:35:34 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) [ 2892.267951] audit: type=1400 audit(1555317334.210:8946): avc: denied { map } for pid=10005 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2892.289871] binder: 9990:10020 got transaction with invalid offsets ptr [ 2892.331841] binder: 9990:10020 transaction failed 29201/-14, size 0-1280 line 2997 [ 2892.376548] audit: type=1400 audit(1555317334.230:8947): avc: denied { call } for pid=9990 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2892.405200] binder: undelivered TRANSACTION_ERROR: 29201 08:35:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x400) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4161, 0x0) [ 2892.525247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2892.530098] audit: type=1400 audit(1555317334.250:8948): avc: denied { map } for pid=10005 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bone_slave_0\x00'}, 0x18) 08:35:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000006000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2892.710934] audit: type=1400 audit(1555317334.250:8949): avc: denied { map } for pid=10013 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2892.902777] audit: type=1400 audit(1555317334.260:8950): avc: denied { map } for pid=10013 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r1, 0x80000, r2}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl(r3, 0x4148, 0x0) 08:35:35 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) [ 2893.073638] audit: type=1400 audit(1555317334.270:8951): avc: denied { map } for pid=10005 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2893.195513] audit: type=1400 audit(1555317334.270:8952): avc: denied { map } for pid=10013 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2893.308724] QAT: Invalid ioctl 08:35:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2893.565936] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 2893.580876] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2893.581195] IPVS: stopping master sync thread 10194 ... [ 2893.690836] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 2893.694677] IPVS: stopping master sync thread 10218 ... 08:35:35 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x7f, 0x0) 08:35:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000006800d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:35 executing program 1: syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fa2e3c4a3056dc909c44201ddcc6f") clone(0x8000100000203, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) 08:35:36 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 08:35:36 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0x16f, 0x3, 0x40000000000007}, 0x9e181e1, 0x400, 'id1\x00', 'timer1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1\x00', 0x0, 0x3, 0x1f, 0x5, 0x6}) prctl$PR_GET_CHILD_SUBREAPER(0x25) geteuid() ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) [ 2894.348189] net_ratelimit: 24 callbacks suppressed [ 2894.348197] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.348227] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.353480] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.368840] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.373946] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.379134] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.384230] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.389540] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.394616] protocol 88fb is buggy, dev hsr_slave_1 08:35:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x78, &(0x7f0000000240)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e22, 0x5, @local, 0x100}, @in={0x2, 0x4e22, @rand_addr=0xffffffff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xfffffffffffffffa}]}, &(0x7f0000000100)=0xffffffffffffff7c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x9, @empty, 0x100000000}}, 0xff, 0x8}, &(0x7f0000000200)=0x90) ioctl(r0, 0x4148, 0x0) [ 2894.766646] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2894.908192] protocol 88fb is buggy, dev hsr_slave_0 08:35:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000006c00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:37 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:37 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x2) ioctl(r0, 0x4148, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) [ 2895.736282] binder: 10462:10490 got transaction with invalid offsets ptr [ 2895.788787] binder: 10462:10490 transaction failed 29201/-14, size 0-1792 line 2997 [ 2895.828265] binder: undelivered TRANSACTION_ERROR: 29201 08:35:37 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) ioctl(r0, 0x4161, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r0, 0x4, 0x40, "248d650b630a3c9810527164d8da3fa3fc09b500e434f0a5bd76aaf157ddf5752d8cf2e08dfdd151939d4ca17403543215d6f3eeffdc6084f00ed0bb411f17877b2334158119020297bd9e1441ccebe6766e2d76726152f3c626edb815ca45f003db3805a0c781f134b50a6c410c3b94fd7dcd7c70b086badff4662c168fc951b26b9ada7960113a35fde52427bdf656185ccf4dada697dd559690bd8fff7c5ce3a212dff152a8c2d52c048b6f41c1fc5ff77ddb7badeef8a8adc7fada591f4c4e7299b87c55aa8fc84361de8024c3abac31428d4912910833d2e16865d83a7631689d17efc7e2"}) [ 2896.023967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:38 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x0, 0x1000}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) 08:35:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000007400d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 08:35:38 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/237, &(0x7f0000000140)=0xed) ioctl(r0, 0x7fffffff, 0x0) [ 2896.658455] kauditd_printk_skb: 205 callbacks suppressed [ 2896.658468] audit: type=1400 audit(1555317338.610:9158): avc: denied { map } for pid=10584 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2896.817178] audit: type=1400 audit(1555317338.650:9159): avc: denied { map } for pid=10584 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2896.947630] audit: type=1400 audit(1555317338.710:9160): avc: denied { map } for pid=10584 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:38 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5358, 0x0, 0x10001, 0x80000001}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0xdf, 0x7}, &(0x7f0000000180)=0xc) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x2dc, 0x7, 0x1}, &(0x7f0000000200)=0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) [ 2897.066243] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2897.113708] audit: type=1400 audit(1555317338.720:9161): avc: denied { map } for pid=10584 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000007a00d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2897.218328] audit: type=1400 audit(1555317338.970:9162): avc: denied { create } for pid=10649 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2897.337344] audit: type=1400 audit(1555317338.990:9163): avc: denied { write } for pid=10649 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:35:39 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r1, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x80, 0x81, {"ec68529485d9428de9bdceb290f104be"}, 0x8, 0x3, 0x9}}}, 0x118) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440), &(0x7f0000000480)=0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x4148, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0xffff, 0x20080) [ 2897.405269] audit: type=1400 audit(1555317339.060:9164): avc: denied { create } for pid=10649 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:35:39 executing program 2: ioctl(0xffffffffffffffff, 0x4161, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x40) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0x22, '7k7', "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"}}, 0x110) socket$inet_udp(0x2, 0x2, 0x0) [ 2897.523600] audit: type=1400 audit(1555317339.210:9165): avc: denied { map } for pid=10703 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2897.552408] binder: 10740:10750 got transaction with invalid offsets ptr 08:35:39 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 2897.618570] binder: 10740:10750 transaction failed 29201/-14, size 0-2560 line 2997 08:35:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") getpgid(0x0) [ 2897.665695] binder: undelivered TRANSACTION_ERROR: 29201 [ 2897.689309] audit: type=1400 audit(1555317339.220:9166): avc: denied { map } for pid=10703 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2897.809511] audit: type=1400 audit(1555317339.230:9167): avc: denied { map } for pid=10703 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2898.021318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:40 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x7, 0x0) 08:35:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000f000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:40 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x5) ioctl(r0, 0x4148, 0x0) 08:35:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 08:35:40 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xfffffffffffffbff, 0x5, 0x8000, 0x0, 0x2, 0x6, 0x1, 0x101, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x800, 0x3}, 0x8) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000280)=""/212) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r1, r2/1000+10000}, {0x77359400}}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x1000000000, 0x1}) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000000)={0x7}) [ 2899.093313] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:41 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x40) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:35:41 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x4}, &(0x7f0000000100)=0x8) [ 2899.177152] binder: 10876:10882 got transaction with invalid offsets ptr 08:35:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000003d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2899.219941] binder: 10876:10882 transaction failed 29201/-14, size 0-4608 line 2997 08:35:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r0 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000680), &(0x7f0000000640)=0x3f) pipe2$9p(&(0x7f0000000100), 0x800) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) getrusage(0x0, 0x0) unshare(0x40000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 2899.291765] binder: undelivered TRANSACTION_ERROR: 29201 08:35:41 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:41 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$ppp(r0, &(0x7f00000002c0)="6fab38c0a6b01e0af53de8240e4a12b2a0221212469e5f132cd72ced622ac4330ceb2147dd937a4e3d48b346531599c3cf149cd549a7f6046b078fc0083c5178c1fc7129d0e2bae8106b990d89ccb07937ddb07199500542c71b7e4273427b932fe99f6358503900eea62644bc0679d3ff1d19d3879acfe75796b94c8a6135e343bb50029aa6b79cf4230a483d4d83d62dc96a0844f431da7674a57dc567c5e2d6065d2c6013f36b845cc6", 0x180) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$ppp(r0, &(0x7f0000000100)="bd1a3eed5eb24f7bedf7263b790962c404ffaf8d844c0b2d6d2722fd845480802039480418ac9a5f2348c25ee38d605e2b6add8eda525ae86832b3a81c62eda77c71bc4d97f3e3163370775d4d137cfd34038813439b90b7", 0x58) ioctl(r0, 0x4148, 0x0) [ 2899.915931] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000005d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2900.130822] IPVS: ftp: loaded support on port[0] = 21 08:35:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:42 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40201) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x2) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0xffff, 0xffff, 0x7fffffff, 0x38da, 0x5, 0xfff, 0x5, 0xe, 0x0, 0x2}) [ 2900.576723] IPVS: ftp: loaded support on port[0] = 21 [ 2900.588198] net_ratelimit: 24 callbacks suppressed [ 2900.588206] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.588239] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.593219] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.598356] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.613471] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.618665] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.623782] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.628967] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.634053] protocol 88fb is buggy, dev hsr_slave_1 08:35:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 2900.787303] binder_alloc: 7715: binder_alloc_buf size 8192 failed, no address space 08:35:42 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100000000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x5, 0x3, 0x7fffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) [ 2900.914330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2900.928638] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2900.978468] binder: 11116:11117 transaction failed 29201/-28, size 0-8192 line 2970 08:35:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000006d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) [ 2901.148259] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.192234] binder: undelivered TRANSACTION_ERROR: 29201 [ 2901.669803] kauditd_printk_skb: 164 callbacks suppressed [ 2901.669816] audit: type=1400 audit(1555317343.620:9332): avc: denied { map } for pid=11181 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:43 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x20a40, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)=0x7, 0x4) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/58) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000008c0)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x1ff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1, 0xa, [{{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @empty}}]}, 0x590) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x101, 0x1fae, 0x8001, 0xe3bf, 0x8, 0x1, 0x7, 0x401, 0x0}, &(0x7f0000000100)=0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x400, 0x2, 0x8d}, {0x3, 0x1ff, 0x1ff, 0x5}, {0x100000000, 0x7ff, 0x5, 0x5a}, {0x7, 0x781, 0x1, 0x4969}, {0x8, 0x20, 0x5, 0x101}, {0x7fffffff, 0x2, 0xa9, 0x401}, {0xb8a, 0x4, 0x10001, 0x4a0}]}, 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x7}, 0x8) ioctl(r1, 0x6, 0x0) 08:35:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x87) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2000200) ioctl(r0, 0x4148, 0x0) 08:35:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2901.797617] audit: type=1400 audit(1555317343.620:9333): avc: denied { map } for pid=11225 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2901.911072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2901.952777] audit: type=1400 audit(1555317343.650:9334): avc: denied { map } for pid=11181 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:44 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x24) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x1, 0x1000}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)={0xc6, "e2e25681534a52f11b376ac0a59b35cc9bcacef88388be3876ff02fa24d7d8f3bf10a66a58a9f34d9cdd4ea92753a5daabf4c049ac5f638846b2e4503c9899d091c74dabb73aacc252da5b673d6c6b75e96798d5947834ebd437b6f82b0dca58611c0934f1bd3b9c42984c0fd50f29aa3f84860da74839d5225c344d3a188963a00db9a89eba389b587b00b53d9a2b54f2fba988c9c1c823cfb6f81d66c32b7e094cf04ae3059e1e59f2965a094e07cf399ad5a4f874fad87c64be926badc7ea4e4909d1689a"}) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) 08:35:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000007d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2902.181838] audit: type=1400 audit(1555317343.650:9335): avc: denied { map } for pid=11225 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2902.403853] audit: type=1400 audit(1555317343.680:9336): avc: denied { map } for pid=11181 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:44 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x80000000000, 0x0, 0x1017, 0x8, 0xf179, {0x80000001, 0xa9}, 0x1}) ioctl(r0, 0x4161, 0x0) [ 2902.593480] audit: type=1400 audit(1555317343.690:9337): avc: denied { map } for pid=11181 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"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"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440)=0x80, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x14, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x41) ioctl(r0, 0x4148, 0x0) [ 2902.794811] audit: type=1400 audit(1555317343.710:9338): avc: denied { map } for pid=11225 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2902.843698] binder_alloc: 7715: binder_alloc_buf size 16128 failed, no address space [ 2902.899935] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2902.941336] audit: type=1400 audit(1555317343.710:9339): avc: denied { map } for pid=11225 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2902.981227] binder: 11356:11359 transaction failed 29201/-28, size 0-16128 line 2970 [ 2903.048733] binder: undelivered TRANSACTION_ERROR: 29201 [ 2903.082116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2903.104653] audit: type=1400 audit(1555317343.800:9340): avc: denied { map } for pid=11225 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000ad00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2903.296573] audit: type=1400 audit(1555317343.820:9341): avc: denied { map } for pid=11225 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:45 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0xfffffffffffffffe) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0x800, 0x5d3a, 0x9, 0x1200000000000000, 0x1, 0x7adcce2c}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x0, 0x1000}) 08:35:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:45 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x4000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0xb00000000000000}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x2, 0xf900, "01ca0bc53e619255900517c2d57c95f32855fc3408c3a7b9", {0x2, 0x1}, 0x9540}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4148, 0x0) 08:35:46 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x6046d57516f60ad6) ioctl(r0, 0x4161, 0x0) ioctl$TIOCEXCL(r0, 0x540c) [ 2904.088891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000ed00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2904.637767] binder_alloc: 7715: binder_alloc_buf size 18432 failed, no address space [ 2904.718214] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2904.738313] binder: 11595:11601 transaction failed 29201/-28, size 0-18432 line 2970 [ 2904.804198] binder: undelivered TRANSACTION_ERROR: 29201 08:35:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2904.959850] overlayfs: workdir is in-use by another mount, mount with '-o index=off' to override exclusive workdir protection. [ 2905.049354] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000fd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:47 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x21, 0x3, 0x5}, 0x5a72}}, 0x18) [ 2905.438829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 08:35:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2905.531044] overlayfs: filesystem on './file0' not supported as upperdir [ 2905.539879] overlayfs: workdir is in-use by another mount, mount with '-o index=off' to override exclusive workdir protection. 08:35:47 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000000000000fc) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0x7fffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl(r1, 0x4148, 0x0) 08:35:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2906.081855] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2906.186889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 08:35:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000020d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x1) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)) [ 2906.404623] binder_alloc: 7715: binder_alloc_buf size 19456 failed, no address space [ 2906.418256] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2906.499476] binder: 11830:11838 transaction failed 29201/-28, size 0-19456 line 2970 [ 2906.593607] binder: undelivered TRANSACTION_ERROR: 29201 [ 2906.828199] net_ratelimit: 23 callbacks suppressed [ 2906.828208] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.838221] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.838396] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.843409] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.853668] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.858830] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.864180] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.869301] protocol 88fb is buggy, dev hsr_slave_1 08:35:48 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='numa_maps\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04012bbd7000ffdbdf25010000000000000008410000004c00180000000973797a3100000000000000000000000000000000000046a7e3312c32cea2ba00"/83], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl(r0, 0x4161, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) syz_mount_image$minix(&(0x7f0000000200)='minix\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000280)="e572b4b095c658fe09b2d9b9b364fd85fabf13fac2da77339bcae88d2bd88cb521becd5a5a10a052bbe95cdb6ef21ff69e32c72dcfc634b6c649609b", 0x3c, 0x2}, {&(0x7f00000002c0)="c27254cc1ea0885ea3f27ed5e47238c78bc61efc24d4873171c6150ee9f020884ee1364da5ff3fd0098c893dc312510e437cfb6d7af8fbddcce19f79c1bd9e65cca7ffd71dd83222f481bf6c048f40ce642b3230aae46d6790b20d57148b88c086ba25f0ae1399b6cc1f98059ef80c037d41bb95c12a0014da6cbb72cdd61605a98b701f56b6857ab49e3b9c69342907264dc435b2d8198116a687bd2f6abb042e2118120931deed8a1bb0aa8b5bc4c71ed22fa7dd015e1b840bbef805c49f", 0xbf, 0x8}, {&(0x7f0000000380)="cf780601bfe690807ed7242d407478b104765db04251dd81a304e5f5f391cd425d4576445d37ffb943f84bdcf6e3741b84e120a596d71cdf204ab8cdf7242b11714c88cb4ee6a52160407e75d39e23f082fe03232e42bae39294c2e8c67b611f348230c9c1dc2a5ceb4cd290d976e445df76ae8b9921047320ff29c14d0f56055f5746ba5d6d46609c32fde87c5e0c59be3a1402b024c1cc108dd63d86", 0x9d, 0x7fe3cbe5}, {&(0x7f0000000440)="b874bbdc64701c4460f442d42d7bdfa4bba3c8f2ca078c6ffb884d3223f0a2b5731db7ac83d1402e3c0bf62696184e4391976e775dab8a857b7b356b042d5c68861ee4af4f49591f538ae85ad581abedbc899306b50dbbca35bbd4f677612f8c375a", 0x62, 0x94c4}], 0xc00, 0x0) syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x4, 0x400000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000540)=0x8001) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000640)=0x5) [ 2906.874582] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.879708] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.986567] kauditd_printk_skb: 180 callbacks suppressed [ 2906.986580] audit: type=1400 audit(1555317348.930:9522): avc: denied { map } for pid=11990 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:49 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400000, 0x20) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000)) 08:35:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000048d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2907.166554] audit: type=1400 audit(1555317348.930:9523): avc: denied { map } for pid=11990 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:49 executing program 0: r0 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='lo\x00', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x4, 0x7a7, r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x4148, 0x0) [ 2907.338393] audit: type=1400 audit(1555317348.950:9524): avc: denied { map } for pid=11989 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2907.561667] audit: type=1400 audit(1555317348.950:9525): avc: denied { map } for pid=11989 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2907.734728] audit: type=1400 audit(1555317348.950:9526): avc: denied { map } for pid=11989 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2907.811287] binder_alloc: 7715: binder_alloc_buf size 24576 failed, no address space [ 2907.875921] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2907.904903] audit: type=1400 audit(1555317348.950:9527): avc: denied { map } for pid=11989 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2907.949544] binder: 12057:12061 transaction failed 29201/-28, size 0-24576 line 2970 [ 2908.002513] binder: undelivered TRANSACTION_ERROR: 29201 [ 2908.077033] audit: type=1400 audit(1555317348.990:9529): avc: denied { map } for pid=11990 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2908.139186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2908.250014] audit: type=1400 audit(1555317348.990:9530): avc: denied { map } for pid=11990 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000005648d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:50 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x6, 0x0) ustat(0x200, &(0x7f0000000040)) 08:35:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:50 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xed, "ace5ad401a3fc5b783a0a97250308db6939aa88f11f5c2a1a7088ff8ec0b2e43c319b8e4280cd80a9ffd5df3d620aa815f747ab8f13acb4e9c7737bbdf1027906944384592e1e551f7ce847ecb12bd8ded9990eca8ddcbb0ac4bcfed7c9be6af2a73eeac070c88728b81fa27f211430f157253c774c064b7737836fe6c12d1c6f4549a29ded25c9943e52f2fbacf18d589ce0a4aeffa3e16ba4683ad4d27ecf4b8fe36e07edd834b2e2d3b75717e070b40553041e175239dc6a547b7afc3607a79c76ee181f21ac614221547edeec666d2da5e5bd39ed378f1d88a8193bb855bd59279298e57831a719bcae0f3"}, &(0x7f00000001c0)=0xf5) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x1}, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x4161, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)={0x80, 0x1c, [0x5, 0x3, 0x40000000000000, 0x8, 0xe81d, 0x6, 0x8]}) [ 2908.496447] audit: type=1400 audit(1555317348.980:9528): avc: denied { create } for pid=11992 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2908.555164] xprt_adjust_timeout: rq_timeout = 0! [ 2908.668169] audit: type=1400 audit(1555317349.000:9531): avc: denied { create } for pid=11992 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2909.020914] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2909.103269] xprt_adjust_timeout: rq_timeout = 0! 08:35:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000004cd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2909.259250] binder_alloc: 7715: binder_alloc_buf size 26624 failed, no address space [ 2909.310356] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2909.374187] binder: 12294:12302 transaction failed 29201/-28, size 0-26624 line 2970 [ 2909.431844] binder: undelivered TRANSACTION_ERROR: 29201 08:35:51 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:35:51 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4364, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 08:35:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1d, 0xfffffffffffffffc) ioctl(r0, 0x4148, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 2909.888766] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000004856d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x402000) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl(r0, 0x6, &(0x7f0000000080)="df90f6b9a8e63551fa1ddfd1472dba71622ac94d24c579f53cb6c57d201e1f90f25f78d871e4a6f4") ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000140)={0x43, "501c49ecc6c0b64e5def9dfca4b82c7bc37480b8ae4c1c53338fcf12ff59ae2f3c6516e4205738254c0f2965b0f068460d7116cb2f01e2f7e6fb484cc291b8a9f8ecb9e267b4231762663d6088d1e87e0c97d689f9b2679fa5fc3a8b784a9acd62cba3042d35b5bff974f30081b2b33e38adf1161b1a62ffc2b8459636e6125f"}) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x90000) ioctl(r1, 0x4148, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) [ 2910.752689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000060d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:53 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xfff, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/128) 08:35:53 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:35:53 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80, 0x40000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8001) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1000000040000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) ioctl(r1, 0x10004146, 0x0) 08:35:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000068d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2912.052158] kauditd_printk_skb: 173 callbacks suppressed [ 2912.052170] audit: type=1400 audit(1555317353.990:9705): avc: denied { map } for pid=12655 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:54 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) [ 2912.234908] audit: type=1400 audit(1555317354.040:9706): avc: denied { map } for pid=12655 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2912.361448] audit: type=1400 audit(1555317354.060:9707): avc: denied { map } for pid=12655 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2912.508013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2912.541724] audit: type=1400 audit(1555317354.080:9708): avc: denied { map } for pid=12655 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000006cd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:54 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:35:54 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x3c, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000140)=0xffffffffffffff4f) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xffffffffffffffe1}, 0x8) ioctl(r0, 0x4161, 0x0) [ 2912.774907] audit: type=1400 audit(1555317354.140:9709): avc: denied { map } for pid=12655 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2912.948199] audit: type=1400 audit(1555317354.180:9710): avc: denied { map } for pid=12655 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2913.068202] net_ratelimit: 23 callbacks suppressed [ 2913.068218] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.068253] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.073330] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.078460] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.093486] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.098688] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.103793] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.109594] protocol 88fb is buggy, dev hsr_slave_0 08:35:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2913.114756] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.180914] audit: type=1400 audit(1555317354.180:9711): avc: denied { map } for pid=12686 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2913.279445] audit: type=1400 audit(1555317354.180:9712): avc: denied { map } for pid=12655 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x3e10b2f50e0bb210, r0, 0x0) ioctl(r0, 0x4148, 0x0) setsockopt(r0, 0x93b, 0x5, &(0x7f0000000140)="00e09fc18cc546d826ae6deded91d3f4fd01a907cd87efb65f82bcb0ae2540dcfec098ea482ff6b8d7c8be6ef74c53d486412cc1556f7469e93ec51d98b814833902172a190b87dfb48ce682bc12421c1f7750b4192ef2db1de272250c626046748146c6e4449297a10553c5b105e6978236ff2a95f132a0cd73e675851925227415efabef23c32759ed123b60fdca88af8f01f94625c337aead6be8b0973d18b8dab9d8d6f34109204f8af09203f4b684ed024220d8a00c44b6001e2bcab388ec9460395cb7fe4d6a65623021e905d78d360f67580a6a9e6a000000", 0xdc) [ 2913.446227] audit: type=1400 audit(1555317354.210:9713): avc: denied { map } for pid=12686 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2913.579526] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2913.603815] audit: type=1400 audit(1555317354.220:9714): avc: denied { map } for pid=12686 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2913.628184] protocol 88fb is buggy, dev hsr_slave_0 08:35:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000074d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:55 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x5, 0x3}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x0, @empty}}, 0x80000001, 0x5, 0x4, 0x9, 0xfffffffffffffffe}, &(0x7f0000000200)=0x98) ioctl(r0, 0x4161, 0x0) [ 2913.918853] binder_alloc: 7715: binder_alloc_buf size 31232 failed, no address space [ 2913.978284] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2914.028332] binder: 12884:12887 transaction failed 29201/-28, size 0-31232 line 2970 [ 2914.082132] binder: undelivered TRANSACTION_ERROR: 29201 08:35:56 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:35:56 executing program 0: socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 2914.623826] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:35:56 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x80, 0x20, 0x2, 0x2, 0x0, 0x5, 0x30000, 0x3, 0xffffffff, 0x8, 0xe812bb3, 0x9, 0x0, 0x1a6, 0x3, 0x2000000000, 0x4, 0x8, 0xfffffffffffff000, 0x0, 0x3f, 0x2, 0x6c49, 0x8001, 0x2b5, 0x8, 0x22, 0x1000, 0x100, 0x1, 0x1, 0x1, 0x2039, 0x9, 0x1, 0x7, 0x0, 0x6, 0x4, @perf_config_ext={0x3debac35, 0x7}, 0x1000, 0xc4d, 0x200, 0x6, 0x400, 0x6, 0x8}, r1, 0x5, r0, 0x8) ioctl(r0, 0x4161, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) 08:35:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:35:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000007ad00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:57 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4000000, 0x0) ioctl(r0, 0x3, 0x0) 08:35:57 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) [ 2915.682578] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2915.727960] binder_alloc: 7715: binder_alloc_buf size 16777216 failed, no address space 08:35:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 2915.789620] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:35:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd700004000000000000f0d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2915.840474] binder: 13039:13055 transaction failed 29201/-28, size 0-16777216 line 2970 [ 2915.911171] binder: undelivered TRANSACTION_ERROR: 29201 08:35:58 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:35:58 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl(r0, 0x4148, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x5f46570a, 0x80000000, 0x1, 0x7ff}, 0x8) 08:35:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000030043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:35:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:35:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:35:58 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) ioctl(r0, 0x4161, 0x0) socket$inet6(0xa, 0xa, 0x80000000000006de) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x3, 0x3}) [ 2917.157404] kauditd_printk_skb: 172 callbacks suppressed [ 2917.157418] audit: type=1400 audit(1555317359.100:9887): avc: denied { map } for pid=13256 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:59 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) 08:35:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) [ 2917.418061] audit: type=1400 audit(1555317359.160:9888): avc: denied { map } for pid=13256 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2917.555887] audit: type=1400 audit(1555317359.160:9889): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:59 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:35:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000002d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2917.751776] audit: type=1400 audit(1555317359.160:9890): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2917.901732] audit: type=1400 audit(1555317359.240:9891): avc: denied { map } for pid=13256 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:35:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2918.078599] audit: type=1400 audit(1555317359.240:9892): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:00 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) [ 2918.262115] audit: type=1400 audit(1555317359.240:9893): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2918.415894] audit: type=1400 audit(1555317359.310:9894): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x204000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)="e2bc2df4bce855f327e470acbe004480db1ff5dda708c71e5e4f003ef971bec0665a7d5a53e5e479761ea4f197a6d6e4bdb1d7cd68fb2c8215f12ccdbd096640beb1be9f82cc2c29d734710fd9b185a55c3963a437459943129c093897aff12f41ea4724b893cd657acf45741881e1a068c6ca3e7a1e543d644e482f244ef085961c01e61edbf664bb54fe91f446dfaabd53c246bba1d9cf91a9950fec417be2c7039dc6d73adaff8a439f7dbd2c806bcd30a076aa5df99cd7108747337a"}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4161, 0x0) [ 2918.567376] audit: type=1400 audit(1555317359.310:9895): avc: denied { map } for pid=13256 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2918.603423] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:00 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) 08:36:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000003d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2918.750015] audit: type=1400 audit(1555317359.370:9896): avc: denied { map } for pid=13261 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2919.308190] net_ratelimit: 23 callbacks suppressed [ 2919.308198] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.308233] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.313243] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.330003] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.335761] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.341528] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.346723] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.352486] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.357607] protocol 88fb is buggy, dev hsr_slave_1 08:36:01 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x4, 0x0) write$P9_ROPEN(r0, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x0, 0x3}, 0x2}}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x4148, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) mq_timedreceive(r1, &(0x7f0000000140)=""/25, 0x19, 0xee, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x100000001, 0x497779505dc0a8a5}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) [ 2919.629143] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000004d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2919.868198] protocol 88fb is buggy, dev hsr_slave_0 08:36:02 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x200, 0x204, 0xed, 0x3f, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0xda8, 0x8}, &(0x7f0000000180)=0x90) 08:36:02 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:02 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)='\xc3\x8d\xceF\xfd\xcd\xfdA', 0xffffffffffffffff}, 0x53) fcntl$setsig(r0, 0xa, 0x17) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000000000001, 0x0) ioctl(r1, 0x4148, 0x0) [ 2920.419731] binder_alloc: 7715: binder_alloc_buf size 67108864 failed, no address space [ 2920.466035] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2920.488334] binder: 13728:13730 transaction failed 29201/-28, size 0-67108864 line 2970 [ 2920.535153] binder: undelivered TRANSACTION_ERROR: 29201 [ 2920.612773] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000005d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:02 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl(r0, 0x4161, 0x0) 08:36:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}}, {&(0x7f0000000080)=""/217, 0xd9}, &(0x7f0000000180), 0x40}, 0xa0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) fcntl$getown(r1, 0x9) 08:36:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2921.454793] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000006d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:03 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:04 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) fallocate(r0, 0x0, 0x8006, 0x1) 08:36:04 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x34, 0x0) [ 2922.054508] binder_alloc: 7715: binder_alloc_buf size 83886080 failed, no address space [ 2922.104530] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2922.158504] binder: 13938:13962 transaction failed 29201/-28, size 0-83886080 line 2970 [ 2922.193972] kauditd_printk_skb: 171 callbacks suppressed [ 2922.193986] audit: type=1400 audit(1555317364.140:10068): avc: denied { create } for pid=13967 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2922.204914] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2922.229866] binder: undelivered TRANSACTION_ERROR: 29201 [ 2922.353809] audit: type=1400 audit(1555317364.150:10069): avc: denied { write } for pid=13967 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2922.508730] audit: type=1400 audit(1555317364.340:10070): avc: denied { map } for pid=13971 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000007d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2922.638238] audit: type=1400 audit(1555317364.350:10071): avc: denied { map } for pid=13971 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2922.776840] audit: type=1400 audit(1555317364.360:10072): avc: denied { map } for pid=13971 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:04 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) ioctl(r0, 0x4148, 0x0) [ 2922.920712] audit: type=1400 audit(1555317364.370:10073): avc: denied { map } for pid=13971 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:04 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) ioctl(r0, 0x4161, 0x0) 08:36:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2923.102616] audit: type=1400 audit(1555317364.410:10074): avc: denied { create } for pid=13967 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:36:05 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2923.338238] audit: type=1400 audit(1555317364.430:10075): avc: denied { map } for pid=13971 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2923.350920] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2923.448160] audit: type=1400 audit(1555317364.490:10076): avc: denied { map } for pid=13971 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000ad00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2923.605278] audit: type=1400 audit(1555317364.500:10077): avc: denied { map } for pid=13971 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:05 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 08:36:05 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x2) ioctl(r0, 0x4148, 0x0) [ 2923.961426] binder_alloc: 7715: binder_alloc_buf size 100663296 failed, no address space [ 2924.028536] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2924.066591] binder: 14102:14107 transaction failed 29201/-28, size 0-100663296 line 2970 [ 2924.138643] binder: undelivered TRANSACTION_ERROR: 29201 [ 2924.326037] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000ed00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:06 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x9, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000300)={0x7ff, 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0xa0, 0x32, r1, r2}, {0xfffffffffffffffb, 0xa4ff, 0xffff, 0x5, 0x6, 0x9, 0x0, 0x80}, {0x80000000, 0x6, 0x101, 0xffff}, 0x400, 0x0, 0x3, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d5, 0xff}, 0xa, @in=@broadcast, 0x34ff, 0x0, 0x1, 0x7, 0x101, 0x6, 0x4}}, 0xe8) 08:36:06 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x6, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x98e1}) 08:36:06 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2925.112797] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000000fd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:07 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0xa, 0x8, {0x57, 0x9, 0x18, {0x5}, {0x9, 0x8}, @const={0x7, {0x9, 0x0, 0x8, 0x2000}}}, {0x51, 0x100000000, 0x10000, {0xf4, 0xffffffff}, {0x8, 0x3f}, @const={0xa836, {0x9, 0x6, 0x5, 0x8}}}}) [ 2925.431063] binder_alloc: 7715: binder_alloc_buf size 117440512 failed, no address space [ 2925.471041] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2925.533075] binder: 14230:14239 transaction failed 29201/-28, size 0-117440512 line 2970 [ 2925.548211] net_ratelimit: 24 callbacks suppressed [ 2925.548220] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.548224] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.548279] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.553251] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.573514] protocol 88fb is buggy, dev hsr_slave_0 08:36:07 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2925.578635] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.583913] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.589034] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.594196] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.599355] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.672023] binder: undelivered TRANSACTION_ERROR: 29201 [ 2926.020574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:08 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000048d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:08 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x80000) r1 = socket$unix(0x1, 0x7, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x10001, 0x5, 0x1, 0x0, 0x0, [{r1, 0x0, 0xfffffffffffeffff}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x0, 0x0) 08:36:08 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2aee, 0x42) ioctl(r0, 0x4148, 0x0) setsockopt(r0, 0xffffffff, 0x2, &(0x7f00000001c0)="08cfa24a57350ab39358933594b0bed39b946dd219f5f66d9529507b879f40a9b3a4d6836bd107102889332df6466857f2bea2ebb0022335b82b59705fe2446909eddc77066fe0ee7ec9d413f98bf5533f3f45f17a00ee97cee8c8cc684bdeabe93794aad73a8774", 0x68) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x8, 0x10, 0x9, 0x8}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x4}, &(0x7f0000000140)=0xfffffffffffffeb5) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r2, &(0x7f0000000080)=0x277) 08:36:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2926.679315] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000004cd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2926.895699] binder_alloc: 7715: binder_alloc_buf size 167772160 failed, no address space [ 2926.967913] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2927.031662] binder: 14497:14500 transaction failed 29201/-28, size 0-167772160 line 2970 08:36:09 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x40, 0x4) ioctl(r0, 0x4148, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0)='9p\x00', 0x2018000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@cachetag={'cachetag'}}, {@cache_loose='cache=loose'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xffffffff80000000, 0x2, 0x7fff, 0x0, 0x7fffffff, 0x0, 0xc}) [ 2927.120534] binder: undelivered TRANSACTION_ERROR: 29201 [ 2927.199031] kauditd_printk_skb: 182 callbacks suppressed [ 2927.199045] audit: type=1400 audit(1555317369.090:10257): avc: denied { map } for pid=14507 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:09 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2927.355364] audit: type=1400 audit(1555317369.150:10261): avc: denied { map } for pid=14507 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2927.518198] audit: type=1400 audit(1555317369.150:10262): avc: denied { map } for pid=14507 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:09 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 08:36:09 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/158, &(0x7f0000000100)=0x9e) [ 2927.639665] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2927.648635] audit: type=1400 audit(1555317369.150:10263): avc: denied { map } for pid=14507 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000060d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2927.838325] audit: type=1400 audit(1555317369.150:10264): avc: denied { map } for pid=14506 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2927.908325] 9pnet: Insufficient options for proto=fd [ 2927.945742] audit: type=1400 audit(1555317369.150:10265): avc: denied { map } for pid=14506 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2928.011732] 9pnet: Insufficient options for proto=fd [ 2928.037137] audit: type=1400 audit(1555317369.180:10266): avc: denied { map } for pid=14503 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xb, {0x3, 0x4, 0x10001, 0x81}}) [ 2928.207334] audit: type=1400 audit(1555317369.190:10267): avc: denied { map } for pid=14507 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:10 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 2928.332501] audit: type=1400 audit(1555317369.190:10268): avc: denied { map } for pid=14503 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2928.351967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2928.491565] audit: type=1400 audit(1555317369.210:10269): avc: denied { map } for pid=14506 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000068d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:10 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2928.913258] binder_alloc: 7715: binder_alloc_buf size 301989888 failed, no address space [ 2928.961999] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2929.029304] binder: 14767:14801 transaction failed 29201/-28, size 0-301989888 line 2970 [ 2929.093457] binder: undelivered TRANSACTION_ERROR: 29201 08:36:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/63, &(0x7f0000000280)=0x3f) ioctl(r0, 0x4148, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x1, 0x0, 0x8001, 0x8000, 0x0, 0x100, 0x9, 0x1, 0x5, 0x99a, 0x20, 0x6, 0x0, 0xffff, 0x20]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x3c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x80000000, @local, 0x13}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000200)=0x10) 08:36:11 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) r1 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x3, r1) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x40) 08:36:11 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 2929.279414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000006cd00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) ioctl(r0, 0x4148, 0x0) 08:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2930.062984] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000074d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:12 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6a4a, 0x400, 0x200, 0x4, 0x7, 0x2, 0x9, 0x40}, &(0x7f0000000080)={0x3, 0xff, 0x4, 0x8, 0xc2d4, 0x6, 0x3, 0x5}, &(0x7f00000000c0)={0x2, 0xd6, 0x3f, 0x6, 0x0, 0x3, 0x100, 0xd271}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 2930.622767] binder_alloc: 7715: binder_alloc_buf size 536870912 failed, no address space [ 2930.657639] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:12 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x24) r3 = dup3(r1, r2, 0x80000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f00000000c0)) ioctl(r0, 0x4148, 0x0) [ 2930.715157] binder: 15036:15070 transaction failed 29201/-28, size 0-536870912 line 2970 [ 2930.769876] binder: undelivered TRANSACTION_ERROR: 29201 [ 2930.852080] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2931.788205] net_ratelimit: 24 callbacks suppressed [ 2931.788214] protocol 88fb is buggy, dev hsr_slave_0 [ 2931.798179] protocol 88fb is buggy, dev hsr_slave_0 [ 2931.798426] protocol 88fb is buggy, dev hsr_slave_1 [ 2931.803380] protocol 88fb is buggy, dev hsr_slave_1 [ 2931.813473] protocol 88fb is buggy, dev hsr_slave_0 [ 2931.818604] protocol 88fb is buggy, dev hsr_slave_1 [ 2931.823807] protocol 88fb is buggy, dev hsr_slave_0 [ 2931.828919] protocol 88fb is buggy, dev hsr_slave_1 [ 2931.834118] protocol 88fb is buggy, dev hsr_slave_0 [ 2931.839232] protocol 88fb is buggy, dev hsr_slave_1 08:36:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:14 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:14 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000040), 0x84000) ioctl(r0, 0x4148, 0x0) 08:36:14 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2, 0x0) 08:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd7000040000000000007ad00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2932.484067] kauditd_printk_skb: 195 callbacks suppressed [ 2932.484081] audit: type=1400 audit(1555317374.420:10465): avc: denied { create } for pid=15208 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2932.489553] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2932.492056] audit: type=1400 audit(1555317374.430:10466): avc: denied { write } for pid=15208 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2932.521196] binder_alloc: 7715: binder_alloc_buf size 1056964608 failed, no address space [ 2932.564070] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:14 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000001680)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) r3 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001780)=0x0) fstat(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() r8 = geteuid() lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001980)={0x0, 0x0}) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$video4linux(&(0x7f0000001a80)='/dev/v4l-subdev#\x00', 0x8, 0x109000) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = syz_open_pts(0xffffffffffffffff, 0x400) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001ac0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8) getgroups(0x4, &(0x7f0000001c40)=[0xffffffffffffffff, 0xee00, 0xee01, 0xee01]) r18 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000001c80)='cgroup.procs\x00', 0x2, 0x0) r19 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/video0\x00', 0x2, 0x0) r20 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001d00)='/selinux/checkreqprot\x00', 0xa0000, 0x0) r21 = accept(0xffffffffffffff9c, &(0x7f0000001d40)=@l2, &(0x7f0000001dc0)=0x80) sendmsg$unix(r0, &(0x7f0000001f00)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="85aabf4a3829a55632894b7298c2c5bc43ea0769187eb53dae587a32b30ee8f188df8fd606172854e57ed5fcb8b5d1638dd89f4bd7b803dad9c7f5fa48bc93129bd2e68ecb54bcdacdaaf8b01b6060f6a604b9962c0c4bf3d65532f3f65a38fe176d0aa0ec8d9dc81ddcb32818e82c45ceb77e02fa889a9cdd968fa1325fa52fb985880b3add54638c49ab480701d503ca19cd9a31848932ab9b3b09a85d6841ee0799494d09bea1872ac18350bd8f942edaed698034c52dfdd82cca1ecdf7ec", 0xc0}, {&(0x7f0000000240)="030750e4b7da703e589cdb77cacf4240ce72e551b91ff34e8e65ce7222f1365817fd7967145501cded69164838798f3b78e9f1fa51e3f7aaeec6a170aaa68d2d72bb1995dbe2bf4c7e393065cc862ca21c5bfc4aee4d7d62b43760834ac2ed2868a016b623d63c2baf3e410251bd79b897b85959e66e961096a7b613ffa86c042c8b84885fff1dd6305a8e23e99580", 0x8f}, {&(0x7f0000000300)="fd3955a0", 0x4}, {&(0x7f0000000340)="8eb9c9549953c73aba7574c4c34ab57d952b413ebf5bca8cb95532a0bb5292cb34a53a2ae68f4c97881735e1250aadabbe9a9c7e7a6f3f5680e13133f4604235100f61acf6ab4aa93bf3331af74e343b8ceef07fbe169f8589074c12b7c9c536f01762ece4c3d54d8fb1147a412b9639e748f87837ba3f8feebb7eac9986824b6e4dc993137cd66b1a01435bdf7ca0a912b7d0a5378a06e56f263ffd2654f4c791c5c700864c43c3e10e6855469b650011f518bd6a0ea17de0", 0xb9}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="633366ad1b7a73418e3a9e2e00330369bf4b7c333ff7838eed41f0a9552a7eb4461ad180fba43ad62065a0d78f2ab96e4ff2948b2031cccebbb9c24e0140dbf919e56b9bd0a0a39ee084660b532ecfc9fd74b8a1b1df0b2bf87400bf1945cb794235f54a8898a80f438fdecf23cd6977bbb9b08f8af3323cdc71efc5d59c0bb1918835c64a357a9368714ec4dec1b97378783af6fe063613e87d94161a983d351a25df1646a1ff93041c2433fb54bf0a388f22fdc403d6282fb87f30c572670725f1210cda7c5f6c3765ca12ef9511e6e091f91469334f0eea04e7ce1700265a17f2021be05ae9", 0xe7}, {&(0x7f0000001500)="46cf2abf3dfd8cf7649f7b297784af12b5cdc4fa42567bc0cb2984b32793d50edcc6a05c4c4fad069f6f605a6c554f3df56662c4d1993902c6c616a7529b2e345847d70b4938d323f16416a1196c62cd1e66728f8e260d22d13eebd0ed3b30fa7a0d9754bbc0a6a3adcdf3bef7e4ee493657c40a4e04e890defb80596e679858b17c1d3bac780f4e04b8e1176dd2e17ca90698890d26ce362053986278c45bf2cdf0bd4e84951b2f92009ebc7115eabd2d53289b8a20fcecd0f6e8f5fd5514e0f03544890472d600acb9e4379f565ed7c7abcac486ce3395cc88b016bb078566e8596329c76e73a83febcc2780391e32fe813d", 0xf3}], 0x7, &(0x7f0000001e00)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, 0xee01}, @rights={0x20, 0x1, 0x1, [r12, r13, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r18, r19, r20, r21]}], 0xe0, 0x40094}, 0x20000051) r22 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r22, 0x4161, 0x0) 08:36:14 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) sendto(r0, &(0x7f0000000080)="aa1c8b4108022c5cec73df1a9f2cd44c011b3c964c4342258bd4c264a07d58f439dafb296b127e4abc16a74bbfcf3408a1c4503bd7df13d53db77617b8cc8627a9fdac07a90e98327d1a8c52a5bb26b3fe6f57a052641a8e62e4bf38fcd48721ee359cc57fe25f15cc5e1d1f688a3db89d86f141f9090fc7e6ff6a0ffda9d208e4fa35cbafc557e359261af6b311206fa5845cee61dfda1f7ba3f2d6c75c2c26e9ad771cc2d157d94b2b72b502c5a5525d388d5451ee550d4bb02ffab91f0baee706a679ece4f7092ee7243a0ed546582d0ddd5abb194a5cfe919f01ff5830f966501623a4ace23152df", 0xea, 0x80, &(0x7f0000000180)=@ax25={{0x3, @bcast, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @default, @default]}, 0x80) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r0) [ 2932.586290] binder: 15209:15212 transaction failed 29201/-28, size 0-1056964608 line 2970 08:36:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000e40043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2932.634988] audit: type=1400 audit(1555317374.470:10467): avc: denied { call } for pid=15209 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:36:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2932.688333] binder: undelivered TRANSACTION_ERROR: 29201 [ 2932.778164] audit: type=1400 audit(1555317374.520:10468): avc: denied { create } for pid=15208 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2932.986884] audit: type=1400 audit(1555317374.930:10469): avc: denied { map } for pid=15276 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2933.122051] audit: type=1400 audit(1555317374.990:10470): avc: denied { map } for pid=15276 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2933.239437] audit: type=1400 audit(1555317374.990:10471): avc: denied { map } for pid=15276 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:15 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2933.391306] audit: type=1400 audit(1555317374.990:10472): avc: denied { map } for pid=15276 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000030043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2933.533571] audit: type=1400 audit(1555317375.010:10473): avc: denied { map } for pid=15290 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2933.642216] audit: type=1400 audit(1555317375.040:10474): avc: denied { map } for pid=15279 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2934.106315] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2934.176507] binder_alloc: 7715: binder_alloc_buf size 1207959552 failed, no address space [ 2934.236717] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2934.312690] binder: 15345:15353 transaction failed 29201/-28, size 0-1207959552 line 2970 [ 2934.363233] binder: undelivered TRANSACTION_ERROR: 29201 08:36:17 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:17 executing program 0: getrandom(&(0x7f0000000040)=""/47, 0x2f, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) 08:36:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000e40043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:17 executing program 2: inotify_init1(0x800) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) eventfd2(0x37, 0x7d8fd442cf4eca62) accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80, 0x80000) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x101800, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x4161, 0x0) 08:36:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00009008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2935.994903] binder_alloc: 7715: binder_alloc_buf size 1275068416 failed, no address space [ 2936.014072] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0xda0, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4148, 0x0) 08:36:18 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2936.046841] binder: 15563:15568 transaction failed 29201/-28, size 0-1275068416 line 2970 [ 2936.102309] binder: undelivered TRANSACTION_ERROR: 29201 08:36:18 executing program 2: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x4161, 0x0) 08:36:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000010c0)={0x0, 0x8fd, {0x57, 0x1, 0x81, {0x8, 0x7}, {0x65, 0x6}, @rumble={0x7f, 0x55}}, {0x55, 0x8, 0x25e4, {0x30ee, 0x7f}, {0x0, 0xc0}, @ramp={0x2, 0x3f, {0x0, 0xa68f, 0x5, 0x4}}}}) ioctl$KDMKTONE(r0, 0x4b30, 0x10000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) sendto(r0, &(0x7f0000000040)="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", 0x1000, 0x40000, &(0x7f0000001040)=@nfc, 0x80) ioctl(r0, 0x4148, 0x0) [ 2936.673863] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2937.470335] binder_alloc: 7715: binder_alloc_buf size 1610612736 failed, no address space [ 2937.494180] kauditd_printk_skb: 185 callbacks suppressed [ 2937.494194] audit: type=1400 audit(1555317379.440:10660): avc: denied { map } for pid=15801 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.518515] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2937.578259] binder: 15798:15800 transaction failed 29201/-28, size 0-1610612736 line 2970 [ 2937.586856] audit: type=1400 audit(1555317379.480:10661): avc: denied { map } for pid=15801 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.618828] audit: type=1400 audit(1555317379.490:10662): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.621385] binder: undelivered TRANSACTION_ERROR: 29201 [ 2937.656081] audit: type=1400 audit(1555317379.500:10663): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.687647] audit: type=1400 audit(1555317379.540:10664): avc: denied { map } for pid=15801 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.722713] audit: type=1400 audit(1555317379.600:10665): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.814687] audit: type=1400 audit(1555317379.610:10666): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.866076] audit: type=1400 audit(1555317379.630:10667): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.898592] audit: type=1400 audit(1555317379.640:10668): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2937.974211] audit: type=1400 audit(1555317379.680:10669): avc: denied { map } for pid=15801 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2938.028194] net_ratelimit: 25 callbacks suppressed [ 2938.028202] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.028233] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.033778] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.049408] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.054785] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.060218] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.065441] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.070739] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.075890] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.588307] protocol 88fb is buggy, dev hsr_slave_0 08:36:21 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00243008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:21 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xfc) ioctl(r0, 0x4148, 0x0) 08:36:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x0, 0x70bd26, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) 08:36:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2939.274576] binder_alloc: 7715: binder_alloc_buf size 1744830464 failed, no address space [ 2939.300606] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2939.307625] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:21 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20c0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) ioctl(r0, 0x4148, 0x0) [ 2939.329032] binder: 15909:15914 transaction failed 29201/-28, size 0-1744830464 line 2970 [ 2939.355952] binder: undelivered TRANSACTION_ERROR: 29201 08:36:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00343008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:21 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x800) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400101) ioctl(r0, 0x4161, 0x0) 08:36:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:22 executing program 0: r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x100000001, 0x220000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1000000000000, 0x0) fremovexattr(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7365637572697479ff036465762f736e642f70636d432344236300"]) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x33f, 0x3, 0x8001, 0x3, 0xfffffffffffffff9, @local}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x4148, 0x0) epoll_create1(0x80000) [ 2940.140856] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2940.552290] binder_alloc: 7715: binder_alloc_buf size 1811939328 failed, no address space [ 2940.605612] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2940.648364] binder: 16163:16180 transaction failed 29201/-28, size 0-1811939328 line 2970 [ 2940.692242] binder: undelivered TRANSACTION_ERROR: 29201 08:36:24 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00443008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:24 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0xffffffffffffffff, 0x3, 0x7d, 0x7}]}) 08:36:24 executing program 0: clock_gettime(0x0, &(0x7f0000003900)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/228, 0xe4}, {&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000340)}], 0x7, &(0x7f0000000400)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000000480)}, 0x100000001}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/232, 0xe8}], 0x2, &(0x7f0000000700)=""/4, 0x4}, 0x7}, {{&(0x7f0000000740)=@caif=@dbg, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/8, 0x8}], 0x1, &(0x7f0000000840)=""/88, 0x58}, 0x800}, {{&(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/61, 0x3d}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/87, 0x57}], 0x5, &(0x7f0000000d00)=""/12, 0xc}, 0xafb}, {{&(0x7f0000000d40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000dc0)=""/49, 0x31}, {&(0x7f0000000e00)=""/84, 0x54}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/192, 0xc0}, {&(0x7f0000002040)=""/178, 0xb2}, {&(0x7f0000002100)=""/227, 0xe3}], 0x7, &(0x7f0000002280)=""/110, 0x6e}, 0x4}, {{&(0x7f0000002300)=@nfc_llcp, 0x80, &(0x7f0000002400)=[{&(0x7f0000002380)=""/86, 0x56}], 0x1, &(0x7f0000002440)=""/4, 0x4}, 0xae9d}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002480)=""/25, 0x19}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/222, 0xde}], 0x3, &(0x7f0000003600)=""/194, 0xc2}, 0x8517}], 0x8, 0x40, &(0x7f0000003940)={r0, r1+10000000}) ioctl(r2, 0x0, 0x0) 08:36:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2942.596015] kauditd_printk_skb: 119 callbacks suppressed [ 2942.596033] audit: type=1400 audit(1555317384.540:10789): avc: denied { create } for pid=16382 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2942.633355] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:24 executing program 0: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ad39032dd26ff5899b632219bda1e786b061f90fede077608d21f4f8412f880713761123a5af0387a4749aef79934597424a52c841fe46ed3cce817db756ded50b17e9efa85b03925db7e393d373517972b63cd2aa3813af8dbba26f74691fb5e3d84013e2ac3d1633121f3d7445fabad323d08af4eaba9b3cdc26ae1574ba1d52246e5c01a8a759985776ca23b25d8728cb2ea5416cfcddbfe047a5d2ec67390f67294e25edd0fcd40cddfa7c56a00422ed9199750ddbc5d0a0", 0xba, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', &(0x7f0000000280)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x5, 0x5, 0x3014, 0x0, 0x9, 0x0, 0x0, 0x7}}) socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x4148, 0x0) [ 2942.665561] audit: type=1400 audit(1555317384.580:10790): avc: denied { write } for pid=16382 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2942.671984] binder_alloc: 7715: binder_alloc_buf size 1946157056 failed, no address space 08:36:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00543008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2942.759044] audit: type=1400 audit(1555317384.610:10791): avc: denied { call } for pid=16386 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:36:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2942.819630] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2942.843371] binder: 16386:16388 transaction failed 29201/-28, size 0-1946157056 line 2970 [ 2942.908163] audit: type=1400 audit(1555317384.670:10792): avc: denied { create } for pid=16382 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2942.979944] binder: undelivered TRANSACTION_ERROR: 29201 08:36:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) ioctl(r0, 0xfffffffffffffffe, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="40745daf52ac5db2811f70ffd4fd985dca52bc6cae5ad3d89c31728f5b5b987ad558032345edd2cbf36e4fbf507939f178dbe89ed38f9f16083ba7f61dc47eafca504240c25aff7aecbbce9d24fb92", 0x4f}, {&(0x7f0000000340)="c85f0c4cfa92f19c25201d45d512073455ffdd4bb1dc90a312c2a006435182395834191af365ade248394c96a9b2c774916de3726c", 0x35}, {&(0x7f0000000380)="23e92824cccd15968254177e7e52eb4b50a1e4f5f66e594116dd56adf563a22f4b39cd4d6a0f0203d63daa817bfc2ce55bbb20696fcce8470cac7543a872d5727306ffe61b9157d9c461e144697d620689aab940e9aad3d87fa48093317431c3238b7498e142f3ada84b0bfb59fc0f299cb0cf792a3f5c260ca06c1dc3db4e706f987c15dab8aa0253a915eca7d37bd27acd80cc11e2ebf2be60fa976ed2f5d93641e405e1b04a98e48662207b13672a9b57144e992b7cad23f3b6acae", 0xbd}], 0x3, 0x0, 0x0, 0x4000000}, 0x80) fchown(r1, r2, r3) [ 2943.155305] audit: type=1400 audit(1555317385.100:10793): avc: denied { map } for pid=16515 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2943.361552] audit: type=1400 audit(1555317385.150:10794): avc: denied { map } for pid=16515 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2943.414705] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:25 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x5) ioctl(r0, 0x4148, 0x0) fstatfs(r0, &(0x7f0000000080)=""/248) [ 2943.558544] audit: type=1400 audit(1555317385.170:10795): avc: denied { map } for pid=16515 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2943.654317] audit: type=1400 audit(1555317385.180:10796): avc: denied { map } for pid=16515 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2943.849162] audit: type=1400 audit(1555317385.230:10797): avc: denied { map } for pid=16515 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2943.998202] audit: type=1400 audit(1555317385.280:10798): avc: denied { map } for pid=16515 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2944.268202] net_ratelimit: 24 callbacks suppressed [ 2944.268211] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.268242] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.275792] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.293186] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.298626] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.303841] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.309003] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.315416] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.321560] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.445116] binder_alloc: 7715: binder_alloc_buf size 2046820352 failed, no address space [ 2944.488994] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2944.518353] binder: 16615:16617 transaction failed 29201/-28, size 0-2046820352 line 2970 [ 2944.549368] binder: undelivered TRANSACTION_ERROR: 29201 [ 2944.828240] protocol 88fb is buggy, dev hsr_slave_0 08:36:27 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00643008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:27 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4) ioctl(r0, 0x40004161, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x408) 08:36:27 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x2, 0x0, 0x1}, 0x8}}, 0x18) 08:36:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2945.971297] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:27 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x7, @sdr={0x30314247, 0x8}}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl(r3, 0x4148, 0x0) mknodat(r3, &(0x7f0000000200)='./file0\x00', 0x400, 0x7) [ 2946.013751] binder_alloc: 7715: binder_alloc_buf size 4261281792 failed, no address space [ 2946.049685] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00743008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2946.077752] binder: 16733:16739 transaction failed 29201/-28, size 0-4261281791 line 2970 08:36:28 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2946.120824] binder: undelivered TRANSACTION_ERROR: 29201 08:36:28 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x2, 0x1, 0x2, 0x7f, 0x2, 0x7, 0x10000, 0x1fd, 0x38, 0x365, 0x100, 0x40000, 0x20, 0x2, 0x3f, 0x8, 0x8ea0}, [{0x0, 0xab21, 0xae, 0x2, 0xe6a, 0xfffffffffffffc01, 0x1000, 0x80000001}, {0x1, 0xffffffffffff0001, 0x6, 0x400, 0x9, 0x80, 0x7, 0x9}], "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", [[], [], [], [], [], [], [], [], []]}, 0x1978) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) ioctl(r0, 0x4161, 0x0) 08:36:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2946.721450] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:28 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2947.396062] binder_alloc: 7715: binder_alloc_buf size 4294966784 failed, no address space [ 2947.449539] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2947.478427] binder: 16971:16987 transaction failed 29201/-28, size 0-4294966781 line 2970 [ 2947.508290] binder: undelivered TRANSACTION_ERROR: 29201 [ 2947.612112] kauditd_printk_skb: 157 callbacks suppressed [ 2947.612126] audit: type=1400 audit(1555317389.560:10956): avc: denied { map } for pid=17017 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2947.733320] audit: type=1400 audit(1555317389.560:10957): avc: denied { map } for pid=17017 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2947.892169] audit: type=1400 audit(1555317389.580:10958): avc: denied { map } for pid=17017 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2947.998221] audit: type=1400 audit(1555317389.590:10959): avc: denied { map } for pid=17017 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.056885] audit: type=1400 audit(1555317389.880:10960): avc: denied { map } for pid=17183 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.131585] audit: type=1400 audit(1555317389.880:10961): avc: denied { map } for pid=17183 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.211918] audit: type=1400 audit(1555317389.910:10962): avc: denied { map } for pid=17183 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.292730] audit: type=1400 audit(1555317389.910:10963): avc: denied { map } for pid=17183 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.348417] audit: type=1400 audit(1555317389.930:10964): avc: denied { map } for pid=17183 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2948.398203] audit: type=1400 audit(1555317389.930:10965): avc: denied { map } for pid=17183 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:31 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:31 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="d8574183e2fadca4cc3f26dd88c4f782c3c1a26472454dc7d895b891c3b707f1e18165a6d9be1aff4427d2b6002c79063b9c5d2af118cae1355875af310759e3efd1f2a1d6fc236b9520d0a79aa77edbf5addf68c2b7e732eece476bac1dbb6ede8e24febc8d7f87e1c032a20dcf9ade44781d3f3b879a6c5991514aa3d9430fb0f6f435f5c4fe0748ea8407261964b42f38ed7c7c7b6df3efbe2bd8377c529cb56539c16af49803a64d8e6db26e3821e3d688f42c374eac36e85c9da6ca6277", 0xc0, 0x3, &(0x7f0000000100)={0x77359400}) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80) ioctl(r0, 0x4148, 0x0) 08:36:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:36:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00a43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) [ 2949.301736] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2949.322930] binder_alloc: 7715: binder_alloc_buf size 4294967168 failed, no address space 08:36:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00e43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2949.370815] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2949.388309] binder: 17190:17195 transaction failed 29201/-28, size 0-4294967167 line 2970 [ 2949.410845] binder: undelivered TRANSACTION_ERROR: 29201 08:36:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:31 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x3) ioctl(r0, 0x4148, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 2949.756413] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00f43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7001, 0x10001, 0x2}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0x1f}, 0x8) ioctl(r0, 0x4161, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x4c, 0x4) 08:36:32 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:32 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@default) 08:36:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2950.508209] net_ratelimit: 23 callbacks suppressed [ 2950.508218] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.508244] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.513232] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.518353] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.523469] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.538617] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.543910] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.549162] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.554497] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.559641] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.701575] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d04843008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:32 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x7f, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xcb45, 0x3ff) [ 2950.863353] binder_alloc: 7715: binder_alloc_buf size 72057594037927936 failed, no address space [ 2950.938286] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2950.984588] binder: 17322:17325 transaction failed 29201/-28, size 0-72057594037927936 line 2970 [ 2951.029595] binder: undelivered TRANSACTION_ERROR: 29201 08:36:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x9) ioctl(r0, 0x4148, 0x0) [ 2951.433849] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:33 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d04c43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x7) r1 = socket$isdn_base(0x22, 0x3, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/68, 0x44) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="440f06c4c2898c0166ba4300ed0f009df3846b2b0f01c9b8010000000f01d948b800000000000000000f23c80f21f835000080000f23f8c422454769f3c4023146245266baf80cb832d8658eef66bafc0cb000ee", 0x54}], 0x1, 0x8, &(0x7f00000001c0)=[@cr0={0x0, 0x8001001e}, @cr0], 0x2) 08:36:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000340)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000002c0)={r3, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r5, 0x200, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000040)={0x7fff, "41ef8f001580a7952ad580f1e158b54236dbdeb0b3f2eb108d619ea7f82fee4b", 0x3, 0x1}) 08:36:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2952.369335] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:34 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d06043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2952.633708] kauditd_printk_skb: 154 callbacks suppressed [ 2952.633721] audit: type=1400 audit(1555317394.580:11120): avc: denied { map } for pid=17606 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2952.789799] audit: type=1400 audit(1555317394.580:11121): avc: denied { map } for pid=17606 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:34 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) [ 2952.916596] audit: type=1400 audit(1555317394.600:11122): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2953.078202] audit: type=1400 audit(1555317394.620:11123): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2953.189045] audit: type=1400 audit(1555317394.670:11124): avc: denied { map } for pid=17606 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:35 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2953.363563] audit: type=1400 audit(1555317394.700:11125): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2953.508957] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2953.578268] audit: type=1400 audit(1555317394.750:11126): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2953.710206] audit: type=1400 audit(1555317394.750:11127): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d06843008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:35 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x5}, 0x8) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x24000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000180)) ioctl(r0, 0x4148, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7) setsockopt$inet6_buf(r0, 0x29, 0x77, &(0x7f0000000040)="1560a33abba8b031d7b2a518111d6ff24f9abf6af5be95166c8388f25e5cf03754017171551c820076f48eb4fc590785b32375ed25a2ba4d739aa5223650418bdfa89e0e03fdf69d722a2996", 0x4c) [ 2953.869143] audit: type=1400 audit(1555317394.750:11128): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:35 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001140)={0x1000, 0x401, 0xfffffffffffeffff, "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"}) r1 = getpgrp(0xffffffffffffffff) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001080)=0x0) rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f00000010c0)={0x2c, 0xffffffff7fffffff}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5f8388a8, 0x0) ioctl(r3, 0x4161, 0x0) 08:36:36 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2954.047935] audit: type=1400 audit(1555317394.810:11129): avc: denied { map } for pid=17606 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2954.090593] binder_alloc: 7715: binder_alloc_buf size 216172782113783808 failed, no address space [ 2954.170497] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2954.219561] binder: 17795:17798 transaction failed 29201/-28, size 0-216172782113783808 line 2970 [ 2954.309638] binder: undelivered TRANSACTION_ERROR: 29201 08:36:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2954.640144] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:36 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/191}) ioctl(r0, 0x4161, 0x0) 08:36:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x119, 0x0, 0x10000, 0x100000001}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x5}, 0x4) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) ioctl(r0, 0x4148, 0x0) 08:36:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d06c43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:37 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) [ 2955.592964] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d07443008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2955.796507] binder_alloc: 7715: binder_alloc_buf size 288230376151711744 failed, no address space 08:36:37 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x800}) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x0) ioctl(r0, 0x3b, 0x0) [ 2955.854936] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2955.923610] binder: 18014:18042 transaction failed 29201/-28, size 0-288230376151711744 line 2970 [ 2956.012515] binder: undelivered TRANSACTION_ERROR: 29201 08:36:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:38 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4148, 0x0) [ 2956.416913] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2956.748177] net_ratelimit: 24 callbacks suppressed [ 2956.748186] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.748216] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.753393] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.758503] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.775650] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.780854] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.785939] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.791160] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.796242] protocol 88fb is buggy, dev hsr_slave_1 [ 2957.308245] protocol 88fb is buggy, dev hsr_slave_0 08:36:39 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2957.695720] kauditd_printk_skb: 191 callbacks suppressed [ 2957.695735] audit: type=1400 audit(1555317399.640:11321): avc: denied { map } for pid=18282 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d07a43008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:39 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x7fffffff, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000280)={r1, 0x3}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x3}}, 0x5, 0x1ff}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r3, 0x9e, "5f8551b7f6208be685560a08b89f64e384df385f174d27b4a48b8fb379dfa6216d932a65e329e77308719aaa888c363bcdc86120d8e7e3abcd73db16e4aa4d2ab5f5a6bd12843c5564f76242108e5e340a11f21904a426cc377d64c3a52221c45c91986a978db05c27481cdf7c8a65523b2a623ac544ff4837b023fa78dbe8551b042ff4707512c427b99e3ac671679c6d66b0a98ddd76868351618fcdfd"}, &(0x7f0000000100)=0xa6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x822, @empty, 0x80000000}]}, &(0x7f00000001c0)=0x10) ioctl(r2, 0x4148, 0x0) 08:36:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r1, 0x80084502, 0x0) [ 2957.768254] audit: type=1400 audit(1555317399.650:11322): avc: denied { map } for pid=18282 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2957.863246] audit: type=1400 audit(1555317399.650:11323): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:39 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x30000000000) sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x8001, 0xa8, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, &(0x7f0000001840)=[{&(0x7f0000002580)="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", 0x800}], 0x1}, 0x4000000) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) sendmsg$kcm(r3, &(0x7f0000001900)={&(0x7f0000001940)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(gcm(aes))\x00'}, 0xfffffffffffffc2f, 0x0}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12) gettid() bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffe8a) ioctl(r0, 0x4148, 0x0) [ 2957.952600] audit: type=1400 audit(1555317399.650:11324): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2957.987589] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2958.061635] audit: type=1400 audit(1555317399.680:11325): avc: denied { map } for pid=18282 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00060008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2958.210515] audit: type=1400 audit(1555317399.690:11326): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000380)="c2", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) [ 2958.406777] audit: type=1400 audit(1555317399.690:11327): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:40 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2958.563656] audit: type=1400 audit(1555317399.690:11328): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2958.688520] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2958.706658] audit: type=1400 audit(1555317399.700:11329): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00063008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2958.879880] audit: type=1400 audit(1555317399.710:11330): avc: denied { map } for pid=18282 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:41 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2959.617684] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00008008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:41 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) ioctl(r0, 0x4148, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000180)={0x8, 0x800, 0x4000000000000000, 0x6, 0xffffffffd75987bf}) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x6) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x3, 0x8, 0x9, 0x7fffffff}, 0x10) 08:36:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:42 executing program 4: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:42 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x1, 0xd6, 0x7fff}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) [ 2960.455927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2960.470289] binder_alloc: 7715: binder_alloc_buf size 504403158265495552 failed, no address space [ 2960.532006] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00009008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2960.599776] binder: 18758:18766 transaction failed 29201/-28, size 0-504403158265495552 line 2970 [ 2960.672105] binder: undelivered TRANSACTION_ERROR: 29201 [ 2961.344411] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:44 executing program 0: pipe(&(0x7f0000001340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000013c0)=@req={0x28, &(0x7f0000001380)={'syz_tun\x00', @ifru_ivalue=0x5}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000001280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3ff, @null, @rose={'rose', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) r2 = syz_open_dev$cec(&(0x7f0000001440)='/dev/cec#\x00', 0x2, 0x2) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x10001, 0x100) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001240)=ANY=[@ANYBLOB="024000000100d00f"], 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x4148, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x2d, &(0x7f0000000240)="cd01a67c35f92e3488edca8ae3781a6d11741d0e46833521cbe00c8a322077ec67ca6f24d2c969ec7620f2c58264d73b212d0ad5300806b6f7dc32fbf2acf594a5665483d08e28672b428fc73b68a3479ea5715c56cc74e7a92ea86a477360df7a7266ecd337123a409c2b084ae8186aa98fbb2a169c18b3aaceeb29af8a5ed19b823c494ea9b120b3d42363b9a267645ecb60065b3a6c820a50595353a96af05fecfd7e6849aff47c18a386bd5983a58a8e2587b2e0caebd47480bc1f69ca8c9d26297188a996155a53f7570bf2d7266120d14b6de99a7a92b7a828fb75e215aac28df34067d752b5c3d31a8e71cc65094bc9371d55c45878fde43cfa41da65ed4f5c52e4332dee9738cb8e9f256e0744430500730ca905e4fac0c856c57479c92b1d21640a83cd91270519507279795a93a09841969bc2ec0fb4eb8460430d5ff37a12a06356748529fce2e85a96cd54ae94dd175a8f89fb7a58408087a13080011e82b562b3aba609abd33c76c9a7124adf38f37d9da4ced0147eed6c04a14db28846cd08edd2c4e2630686da983776c22c8256d758684b28d361a4c67bc7d772ea7b57486bbe421f7dc8843fb3664586987bf168c3dab8e8f525ee7e7635e92e21703ed6bd9b60a72cdd9d05908d116ea54bf27a95c6b8c00c834c2fec0425634c070c2e4a176170ae9c239a24bdd856d056e835b84f2cd348866181f9ca0e5e659e88546772a0ade83bb4e158d18bf310cb04c02e4b1a2f9cb07b4f125b6efee71d45b16193b99a6f20bf185edb5447586c560e3924021b2389ab676ac79c53a6fa19696325b9518bccc47c9d3a90ab796ba6fb4b1ec2fb7d8a26002863cefb2bc9d6468e1877c5043cb89af5b3a59d0f6505eb847e8bb294def4b3633071816fb1015d6913c5c09697e2c4a725cf5887b84ed4bee5aef6de56b37c6f3d9eca46fd117f3e84aadaf00eca470d1a6c48ce4148cc2f14edeb8ac43ce41e2dd8ab736bb204a20377e4f03f0d07e81fc5a559370c578968694cd1dc67fbd72b104db8f4f4a39a489adb24c526b4944bcf866aa84178b15468bbc302458d8b84aad5d438a097293468cf5a06e0e427845934e5187f523f3ce7216a07a47e6df6f7b46598759ad6889e1287a8a25375747b3f495407e02bf44a62c26b96a22e089ee13a99d42d61efe7d535b2fa77cd7413658bc450ddc1dc239e8d860e9fe28b89edfe5e9fd4e9e3568e8a1daf94076da7d4fc9fd6804b7313388d5b012d14bfdec2bf736f89b815a691cbe5516d2dbdc3121ab0489c1f562279ac1af725d10718496b281ca449440faad9c6b14949c3ec32a85d57a10939ff031a70966c788d1b8bca84a3fb77d51e99bfc73b058c3177b8e367e950a871d48c62ddac12a936d24deb2640fa294d4bcd5258b600334ded3cd00ecb4d0ce5716e3dc98ca27b6bbdb902c1f0ac37f474e6844741f8f4d10b4251c6a06472e21d5df44884561910b27aa524ee3ceda0e314fe070d340c7f649d0057120a608e49ab96d3d78e579bd7c846568351f88d64f8ffe606bb5f065f6e3722ce8c7d8dc22f5c9734f441dcd279041318b75061890bda426767706d7e99b9021ecd200412f33e056dc2ef756b8ef242503713050d83594d745f086806372f1582a9adba30c91a774cbb35c9106a0d3319acc2d9a8ae467096945f62b392b5122467c30c408d35ffc7daad17be18fc7ea3e6b980ff033fd30b8b1f1d2b2af0d06f27790388b277b37b9e36feb3e769e5c453646d316a2345a15337788f590539fbffdfd744292305d4253dd2183439e18e09d2b7c0617d081099bce8b48cfb4a8e20c125dfffaac02c6026cd7d7eae04ca4367e9c60d9d02506d76dfb50cb2b17b77a556edb5f06602e45f1ccc1c91f4faad53fa6a6e71bc876bda2622417088cf35a5614828fb4473923f09dc34a7d8baf7c1e55d1c353c7b5b789a10b891836658f43882f3137ec0d55d6821e4322e9cf456be17999be059e3366bb5b5e3f9227c2b5d68d0eeefefa268a74941d00343e4989590667b15ee1930492e9b2e5d11db88e6783634550f7820e94fb2f154e60e4a199acaaae493ce4754ecbbb8d2feef5acdb98d5f41001f4bfedfea9e605a273d1f945497c820a85bf910cd97b282e4a986e7dd841a6a735b50c1fb8222de4443ee821df0d54f1de92a04c09191829743d1badbd113748827d7747e109e4505f6dfbe9ec6e6c6b8919e8561e5975473b53b7629eb4914f9a4482ca133f3aba4c5f024400da76635314d599c2b5c420793c468a837fd5f03d798e02403613507291a47cc703c3d68634a4c2dfb483c2cd9de435265ba92956c2b15b6dc80c053f9d84c81fb20b2cc54c205213b4538fd839f6aad6d736fb07e0e34fc0c674a1b09905667b6f4aa4ea9c81581639f90c0715bc4ecfdaf092ff602c232af4715613d12f252789cbc80e69f8208b50f2106125d0cd8d018a78344b3e3defd080a12f4675012dad3a1098851350e00200908e26ee9afcbe48456726c631d01b15f44be52352d4e1bafcad50fe3760da689a250837cb71cb7affd35a843013e35783c1842d5f9afdc9f94a55202644f7fc6bf097f9236524184fcb64485ef46aaeab8e1e7a69a6e8d9d4c7133a232db2ef28a7b091a4846e1cca4084981937eb96615be5425e5b047961bec8b24db6e9181f72c0919f28d9d9c6435e0c8fb31c68ca416a0ece054b62808742238c86757f865aae68d3ce7fd0412e921de961636f38cf7ee0ddb6af5de49d7a150a485db9cf07c52b951ac2a86ea5885fcbd591e9652a6cf77fa29790a82ca07ba54b615a00999c00605d0387219e80883b537520477c52af7a8b829fbdeeff969c7d71f85366f5c383f02ca760ab0d19206124305a29d73d465c4bafeb49fa007927a128ce72b36886a835d94d0b325c1d4cbf4b4d4bbeb4e269baf85f7522163fbd43d24d309d1d0353bb0fcea92853da0c5aaa703df9ed32aff73eae0f6c7121da1c88e943fc8c52bb5d900f89d332f2454ba733679fe260a1d95feb6ce0c0913250151aae6782ff7f925d0bdf3600a357ab49777d7eba8e0d854562e02ba41ad93863941df8ccad72968afcc50a0c36bbb12fbbd56ce269be44e33365f42be0af3593d8650609745d8c9f9b6e1b7c55405bae3c50bc41f2a8ee992ea34a5b3f705964a7031e921ddb4bb0f77aedfbd96d4766999e2e64101268304c7dbed29bffa6f4f88172fd7651b28d97aec23f5752e223b8fc7c6c3ee33ac191fd2c653f6a5a30376fd6260d214ceeaf4b762d3b6d99074cafa1d8900063fde7b6f362e76e4ecfac732c8c31e3e4233c9aa35006004de4f193b5ae4ab08dcb9843cc8933dc1cfb28a72c84d9f0f83c95c4c5ae414ce000d4de774f6134665a3d60780aa3ccade5cc3baf5b543c1cc92345e110e48499e3d69edbc72ded499ba7510f5c559b54173a0f66a21fa225d510d7388a987577e3e1a2885263965c6b42100f2d29e99ad9d77c670166c7cb0f23b7fe1d63dc45a6efbdb7646488c6fe5e541069334e686b20fcf24b6adc82b4ec7cafca0e5bd923a60111ec97593ddc48399e6a824edccdc1380702329ff2a95eee8ba8440f5eefb4776250b415afa71b01b3dc77a51ca13b7e181176f18ba9771a5ce84ad143cf6a946755c894b1f51b4fb71b68acc7a9a0e8a00225a397859c683f3eb65c9e864c0f129707c483a2022c213fcd7808914bf757399e6757ee66a56cfcea680c67150fd462d125a0e3869fd54ec5f275be838846fde7971db3557fcc95575317fb218af081c51f246c3e455c10de2866e71473bbdf1ad8ed0844dfb4d968a045c45523eca94206e0c3d47d486a54b50e6127de3edb1db1265bf51552f1727590ce31775ed7a34027b66c04889f5fc3e160455740a6d406e5d2dd8454b3b0ee87efe89fa77058f011e5951810baa346bf7d31aeddbf6f3de43a915245c516336e98a32e2a70b07773361f531a7c5789933754ca70d6ae30a53b05368e092cd3534901e7c01aba559aaa4cb1758c68a435fad2892675211455a96ff94b8088b0035147cf4cb0148dd3e4034b4adb2e6d518707bf0c98f8ca421b40d45b8892afabb18dc853961cd938e9eb931a9c67449843d6eb35e1942e04403f0cbd10ac6f09c25e2550d70e5b94f56a48d2a4039622c47e4e072275b9326106e1a552111c0d587aca21f68fa8a4855c1168e8b585ab7e7b71b8c6aa4a437698aa1b99a744c5d34f9f2d901f740b63cc7d2ff6ce205b5d09e0c2a303b0095afc5d257d23e9a7c7ff112e6e941da28d33dce0ba5f04f5c1ef5f31c7227ec522ccdd92b9302b2a912fca013145bb99365aa08f7fbeb10d46151a2f91387b8696ee0d707e489d2082f50c2ee55f653ef39f159fc147854e7435f4332ae73d0a7726fc8b83d831c7ebfbe465cdde6ee09de30e53cddf658dc4894ed17f50073732c28ef38eda8d4d15fe7a0fb0ae98616d2cf4b0d32daf50d73fa5d9da87a882a004388b556dab0402e83e310e7656231f9fe62825bd7418aaaafe27867a95e1215da9779900922c6ec390e51ef6f95b448d382172da19ad595fc203b05dd7971b3ab90e4350c1ecb07e5fe499ec4b2dda167de8e19c2d03496b869d15372d3760d389028759d62b8cd7fa7297c2382c47a0586df3958ad0cc4bbae039478125e76ce8b6495a94d94af5dbf883ce0342a9a01537f77e4e9c527f5ea51ef27c179e5bada1f1e54f8f4ebd63e1d2e16031f2ab76acc04239fd65da35b302fc35380c87f3d950afdf653713ed748c2b0922af9f47b73eca87bf098ac9a3c4fbb2a981e038c37a014e0e20e2b3bf81f6c33d4695dd0b4b087db4a1d07f40adf153d36693bb0dddb670e852beffc094202252cf5179b4e3f9a3a5d68c1eb36212cc0f9318db76a0e5b0c55079f7be4c045e89e47c9874a5f65219341dd029dde94914ac28e8b0b42285db3b21a358109986c172ae45556587f905c3abb43178b7f08b5cd6d38e955095ef617ebc5d9b70cc12a1b9a63d162d7caa99daef2ce8510499333945ba8f1fa2e34b966da16fe1ec1671f8c5c17bcf060354ccae9292de1189eb43cbbeef4c3421dbf19cfeb4930ddfd40b8ba4601240ac993f8016f592eabb2e4fd0f3c0b9f9f1fc76f8a447109ec27be968ae3865a5a1548655b4970ae02bff7d2200f759e528ded39c0af98094f904227fa8823b0e84133b1254f80d7d6a2b54065b43e838f0a9ae0f64a0132057628c337c556304f52e46e22aa7c13aa979cbecfd9d25c18f91baf1dc81d10369e2916ca9561663855e9f4b671e534b814c7360275f23436817ae2d80d8764aa64190e9cbee53735d0ad0fb7defc91c26c5ab29aab3108bfbee01ecb2a7ceeb001b42ff093c0969308a6fa632d83161ed704b213f3da849eb6e2ab00e23e1ac49266b5ac884a8bd0c331d9a2e0f4788f7413b0709223dbbb681a4a1388eddfbeb90593cad4b0c4f8d8d528ea225d1ca6eb35d1e030e463dcd7493a227d92dcf325b76add4895b9ab63da76731fbd846762f549fb208cd4ef097307ed972aa5d99cc04b5297f35f637982d78aafd65982354a1c4619dd1ba5d31872cf536583f6015a1f0d69d7de59ecaef510250e55b2cdf5655941c24c83c091bbb7e45a0f3ea38c1731bc824d4cb1a6b6eb6c8448a854a1b64e6aa94149478025edd6dd1908227197ebb3fccd7e54896fedb722c49a149fc9eb7726f4bc61bfaa18fae122beb883f601da466b662780cb55ec573ce7e18f6c99fe", 0x1000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000001300)=0x4) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000001480)=ANY=[@ANYBLOB="05000011b85901fb652821d58f5e93c3580000000000ff0100000400000000000000000000003f000000000000000400000000000000000000000000c49000006a0000006c00000004000000000000000000000091000000000800000000000000000000000000000000000000000000000000000900000002000000000000000000000004000000000000000000000000000000090000000000000092011600000000000000000000000000000000000000000000000000310900fe03000000000000000000000004000000018000000000000000000000000000001000"/259]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000001400)=[@timestamp, @sack_perm, @window={0x3, 0x8, 0x400}, @sack_perm], 0x4) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@null=' \x00', 0x4, 'syzkaller0\x00'}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffffffffffd, @default, @netrom={'nr', 0x0}, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast]}) 08:36:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bone_slave_0\x00'}, 0x18) 08:36:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00060008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:44 executing program 4: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:44 executing program 4: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2962.833951] kauditd_printk_skb: 150 callbacks suppressed [ 2962.833966] audit: type=1400 audit(1555317404.770:11481): avc: denied { create } for pid=18889 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2962.926322] binder_alloc: 7715: binder_alloc_buf size 720575940379279360 failed, no address space 08:36:44 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8001, 0x30, 0x3, 0xfffffffffffeffff}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x4148, 0x0) ioctl(r0, 0x315, &(0x7f0000000180)="5d71ba5fa0d5b38a26d5d3138430cc6cfa8f81c8431906be4e5d1175163cddf8082307c2b51c8dc1659af0c8f9daf1a4b616dd704024089079860e44a4c8449df631293218518e2b36d75c87c6afa54d2f4671a70f512182100b38c30a18bba5e27dc847c4aa3caf6fa2fa7c3471dd614df2148757fdbc26e40702af241595de36d3488134d79be1473796aa90277afbf350e06ece5a") [ 2962.973025] audit: type=1400 audit(1555317404.870:11482): avc: denied { create } for pid=18889 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2962.997777] net_ratelimit: 23 callbacks suppressed [ 2962.997784] protocol 88fb is buggy, dev hsr_slave_0 [ 2962.997843] protocol 88fb is buggy, dev hsr_slave_1 [ 2962.998150] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.018305] protocol 88fb is buggy, dev hsr_slave_1 08:36:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00063008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2963.023515] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.028642] protocol 88fb is buggy, dev hsr_slave_1 [ 2963.037097] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.040209] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2963.042229] protocol 88fb is buggy, dev hsr_slave_1 [ 2963.056631] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.061853] protocol 88fb is buggy, dev hsr_slave_1 08:36:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2963.081091] binder: 18893:18899 transaction failed 29201/-28, size 0-720575940379279360 line 2970 [ 2963.114696] audit: type=1400 audit(1555317404.870:11483): avc: denied { call } for pid=18893 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2963.191030] binder: undelivered TRANSACTION_ERROR: 29201 [ 2963.319315] audit: type=1400 audit(1555317405.170:11484): avc: denied { map } for pid=18900 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2963.349327] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 2963.352692] IPVS: stopping master sync thread 18917 ... [ 2963.458711] audit: type=1400 audit(1555317405.220:11485): avc: denied { map } for pid=18900 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:45 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2963.657564] audit: type=1400 audit(1555317405.220:11486): avc: denied { map } for pid=18900 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2963.719683] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2963.828819] audit: type=1400 audit(1555317405.220:11487): avc: denied { map } for pid=18900 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043028b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2963.999256] audit: type=1400 audit(1555317405.310:11488): avc: denied { map } for pid=18900 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2964.068179] audit: type=1400 audit(1555317405.370:11489): avc: denied { map } for pid=18900 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:46 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0404309, &(0x7f0000000100)=0x80000000) 08:36:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/134) 08:36:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2964.282815] audit: type=1400 audit(1555317405.370:11490): avc: denied { map } for pid=18900 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2964.744968] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x7, 0x80000001, 0x8, 0x2, 0x6, 0x0, 0x311, 0x40, 0x158, 0x5, 0xfffffffffffffff9, 0x38, 0x1, 0xfffffffffffffff7, 0xffffffff}, [{0x60000005, 0x1f, 0x4, 0x0, 0x5, 0x3f, 0xf1b}], "4f82e1e1afd349f6f033bcf6286b0af30372f931b4d2f07ceb287fb5803a89489b06b1d5c048c7d3c3c00e5ab27111b46ef0f65cc462af590c7383a5f2984e6a26fcbcfa719e4781ec94905e1907b9e03cbe2c68486feae225981fb0c961b18d8a953f1986bc9e0e3dd1a10eaad6c3dc4ce2811719eb3f9eb3345569a4b04204b809bacf9077ddd86df78793e0b84f7be92b799c1d16aca56872e94f3cd7", [[], [], [], [], [], [], [], []]}, 0x916) 08:36:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043038b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2964.874192] binder_alloc: 7715: binder_alloc_buf size 1297036692682702848 failed, no address space 08:36:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2964.933488] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2965.020875] binder: 19130:19136 transaction failed 29201/-28, size 0-1297036692682702848 line 2970 [ 2965.149064] binder: undelivered TRANSACTION_ERROR: 29201 08:36:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) syz_execute_func(&(0x7f0000000180)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x2}, 0x20) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000100), 0x4) 08:36:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:47 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl(r0, 0x4148, 0x0) [ 2965.645789] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043048b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2966.436203] binder_alloc: 7715: binder_alloc_buf size 2305843009213693952 failed, no address space [ 2966.499875] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2966.568275] binder: 19294:19335 transaction failed 29201/-28, size 0-2305843009213693952 line 2970 [ 2966.590203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2966.668788] binder: undelivered TRANSACTION_ERROR: 29201 08:36:48 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x881, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4148, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x1, 0x8, 0x7, 0x4, 0xffffffffffffff76}) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x80000000, 0x4) 08:36:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043058b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2967.322673] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2967.840057] kauditd_printk_skb: 196 callbacks suppressed [ 2967.840069] audit: type=1400 audit(1555317409.790:11687): avc: denied { map } for pid=19493 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2967.939025] audit: type=1400 audit(1555317409.820:11688): avc: denied { map } for pid=19493 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.006375] audit: type=1400 audit(1555317409.820:11689): avc: denied { map } for pid=19492 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.108209] audit: type=1400 audit(1555317409.820:11690): avc: denied { map } for pid=19493 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.173653] audit: type=1400 audit(1555317409.830:11691): avc: denied { map } for pid=19492 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:50 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:50 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x101080, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000080)=0x1000) [ 2968.217369] audit: type=1400 audit(1555317409.840:11692): avc: denied { map } for pid=19493 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept$inet6(r2, 0x0, 0x0) close(r3) open$dir(&(0x7f0000000000)='./file1\x00', 0x202, 0x0) pwritev(r3, &(0x7f00000016c0)=[{0x0}], 0x1, 0x0) 08:36:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043068b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2968.331574] audit: type=1400 audit(1555317409.860:11693): avc: denied { map } for pid=19495 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.417678] audit: type=1400 audit(1555317409.860:11694): avc: denied { map } for pid=19495 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.447828] binder_alloc: 7715: binder_alloc_buf size 4539628424389459968 failed, no address space 08:36:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x8000000000000000, 0x0, 0x0) poll(0x0, 0x0, 0x200) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2968.452951] audit: type=1400 audit(1555317409.860:11695): avc: denied { map } for pid=19495 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.493505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2968.493912] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2968.521839] binder: 19497:19502 transaction failed 29201/-28, size 0-4539628424389459968 line 2970 [ 2968.543270] audit: type=1400 audit(1555317409.860:11696): avc: denied { map } for pid=19495 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2968.574545] binder: undelivered TRANSACTION_ERROR: 29201 08:36:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043078b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:50 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2969.228194] net_ratelimit: 25 callbacks suppressed [ 2969.228202] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.228224] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.233287] protocol 88fb is buggy, dev hsr_slave_1 [ 2969.238264] protocol 88fb is buggy, dev hsr_slave_1 [ 2969.253431] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.258562] protocol 88fb is buggy, dev hsr_slave_1 [ 2969.263763] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.268892] protocol 88fb is buggy, dev hsr_slave_1 08:36:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2969.274042] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.279114] protocol 88fb is buggy, dev hsr_slave_1 08:36:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000430a8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:51 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000003c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 2970.178443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2970.187872] binder_alloc: 7715: binder_alloc_buf size 5188146770730811392 failed, no address space [ 2970.264313] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2970.286049] binder: 19738:19741 transaction failed 29201/-28, size 0-5188146770730811392 line 2970 08:36:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000430e8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2970.398309] binder: undelivered TRANSACTION_ERROR: 29201 08:36:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:52 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2971.015801] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000430f8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001f00c3af00000000000000007f381c010000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000c0015000000000000000000"], 0x1}}, 0x0) 08:36:53 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2971.865654] binder_alloc: 7715: binder_alloc_buf size 5476377146882523136 failed, no address space [ 2971.898776] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2971.913146] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2971.966458] binder: 19983:19985 transaction failed 29201/-28, size 0-5476377146882523136 line 2970 08:36:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043488b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2972.037563] binder: undelivered TRANSACTION_ERROR: 29201 08:36:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:54 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:54 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0) [ 2972.820429] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2972.851025] kauditd_printk_skb: 189 callbacks suppressed [ 2972.851039] audit: type=1400 audit(1555317414.800:11886): avc: denied { map } for pid=20096 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000434c8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:55 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2973.017439] audit: type=1400 audit(1555317414.830:11887): avc: denied { map } for pid=20065 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2973.161728] audit: type=1400 audit(1555317414.840:11888): avc: denied { map } for pid=20096 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2973.327086] audit: type=1400 audit(1555317414.840:11889): avc: denied { map } for pid=20096 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2973.514707] audit: type=1400 audit(1555317414.860:11890): avc: denied { map } for pid=20065 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2973.665627] audit: type=1400 audit(1555317414.870:11891): avc: denied { map } for pid=20096 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2973.694308] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:55 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2973.772509] binder_alloc: 7715: binder_alloc_buf size 6917529027641081856 failed, no address space 08:36:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043608b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2973.845440] audit: type=1400 audit(1555317414.890:11892): avc: denied { create } for pid=20069 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2973.848612] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) 08:36:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x4) [ 2973.968271] binder: 20180:20212 transaction failed 29201/-28, size 0-6917529027641081856 line 2970 [ 2974.058271] audit: type=1400 audit(1555317414.900:11893): avc: denied { map } for pid=20065 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2974.092271] binder: undelivered TRANSACTION_ERROR: 29201 [ 2974.208268] audit: type=1400 audit(1555317414.910:11894): avc: denied { map } for pid=20065 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2974.408247] audit: type=1400 audit(1555317414.940:11895): avc: denied { map } for pid=20096 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2974.568927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:36:56 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043688b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1000000001, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) listen(r0, 0x0) [ 2975.383090] binder_alloc: 7715: binder_alloc_buf size 7493989779944505344 failed, no address space 08:36:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000436c8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2975.448442] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2975.468173] net_ratelimit: 23 callbacks suppressed [ 2975.468182] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.468212] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.473216] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.478364] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.493391] protocol 88fb is buggy, dev hsr_slave_1 08:36:57 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 2975.498695] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.503790] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.509030] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.514210] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.530868] binder: 20459:20463 transaction failed 29201/-28, size 0-7493989779944505344 line 2970 [ 2975.671086] binder: undelivered TRANSACTION_ERROR: 29201 08:36:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2976.028171] protocol 88fb is buggy, dev hsr_slave_0 08:36:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:36:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043748b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:58 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:36:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 2976.877203] binder_alloc: 7715: binder_alloc_buf size 7782220156096217088 failed, no address space 08:36:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2976.960883] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2976.981805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2976.993100] binder: 20689:20696 transaction failed 29201/-28, size 0-7782220156096217088 line 2970 [ 2977.058681] binder: undelivered TRANSACTION_ERROR: 29201 08:36:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d000437a8b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:36:59 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2977.834745] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2977.863872] kauditd_printk_skb: 189 callbacks suppressed [ 2977.863887] audit: type=1400 audit(1555317419.810:12085): avc: denied { map } for pid=20881 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:36:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:36:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b600780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2978.032321] audit: type=1400 audit(1555317419.820:12086): avc: denied { create } for pid=20877 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:00 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xffffff01) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) write$P9_RCREATE(r0, 0x0, 0xfffffffffffffcfe) [ 2978.224622] audit: type=1400 audit(1555317419.820:12087): avc: denied { map } for pid=20901 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2978.354167] audit: type=1400 audit(1555317419.850:12088): avc: denied { map } for pid=20901 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2978.517429] audit: type=1400 audit(1555317419.850:12089): avc: denied { map } for pid=20881 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2978.668365] binder_alloc: 7715: binder_alloc_buf size 8358680908399640576 failed, no address space [ 2978.698283] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2978.700308] audit: type=1400 audit(1555317419.860:12090): avc: denied { map } for pid=20901 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2978.738261] binder: 20929:20934 transaction failed 29201/-28, size 0-8358680908399640576 line 2970 [ 2978.756890] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2978.818576] binder: undelivered TRANSACTION_ERROR: 29201 08:37:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0480413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2978.883993] audit: type=1400 audit(1555317419.880:12091): avc: denied { map } for pid=20901 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2979.005373] audit: type=1400 audit(1555317419.900:12092): avc: denied { map } for pid=20881 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2979.172099] audit: type=1400 audit(1555317419.930:12093): avc: denied { map } for pid=20881 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2979.331055] audit: type=1400 audit(1555317419.950:12094): avc: denied { map } for pid=20881 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2979.585135] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:37:01 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:01 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/4}, {&(0x7f0000000180)=""/32}, {&(0x7f0000000200)=""/55}], 0x1ac, 0x10400003) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) 08:37:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0880413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2980.252200] binder_alloc: 7715: binder_alloc_buf size 8791026472627208192 failed, no address space [ 2980.308191] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2980.333359] binder: 21157:21161 transaction failed 29201/-28, size 0-8791026472627208192 line 2970 08:37:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2980.384525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2980.405882] binder: undelivered TRANSACTION_ERROR: 29201 08:37:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0b80413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:37:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20000200) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') clone(0x38000002, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @broadcast, 0x4e21, 0x0, 'nq\x00', 0x8, 0x0, 0x4a}, 0x2c) write$binfmt_elf64(r0, 0x0, 0x0) [ 2981.153065] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a6080413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2981.610329] binder_alloc: 7715: binder_alloc_buf size -144678142324244480 failed, no address space [ 2981.698478] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2981.708190] net_ratelimit: 23 callbacks suppressed [ 2981.708198] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.708228] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.713204] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.728505] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.733611] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.738834] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.743938] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.749170] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.754377] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.757009] binder: 21386:21390 transaction failed 29201/-28, size 0--144678142324244480 line 2970 [ 2981.883360] binder: undelivered TRANSACTION_ERROR: 29201 [ 2982.143198] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2982.268207] protocol 88fb is buggy, dev hsr_slave_0 [ 2982.875021] kauditd_printk_skb: 210 callbacks suppressed [ 2982.875036] audit: type=1400 audit(1555317424.820:12305): avc: denied { map } for pid=21606 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2982.936177] audit: type=1400 audit(1555317424.820:12306): avc: denied { map } for pid=21606 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2982.988459] audit: type=1400 audit(1555317424.830:12307): avc: denied { map } for pid=21606 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.038324] audit: type=1400 audit(1555317424.830:12308): avc: denied { map } for pid=21607 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.075406] audit: type=1400 audit(1555317424.830:12309): avc: denied { map } for pid=21607 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.104715] audit: type=1400 audit(1555317424.860:12310): avc: denied { map } for pid=21606 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.131560] audit: type=1400 audit(1555317424.870:12311): avc: denied { map } for pid=21607 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.156480] audit: type=1400 audit(1555317424.870:12312): avc: denied { map } for pid=21607 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.181761] audit: type=1400 audit(1555317424.880:12313): avc: denied { map } for pid=21607 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2983.206118] audit: type=1400 audit(1555317424.880:12314): avc: denied { map } for pid=21607 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:05 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780603225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0bdc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700000402000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) 08:37:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2983.563141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2983.595309] binder_alloc: 7715: binder_alloc_buf size -554050781184 failed, no address space [ 2983.626160] binder_alloc: allocated: 6168 (num: 771 largest: 8), free: 6120 (num: 2 largest: 4608) [ 2983.641582] binder: 21611:21615 transaction failed 29201/-28, size 0--554050781184 line 2970 08:37:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780410a25da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2983.667688] binder: undelivered TRANSACTION_ERROR: 29201 08:37:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 08:37:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000001c0)={0x81, "5a35dde68fae13946df89a9691dfe154c78b3d72c80f36772d904ace861393bc", 0x3, 0xcd, 0xf8, 0x7, 0xa}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 08:37:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0}) [ 2984.260509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780416025da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2984.979611] binder: 21852:21861 ioctl c0306201 20000440 returned -14 [ 2985.032526] binder: release 21852:21861 transaction 4189 out, still active [ 2985.059488] binder: undelivered TRANSACTION_COMPLETE [ 2985.111049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:08 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 08:37:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0}) 08:37:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413205da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bone_slave_0\x00'}, 0x18) [ 2986.963536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2986.976911] IPVS: stopping master sync thread 22086 ... [ 2986.982870] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 2986.986399] binder: 22078:22083 ioctl c0306201 20000440 returned -14 08:37:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413260da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2987.033583] binder: release 22078:22083 transaction 4190 out, still active [ 2987.052300] binder: undelivered TRANSACTION_COMPLETE [ 2987.063570] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 08:37:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 08:37:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0}) 08:37:09 executing program 2: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB='&'], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, 0x0, 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201", 0xdb) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(r4, &(0x7f0000f50f90), 0x6a, 0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() getgid() [ 2987.584335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717c03226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2987.887392] kauditd_printk_skb: 133 callbacks suppressed [ 2987.887407] audit: type=1400 audit(1555317429.830:12448): avc: denied { map } for pid=22298 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2987.948191] net_ratelimit: 23 callbacks suppressed [ 2987.948200] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.948232] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.953430] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.958550] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.973591] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.978822] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.984014] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.989225] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.994317] protocol 88fb is buggy, dev hsr_slave_1 [ 2988.106482] audit: type=1400 audit(1555317429.840:12449): avc: denied { map } for pid=22300 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.280181] binder: 22308:22318 ioctl c0306201 20000440 returned -14 [ 2988.294451] audit: type=1400 audit(1555317429.850:12450): avc: denied { map } for pid=22300 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.327047] binder: release 22308:22318 transaction 4191 out, still active [ 2988.339997] binder: undelivered TRANSACTION_COMPLETE [ 2988.422243] audit: type=1400 audit(1555317429.880:12451): avc: denied { map } for pid=22298 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.501670] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2988.508225] protocol 88fb is buggy, dev hsr_slave_0 [ 2988.574305] audit: type=1400 audit(1555317429.880:12452): avc: denied { map } for pid=22300 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.634693] audit: type=1400 audit(1555317429.960:12453): avc: denied { map } for pid=22298 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.689706] audit: type=1400 audit(1555317429.960:12454): avc: denied { map } for pid=22298 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.848635] audit: type=1400 audit(1555317429.970:12455): avc: denied { map } for pid=22300 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2988.973034] audit: type=1400 audit(1555317430.000:12456): avc: denied { map } for pid=22306 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2989.074416] audit: type=1400 audit(1555317430.020:12457): avc: denied { map } for pid=22306 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:12 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:12 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717cd0226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0}) 08:37:12 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 2990.331661] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2990.398405] binder: 22526:22530 ioctl c0306201 20000440 returned -14 [ 2990.430146] binder: release 22526:22530 transaction 4192 out, still active 08:37:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4606fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2990.444435] binder: undelivered TRANSACTION_COMPLETE 08:37:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:12 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2991.062224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:15 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0}) 08:37:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4220ab2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:37:15 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 2993.591315] kauditd_printk_skb: 141 callbacks suppressed [ 2993.591330] audit: type=1400 audit(1555317435.540:12599): avc: denied { create } for pid=22666 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 2993.609529] binder: 22662:22668 ioctl c0306201 20000440 returned -14 08:37:15 executing program 2: ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 2993.637547] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce42225b2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 2993.689931] audit: type=1400 audit(1555317435.540:12600): avc: denied { call } for pid=22662 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2993.710995] binder: release 22662:22668 transaction 4193 out, still active [ 2993.738246] binder: undelivered TRANSACTION_COMPLETE [ 2993.741530] audit: type=1400 audit(1555317435.580:12601): avc: denied { write } for pid=22666 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setpriority(0x0, 0x0, 0x7) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r1, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r1, &(0x7f00000000c0)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) [ 2993.872601] audit: type=1400 audit(1555317435.620:12602): avc: denied { create } for pid=22666 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0}) [ 2994.188199] net_ratelimit: 25 callbacks suppressed [ 2994.188207] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.188241] protocol 88fb is buggy, dev hsr_slave_1 [ 2994.193425] protocol 88fb is buggy, dev hsr_slave_1 [ 2994.211793] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.216993] protocol 88fb is buggy, dev hsr_slave_1 [ 2994.222247] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.226626] audit: type=1400 audit(1555317436.180:12603): avc: denied { map } for pid=22778 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2994.227332] protocol 88fb is buggy, dev hsr_slave_1 [ 2994.255215] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.260536] protocol 88fb is buggy, dev hsr_slave_1 [ 2994.339449] audit: type=1400 audit(1555317436.210:12604): avc: denied { map } for pid=22778 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:16 executing program 2: ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 2994.411043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2994.568327] audit: type=1400 audit(1555317436.230:12605): avc: denied { map } for pid=22778 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2994.700367] audit: type=1400 audit(1555317436.230:12606): avc: denied { map } for pid=22778 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2994.748197] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.897467] audit: type=1400 audit(1555317436.240:12607): avc: denied { map } for pid=22781 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2994.995763] audit: type=1400 audit(1555317436.250:12608): avc: denied { map } for pid=22781 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2995.035873] binder: 22795:22796 ioctl c0306201 20000440 returned -14 [ 2995.074244] binder: release 22795:22796 transaction 4194 out, still active [ 2995.087053] binder: undelivered TRANSACTION_COMPLETE 08:37:18 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd60ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:18 executing program 2: ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:18 executing program 1: mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x51, &(0x7f0000000140)=0x5) open(0x0, 0x2000, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 08:37:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa, 0x0, 0x0}) [ 2996.918183] binder: 22905:22909 ioctl c0306201 20000440 returned -14 [ 2996.938945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2996.960049] binder: release 22905:22909 transaction 4195 out, still active 08:37:18 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 2996.972707] binder: undelivered TRANSACTION_COMPLETE 08:37:18 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = socket(0x0, 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 08:37:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca12525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12, 0x0, 0x0}) 08:37:19 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 2997.838957] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2998.155372] binder: 23034:23036 ioctl c0306201 20000440 returned -14 [ 2998.210745] binder: release 23034:23036 transaction 4196 out, still active [ 2998.217937] binder: undelivered TRANSACTION_COMPLETE [ 2998.710850] kauditd_printk_skb: 159 callbacks suppressed [ 2998.710864] audit: type=1400 audit(1555317440.660:12768): avc: denied { map } for pid=23143 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.779580] audit: type=1400 audit(1555317440.700:12769): avc: denied { map } for pid=23143 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.830680] audit: type=1400 audit(1555317440.710:12770): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.874821] audit: type=1400 audit(1555317440.710:12771): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.906476] audit: type=1400 audit(1555317440.720:12772): avc: denied { map } for pid=23143 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.937443] audit: type=1400 audit(1555317440.760:12773): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2998.970491] audit: type=1400 audit(1555317440.760:12774): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2999.004643] audit: type=1400 audit(1555317440.760:12775): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2999.033164] audit: type=1400 audit(1555317440.770:12776): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 2999.058611] audit: type=1400 audit(1555317440.780:12777): avc: denied { map } for pid=23143 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:21 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000300)=@isdn, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f00000009c0)=""/206, 0xce}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 08:37:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca60525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:21 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, 0x0}) 08:37:22 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) [ 3000.173640] binder: 23148:23150 ioctl c0306201 20000440 returned -14 [ 3000.182049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3000.209978] binder: release 23148:23150 transaction 4197 out, still active [ 3000.217051] binder: undelivered TRANSACTION_COMPLETE 08:37:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b605006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3000.428195] net_ratelimit: 24 callbacks suppressed [ 3000.428205] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.428223] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.433278] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.438349] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.453720] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.458876] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.464186] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.469722] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.475128] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.480747] protocol 88fb is buggy, dev hsr_slave_1 08:37:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c, 0x0, 0x0}) 08:37:22 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000003c0)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3001.112970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3001.463346] binder: 23282:23284 ioctl c0306201 20000440 returned -14 [ 3001.509613] binder: release 23282:23284 transaction 4198 out, still active [ 3001.525103] binder: undelivered TRANSACTION_COMPLETE 08:37:25 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:25 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x80000000) 08:37:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b526006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60, 0x0, 0x0}) 08:37:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:25 executing program 1: 08:37:25 executing program 1: [ 3003.437882] binder: 23412:23414 ioctl c0306201 20000440 returned -14 [ 3003.468286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:25 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, 0x0) [ 3003.499340] binder: release 23412:23414 transaction 4199 out, still active [ 3003.506427] binder: undelivered TRANSACTION_COMPLETE 08:37:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525005d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3003.783687] kauditd_printk_skb: 133 callbacks suppressed [ 3003.783701] audit: type=1400 audit(1555317445.730:12911): avc: denied { map } for pid=23447 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3003.896451] audit: type=1400 audit(1555317445.730:12912): avc: denied { map } for pid=23447 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:25 executing program 1: [ 3004.046785] audit: type=1400 audit(1555317445.740:12913): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:26 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, 0x0) [ 3004.182188] audit: type=1400 audit(1555317445.740:12914): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3004.216599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3004.346330] audit: type=1400 audit(1555317445.810:12915): avc: denied { map } for pid=23447 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3004.498245] audit: type=1400 audit(1555317445.840:12916): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3004.643648] audit: type=1400 audit(1555317445.870:12917): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3004.805227] audit: type=1400 audit(1555317445.910:12918): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3004.955770] audit: type=1400 audit(1555317445.910:12919): avc: denied { map } for pid=23447 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3005.018627] audit: type=1400 audit(1555317445.960:12920): avc: denied { map } for pid=23481 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:28 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525009d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68, 0x0, 0x0}) 08:37:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:28 executing program 1: 08:37:28 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, 0x0) [ 3006.668209] net_ratelimit: 24 callbacks suppressed [ 3006.668217] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.678177] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.678373] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.683350] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.688415] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.698487] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.703687] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.708873] protocol 88fb is buggy, dev hsr_slave_1 08:37:28 executing program 1: [ 3006.714072] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.719230] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.747402] binder: 23554:23559 ioctl c0306201 20000440 returned -14 [ 3006.767841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3006.794624] binder: release 23554:23559 transaction 4200 out, still active [ 3006.804415] binder: undelivered TRANSACTION_COMPLETE 08:37:28 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)) 08:37:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525060d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:29 executing program 1: [ 3007.360086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c, 0x0, 0x0}) [ 3008.142726] binder: 23690:23692 ioctl c0306201 20000440 returned -14 [ 3008.179166] binder: release 23690:23692 transaction 4201 out, still active [ 3008.206543] binder: undelivered TRANSACTION_COMPLETE 08:37:31 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:31 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)) 08:37:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:31 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 08:37:31 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="24000000160007031dfffd946f61050b000000000500000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 08:37:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74, 0x0, 0x0}) [ 3010.083110] kauditd_printk_skb: 164 callbacks suppressed [ 3010.083124] audit: type=1400 audit(1555317452.030:13085): avc: denied { create } for pid=23816 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:32 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044308, &(0x7f0000000100)) [ 3010.128864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:32 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) write$nbd(r0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = fcntl$getown(r0, 0x9) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x6, r2}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x0) [ 3010.156727] audit: type=1400 audit(1555317452.070:13086): avc: denied { write } for pid=23816 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3010.160317] binder: 23820:23821 ioctl c0306201 20000440 returned -14 08:37:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:32 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 3010.275531] binder: release 23820:23821 transaction 4202 out, still active [ 3010.308368] binder: undelivered TRANSACTION_COMPLETE [ 3010.336047] audit: type=1400 audit(1555317452.100:13087): avc: denied { create } for pid=23816 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3010.457618] audit: type=1400 audit(1555317452.100:13088): avc: denied { call } for pid=23820 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 3010.623758] audit: type=1400 audit(1555317452.570:13089): avc: denied { map } for pid=23856 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3010.725869] audit: type=1400 audit(1555317452.570:13090): avc: denied { map } for pid=23856 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = getpid() rt_sigqueueinfo(r1, 0x35, &(0x7f0000000080)) [ 3010.870748] audit: type=1400 audit(1555317452.600:13091): avc: denied { map } for pid=23856 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3010.930257] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a, 0x0, 0x0}) [ 3011.044736] audit: type=1400 audit(1555317452.620:13092): avc: denied { map } for pid=23856 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3011.204530] audit: type=1400 audit(1555317452.660:13093): avc: denied { map } for pid=23856 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3011.365229] audit: type=1400 audit(1555317452.710:13095): avc: denied { map } for pid=23895 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3011.624130] binder: 23951:23953 ioctl c0306201 20000440 returned -14 [ 3011.632259] binder: release 23951:23953 transaction 4203 out, still active [ 3011.642230] binder: undelivered TRANSACTION_COMPLETE [ 3012.908237] net_ratelimit: 25 callbacks suppressed [ 3012.908283] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.913271] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.913340] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.918495] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.933556] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.938767] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.944179] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.949777] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.954871] protocol 88fb is buggy, dev hsr_slave_1 08:37:35 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:35 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 08:37:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffc1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r1) write$P9_RXATTRCREATE(r2, 0x0, 0x0) 08:37:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0}) 08:37:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 08:37:35 executing program 1: pipe2$9p(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) [ 3013.456096] binder: 24162:24167 ioctl c0306201 20000440 returned -14 [ 3013.468248] protocol 88fb is buggy, dev hsr_slave_0 [ 3013.484242] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3013.498185] binder: release 24162:24167 transaction 4204 out, still active [ 3013.505277] binder: undelivered TRANSACTION_COMPLETE 08:37:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0}) 08:37:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) [ 3014.197998] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3014.774177] binder: 24393:24396 ioctl c0306201 20000440 returned -14 [ 3014.821457] binder: release 24393:24396 transaction 4205 out, still active [ 3014.835967] binder: undelivered TRANSACTION_COMPLETE [ 3015.004715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3015.556998] kauditd_printk_skb: 150 callbacks suppressed [ 3015.557010] audit: type=1400 audit(1555317457.500:13245): avc: denied { map } for pid=24612 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3015.672833] audit: type=1400 audit(1555317457.550:13246): avc: denied { map } for pid=24612 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3015.754636] audit: type=1400 audit(1555317457.550:13247): avc: denied { map } for pid=24613 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3015.808250] audit: type=1400 audit(1555317457.550:13248): avc: denied { map } for pid=24612 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3015.858242] audit: type=1400 audit(1555317457.550:13249): avc: denied { map } for pid=24612 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3015.908063] audit: type=1400 audit(1555317457.550:13250): avc: denied { map } for pid=24613 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3016.044555] audit: type=1400 audit(1555317457.560:13251): avc: denied { map } for pid=24613 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3016.098301] audit: type=1400 audit(1555317457.570:13252): avc: denied { map } for pid=24613 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3016.133761] audit: type=1400 audit(1555317457.590:13253): avc: denied { map } for pid=24613 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3016.158774] audit: type=1400 audit(1555317457.590:13254): avc: denied { map } for pid=24612 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:38 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x400000002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r1, 0x0, 0x10000000c8, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) 08:37:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600, 0x0, 0x0}) 08:37:38 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) [ 3016.769390] binder: 24620:24625 ioctl c0306201 20000440 returned -14 [ 3016.783431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3016.785989] binder: release 24620:24625 transaction 4206 out, still active 08:37:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3016.816200] binder: undelivered TRANSACTION_COMPLETE 08:37:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0}) 08:37:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:37:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:39 executing program 1: add_key$user(0x0, 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffffc) syz_execute_func(&(0x7f0000000040)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02") [ 3017.478671] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:39 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3017.951728] binder: 24848:24852 ioctl c0306201 20000440 returned -14 [ 3018.024116] binder: release 24848:24852 transaction 4207 out, still active [ 3018.058588] binder: undelivered TRANSACTION_COMPLETE 08:37:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3018.486660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00, 0x0, 0x0}) 08:37:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:37:41 executing program 1: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000040)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02") [ 3019.148194] net_ratelimit: 24 callbacks suppressed [ 3019.148202] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.148249] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.153253] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.158418] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.173508] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.178750] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.183850] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.189130] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.194391] protocol 88fb is buggy, dev hsr_slave_1 08:37:41 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3019.413564] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3019.662406] binder: 25086:25091 ioctl c0306201 20000440 returned -14 [ 3019.708191] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.748739] binder: release 25086:25091 transaction 4208 out, still active [ 3019.756058] binder: undelivered TRANSACTION_COMPLETE 08:37:42 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3020.452325] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200, 0x0, 0x0}) [ 3020.575202] kauditd_printk_skb: 180 callbacks suppressed [ 3020.575220] audit: type=1400 audit(1555317462.520:13435): avc: denied { create } for pid=25151 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3020.748373] audit: type=1400 audit(1555317462.580:13436): avc: denied { map } for pid=25139 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3020.837791] audit: type=1400 audit(1555317462.580:13437): avc: denied { map } for pid=25139 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:42 executing program 1: [ 3020.994089] audit: type=1400 audit(1555317462.940:13438): avc: denied { map } for pid=25245 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3021.086257] audit: type=1400 audit(1555317462.980:13439): avc: denied { map } for pid=25245 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3021.175593] binder: 25255:25288 ioctl c0306201 20000440 returned -14 [ 3021.241047] audit: type=1400 audit(1555317462.980:13440): avc: denied { map } for pid=25245 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3021.245965] binder: release 25255:25288 transaction 4209 out, still active 08:37:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3021.388565] audit: type=1400 audit(1555317463.000:13441): avc: denied { map } for pid=25245 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3021.398235] binder: undelivered TRANSACTION_COMPLETE 08:37:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3021.507102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3021.536941] audit: type=1400 audit(1555317463.040:13442): avc: denied { map } for pid=25245 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:43 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3021.721285] audit: type=1400 audit(1555317463.060:13443): avc: denied { map } for pid=25265 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:43 executing program 1: [ 3021.856984] audit: type=1400 audit(1555317463.070:13444): avc: denied { map } for pid=25265 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000, 0x0, 0x0}) 08:37:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r2) [ 3022.296556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:44 executing program 1: [ 3022.811496] binder: 25443:25444 ioctl c0306201 20000440 returned -14 [ 3022.866610] binder: release 25443:25444 transaction 4210 out, still active [ 3022.887290] binder: undelivered TRANSACTION_COMPLETE 08:37:45 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r2) 08:37:45 executing program 1: [ 3023.187316] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f0f19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f00, 0x0, 0x0}) 08:37:45 executing program 1: 08:37:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r2) [ 3024.042766] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:46 executing program 1: 08:37:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3024.570210] binder: 25572:25575 ioctl c0306201 20000440 returned -14 [ 3024.630715] binder: release 25572:25575 transaction 4211 out, still active [ 3024.659316] binder: undelivered TRANSACTION_COMPLETE 08:37:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) [ 3025.003325] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800, 0x0, 0x0}) 08:37:47 executing program 1: 08:37:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3025.388190] net_ratelimit: 25 callbacks suppressed [ 3025.388198] protocol 88fb is buggy, dev hsr_slave_0 [ 3025.388225] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.393220] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.398356] protocol 88fb is buggy, dev hsr_slave_0 [ 3025.413376] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.418591] protocol 88fb is buggy, dev hsr_slave_0 [ 3025.423694] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.428916] protocol 88fb is buggy, dev hsr_slave_0 08:37:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) [ 3025.434002] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.636237] kauditd_printk_skb: 164 callbacks suppressed [ 3025.636257] audit: type=1400 audit(1555317467.580:13609): avc: denied { map } for pid=25692 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3025.732821] audit: type=1400 audit(1555317467.590:13610): avc: denied { map } for pid=25692 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:47 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3025.831084] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:47 executing program 1: [ 3025.922775] audit: type=1400 audit(1555317467.590:13611): avc: denied { map } for pid=25692 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3025.948195] protocol 88fb is buggy, dev hsr_slave_0 [ 3025.951824] binder: 25694:25699 ioctl c0306201 20000440 returned -14 [ 3026.014701] binder: release 25694:25699 transaction 4212 out, still active 08:37:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3026.058171] binder: undelivered TRANSACTION_COMPLETE [ 3026.120993] audit: type=1400 audit(1555317467.600:13612): avc: denied { map } for pid=25692 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) [ 3026.298298] audit: type=1400 audit(1555317467.610:13613): avc: denied { map } for pid=25689 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3026.476216] audit: type=1400 audit(1555317467.630:13614): avc: denied { map } for pid=25693 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3026.588013] audit: type=1400 audit(1555317467.640:13615): avc: denied { map } for pid=25693 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:48 executing program 1: [ 3026.710299] audit: type=1400 audit(1555317467.660:13616): avc: denied { map } for pid=25693 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00, 0x0, 0x0}) [ 3026.846181] audit: type=1400 audit(1555317467.660:13617): avc: denied { map } for pid=25697 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3026.884093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) [ 3026.944729] audit: type=1400 audit(1555317467.660:13618): avc: denied { map } for pid=25697 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:49 executing program 1: 08:37:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:49 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3027.648324] binder: 25821:25824 ioctl c0306201 20000440 returned -14 [ 3027.700191] binder: release 25821:25824 transaction 4213 out, still active [ 3027.707547] binder: undelivered TRANSACTION_COMPLETE [ 3027.743692] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) 08:37:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:50 executing program 1: 08:37:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000, 0x0, 0x0}) [ 3028.551331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) 08:37:50 executing program 1: 08:37:50 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:51 executing program 1: 08:37:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) [ 3029.478886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800, 0x0, 0x0}) 08:37:52 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:37:52 executing program 1: 08:37:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3030.583077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) [ 3030.643621] kauditd_printk_skb: 207 callbacks suppressed [ 3030.643634] audit: type=1400 audit(1555317472.590:13826): avc: denied { map } for pid=26116 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3030.818504] audit: type=1400 audit(1555317472.590:13827): avc: denied { map } for pid=26115 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:52 executing program 1: [ 3030.984744] audit: type=1400 audit(1555317472.600:13828): avc: denied { create } for pid=26152 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3031.161364] audit: type=1400 audit(1555317472.630:13829): avc: denied { map } for pid=26116 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3031.315539] audit: type=1400 audit(1555317472.640:13830): avc: denied { map } for pid=26173 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:53 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00, 0x0, 0x0}) [ 3031.462493] audit: type=1400 audit(1555317472.660:13831): avc: denied { map } for pid=26173 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3031.508002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3031.600415] audit: type=1400 audit(1555317472.730:13832): avc: denied { map } for pid=26173 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3031.628168] net_ratelimit: 25 callbacks suppressed [ 3031.628195] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.628212] protocol 88fb is buggy, dev hsr_slave_1 [ 3031.633241] protocol 88fb is buggy, dev hsr_slave_1 08:37:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3031.648443] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.653588] protocol 88fb is buggy, dev hsr_slave_1 [ 3031.658813] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.663907] protocol 88fb is buggy, dev hsr_slave_1 [ 3031.669146] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.674246] protocol 88fb is buggy, dev hsr_slave_1 08:37:53 executing program 1: 08:37:53 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 3031.820633] audit: type=1400 audit(1555317472.770:13833): avc: denied { map } for pid=26173 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3031.952172] audit: type=1400 audit(1555317472.770:13834): avc: denied { map } for pid=26173 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3032.134074] audit: type=1400 audit(1555317472.830:13835): avc: denied { map } for pid=26173 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3032.188211] protocol 88fb is buggy, dev hsr_slave_0 08:37:54 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:54 executing program 1: [ 3032.376543] binder: 26310:26314 ioctl c0306201 20000440 returned -14 [ 3032.396705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3032.451800] binder: release 26310:26314 transaction 4214 out, still active [ 3032.489942] binder: undelivered TRANSACTION_COMPLETE 08:37:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:55 executing program 1: 08:37:55 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) 08:37:55 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400, 0x0, 0x0}) [ 3033.381544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:55 executing program 1: 08:37:55 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3033.987180] binder: 26440:26443 ioctl c0306201 20000440 returned -14 [ 3034.020850] binder: release 26440:26443 transaction 4215 out, still active [ 3034.044151] binder: undelivered TRANSACTION_COMPLETE [ 3034.143745] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:56 executing program 1: 08:37:56 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) 08:37:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00, 0x0, 0x0}) 08:37:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:56 executing program 1: [ 3034.981969] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:37:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:37:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:57 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) 08:37:57 executing program 1: [ 3035.602461] binder: 26571:26574 ioctl c0306201 20000440 returned -14 [ 3035.654295] kauditd_printk_skb: 181 callbacks suppressed [ 3035.654309] audit: type=1400 audit(1555317477.600:14017): avc: denied { map } for pid=26568 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3035.657193] binder: release 26571:26574 transaction 4216 out, still active [ 3035.671604] audit: type=1400 audit(1555317477.610:14018): avc: denied { map } for pid=26569 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:57 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) [ 3035.829653] binder: undelivered TRANSACTION_COMPLETE [ 3036.002059] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3036.035546] audit: type=1400 audit(1555317477.670:14019): avc: denied { map } for pid=26569 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3036.182806] audit: type=1400 audit(1555317477.750:14020): avc: denied { map } for pid=26569 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(r0, r1) [ 3036.318200] audit: type=1400 audit(1555317477.750:14021): avc: denied { map } for pid=26569 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1000000, 0x0, 0x0}) 08:37:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3036.437950] audit: type=1400 audit(1555317477.890:14022): avc: denied { map } for pid=26596 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:58 executing program 1: [ 3036.628754] audit: type=1400 audit(1555317477.900:14023): avc: denied { map } for pid=26596 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3036.768022] audit: type=1400 audit(1555317477.930:14024): avc: denied { map } for pid=26596 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3036.904936] audit: type=1400 audit(1555317477.930:14025): avc: denied { create } for pid=26594 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:37:58 executing program 1: [ 3037.014292] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3037.040665] audit: type=1400 audit(1555317477.940:14026): avc: denied { map } for pid=26596 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:37:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:37:59 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:37:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3037.210100] binder: 26697:26702 ioctl c0306201 20000440 returned -14 [ 3037.245236] binder: release 26697:26702 transaction 4217 out, still active [ 3037.268149] binder: undelivered TRANSACTION_COMPLETE 08:37:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:37:59 executing program 1: [ 3037.868191] net_ratelimit: 24 callbacks suppressed [ 3037.868200] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.868237] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.873280] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.883365] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.893421] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.898614] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.903704] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.908873] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.913936] protocol 88fb is buggy, dev hsr_slave_1 08:37:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000, 0x0, 0x0}) 08:38:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3038.064902] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:00 executing program 1: [ 3038.428190] protocol 88fb is buggy, dev hsr_slave_0 08:38:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:00 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:38:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:00 executing program 1: [ 3039.039606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3000000, 0x0, 0x0}) 08:38:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:01 executing program 1: 08:38:01 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:38:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3040.349960] binder: 26957:26958 ioctl c0306201 20000440 returned -14 [ 3040.437850] binder: release 26957:26958 transaction 4218 out, still active [ 3040.453266] binder: undelivered TRANSACTION_COMPLETE 08:38:02 executing program 1: 08:38:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3040.660339] kauditd_printk_skb: 188 callbacks suppressed [ 3040.660353] audit: type=1400 audit(1555317482.610:14215): avc: denied { write } for pid=26974 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3040.667034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3040.842856] audit: type=1400 audit(1555317482.790:14216): avc: denied { create } for pid=26974 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:03 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3041.042737] audit: type=1400 audit(1555317482.990:14217): avc: denied { map } for pid=27059 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4000000, 0x0, 0x0}) 08:38:03 executing program 1: [ 3041.198192] audit: type=1400 audit(1555317482.990:14218): avc: denied { map } for pid=27059 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3041.313823] audit: type=1400 audit(1555317483.010:14219): avc: denied { map } for pid=27059 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:03 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") [ 3041.508173] audit: type=1400 audit(1555317483.010:14220): avc: denied { map } for pid=27059 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3041.688163] audit: type=1400 audit(1555317483.080:14221): avc: denied { map } for pid=27059 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3041.748907] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3041.822634] audit: type=1400 audit(1555317483.130:14222): avc: denied { map } for pid=27074 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3041.945779] audit: type=1400 audit(1555317483.130:14223): avc: denied { map } for pid=27074 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:04 executing program 1: [ 3042.079181] audit: type=1400 audit(1555317483.140:14224): avc: denied { map } for pid=27059 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3042.122755] binder: 27088:27094 ioctl c0306201 20000440 returned -14 08:38:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3042.165030] binder: release 27088:27094 transaction 4219 out, still active [ 3042.198691] binder: undelivered TRANSACTION_COMPLETE 08:38:04 executing program 1: [ 3042.664987] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5000000, 0x0, 0x0}) 08:38:04 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") 08:38:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) write$binfmt_aout(r1, &(0x7f0000000500), 0x20) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) [ 3043.483149] binder: 27223:27224 ioctl c0306201 20000440 returned -14 [ 3043.540783] binder: release 27223:27224 transaction 4220 out, still active [ 3043.568332] binder: undelivered TRANSACTION_COMPLETE 08:38:05 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") [ 3043.626628] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3044.108208] net_ratelimit: 23 callbacks suppressed [ 3044.108216] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.108246] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.113344] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.118542] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.134012] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.139441] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.144534] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.149776] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.154953] protocol 88fb is buggy, dev hsr_slave_1 08:38:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000, 0x0, 0x0}) 08:38:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(r0, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 3044.668218] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.682067] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:07 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") [ 3045.248493] binder: 27364:27366 ioctl c0306201 20000440 returned -14 [ 3045.317338] binder: release 27364:27366 transaction 4221 out, still active [ 3045.376093] binder: undelivered TRANSACTION_COMPLETE 08:38:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3045.575899] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:38:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3045.707634] kauditd_printk_skb: 183 callbacks suppressed [ 3045.707649] audit: type=1400 audit(1555317487.650:14408): avc: denied { map } for pid=27369 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3045.912877] audit: type=1400 audit(1555317487.660:14409): avc: denied { create } for pid=27385 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7000000, 0x0, 0x0}) [ 3046.053343] audit: type=1400 audit(1555317487.660:14410): avc: denied { map } for pid=27369 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3046.216548] audit: type=1400 audit(1555317488.050:14411): avc: denied { map } for pid=27487 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3046.333566] audit: type=1400 audit(1555317488.050:14412): avc: denied { map } for pid=27487 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:08 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") [ 3046.500912] audit: type=1400 audit(1555317488.050:14413): avc: denied { map } for pid=27487 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3046.531263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}]}, 0x28}}, 0x0) [ 3046.657864] audit: type=1400 audit(1555317488.050:14414): avc: denied { map } for pid=27487 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3046.701049] binder: 27501:27503 ioctl c0306201 20000440 returned -14 [ 3046.743545] binder: release 27501:27503 transaction 4222 out, still active [ 3046.763223] binder: undelivered TRANSACTION_COMPLETE [ 3046.809765] audit: type=1400 audit(1555317488.120:14415): avc: denied { map } for pid=27487 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3046.954633] audit: type=1400 audit(1555317488.160:14416): avc: denied { map } for pid=27490 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3047.018311] audit: type=1400 audit(1555317488.160:14417): avc: denied { map } for pid=27490 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3047.223037] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa000000, 0x0, 0x0}) 08:38:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:09 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") 08:38:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3048.270911] binder: 27643:27646 ioctl c0306201 20000440 returned -14 08:38:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x0, 0x1}}, 0xa) [ 3048.311324] binder: release 27643:27646 transaction 4223 out, still active [ 3048.355210] binder: undelivered TRANSACTION_COMPLETE 08:38:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12000000, 0x0, 0x0}) [ 3049.209519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:11 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") 08:38:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:11 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") 08:38:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3049.994438] binder: 27783:27802 ioctl c0306201 20000440 returned -14 [ 3050.085372] binder: release 27783:27802 transaction 4224 out, still active [ 3050.103170] binder: undelivered TRANSACTION_COMPLETE [ 3050.145422] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3050.348188] net_ratelimit: 23 callbacks suppressed [ 3050.348196] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.348230] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.353811] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.359105] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.375490] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.381095] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.386398] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.392205] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.397761] protocol 88fb is buggy, dev hsr_slave_1 08:38:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:12 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:38:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x20000000, 0x0, 0x0}) [ 3050.908207] protocol 88fb is buggy, dev hsr_slave_0 08:38:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3050.937770] kauditd_printk_skb: 200 callbacks suppressed [ 3050.937784] audit: type=1400 audit(1555317492.880:14618): avc: denied { map } for pid=28009 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3051.063147] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:13 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") [ 3051.113256] audit: type=1400 audit(1555317492.890:14619): avc: denied { map } for pid=28009 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f2f19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3051.308252] audit: type=1400 audit(1555317492.920:14620): avc: denied { map } for pid=28009 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3051.439261] audit: type=1400 audit(1555317492.930:14621): avc: denied { map } for pid=28009 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3051.589760] binder: 28019:28022 ioctl c0306201 20000440 returned -14 [ 3051.625173] binder: release 28019:28022 transaction 4225 out, still active [ 3051.633425] audit: type=1400 audit(1555317492.970:14622): avc: denied { create } for pid=28010 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3051.655758] binder: undelivered TRANSACTION_COMPLETE [ 3051.804782] audit: type=1400 audit(1555317493.000:14623): avc: denied { map } for pid=28009 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3051.951844] audit: type=1400 audit(1555317493.000:14624): avc: denied { write } for pid=28010 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3052.107582] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3052.121407] audit: type=1400 audit(1555317493.040:14625): avc: denied { map } for pid=28009 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:14 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:38:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3052.233144] audit: type=1400 audit(1555317493.050:14626): avc: denied { map } for pid=28012 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3052.296932] audit: type=1400 audit(1555317493.060:14627): avc: denied { map } for pid=28012 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f000000, 0x0, 0x0}) 08:38:14 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") [ 3052.830379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3052.938520] binder: 28143:28146 ioctl c0306201 20000440 returned -14 [ 3052.988611] binder: release 28143:28146 transaction 4226 out, still active [ 3052.996013] binder: undelivered TRANSACTION_COMPLETE 08:38:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:15 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) 08:38:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3053.769536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48000000, 0x0, 0x0}) 08:38:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3054.374891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) 08:38:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c000000, 0x0, 0x0}) [ 3055.298277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3055.930318] binder: 28506:28508 ioctl c0306201 20000440 returned -14 [ 3055.939492] binder: release 28506:28508 transaction 4227 out, still active [ 3055.953676] binder: undelivered TRANSACTION_COMPLETE [ 3055.988525] kauditd_printk_skb: 196 callbacks suppressed [ 3055.988538] audit: type=1400 audit(1555317497.940:14824): avc: denied { map } for pid=28507 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3056.158705] audit: type=1400 audit(1555317497.940:14825): avc: denied { map } for pid=28507 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3056.311310] audit: type=1400 audit(1555317497.940:14826): avc: denied { map } for pid=28507 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3056.440537] audit: type=1400 audit(1555317497.940:14827): avc: denied { map } for pid=28507 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f1a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:18 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3056.588214] net_ratelimit: 24 callbacks suppressed [ 3056.588223] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.588256] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.593234] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.608453] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.613653] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.618883] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.624003] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.629258] protocol 88fb is buggy, dev hsr_slave_0 [ 3056.634240] audit: type=1400 audit(1555317497.990:14828): avc: denied { map } for pid=28507 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3056.634432] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.706532] audit: type=1400 audit(1555317498.030:14829): avc: denied { map } for pid=28507 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3056.733299] audit: type=1400 audit(1555317498.040:14830): avc: denied { create } for pid=28509 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3056.767324] audit: type=1400 audit(1555317498.040:14831): avc: denied { map } for pid=28507 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3056.814544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x60000000, 0x0, 0x0}) [ 3056.928632] audit: type=1400 audit(1555317498.050:14832): avc: denied { create } for pid=28509 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3057.078174] audit: type=1400 audit(1555317498.080:14833): avc: denied { map } for pid=28507 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3057.148224] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.343181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:38:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3057.675436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:20 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) 08:38:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x68000000, 0x0, 0x0}) 08:38:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3058.409387] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:21 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3059.116089] binder: 28767:28770 ioctl c0306201 20000440 returned -14 [ 3059.168624] binder: release 28767:28770 transaction 4228 out, still active [ 3059.175769] binder: undelivered TRANSACTION_COMPLETE [ 3059.332264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:21 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) 08:38:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00743008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c000000, 0x0, 0x0}) [ 3060.167713] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3060.548426] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. 08:38:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000068d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3060.838421] binder: 28899:28902 ioctl c0306201 20000440 returned -14 [ 3060.846216] binder: release 28899:28902 transaction 4229 out, still active [ 3060.867262] binder: undelivered TRANSACTION_COMPLETE 08:38:23 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) [ 3061.015404] kauditd_printk_skb: 186 callbacks suppressed [ 3061.015420] audit: type=1400 audit(1555317502.960:15020): avc: denied { create } for pid=28907 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3061.260619] audit: type=1400 audit(1555317502.970:15021): avc: denied { map } for pid=28901 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3061.407567] audit: type=1400 audit(1555317503.050:15022): avc: denied { create } for pid=28907 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3061.570555] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3061.590093] audit: type=1400 audit(1555317503.050:15023): avc: denied { map } for pid=28901 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74000000, 0x0, 0x0}) 08:38:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3061.718202] audit: type=1400 audit(1555317503.050:15024): avc: denied { map } for pid=28901 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:23 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) socket$inet_udplite(0x2, 0x2, 0x88) [ 3061.869889] audit: type=1400 audit(1555317503.190:15025): avc: denied { map } for pid=28952 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3061.986364] audit: type=1400 audit(1555317503.190:15026): avc: denied { map } for pid=28952 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3062.065801] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, r2) [ 3062.100558] audit: type=1400 audit(1555317503.200:15027): avc: denied { map } for pid=28946 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3062.203630] audit: type=1400 audit(1555317503.200:15028): avc: denied { map } for pid=28946 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3062.323178] binder: 29126:29129 ioctl c0306201 20000440 returned -14 [ 3062.329887] audit: type=1400 audit(1555317503.210:15029): avc: denied { map } for pid=28952 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3062.375343] binder: release 29126:29129 transaction 4230 out, still active [ 3062.389656] binder: undelivered TRANSACTION_COMPLETE 08:38:24 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) 08:38:24 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:38:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3062.828183] net_ratelimit: 23 callbacks suppressed [ 3062.828191] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.828195] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.828246] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.833241] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.853671] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.858829] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.864005] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.869257] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.874418] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.879555] protocol 88fb is buggy, dev hsr_slave_1 08:38:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040), 0x1000) dup2(r1, r2) 08:38:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a000000, 0x0, 0x0}) [ 3063.049401] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:25 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x4000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [], 0xb00000000000000}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x2, 0xf900, "01ca0bc53e619255900517c2d57c95f32855fc3408c3a7b9", {0x2, 0x1}, 0x9540}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x4148, 0x0) 08:38:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) [ 3063.989565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f3e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3064.326720] overlayfs: workdir is in-use by another mount, mount with '-o index=off' to override exclusive workdir protection. 08:38:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) 08:38:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3064.957477] binder: 29379:29380 ioctl c0306201 20000440 returned -14 [ 3064.998337] binder: release 29379:29380 transaction 4231 out, still active [ 3065.012400] binder: undelivered TRANSACTION_COMPLETE 08:38:28 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) 08:38:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) 08:38:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) 08:38:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffdfd, 0x0, 0x0}) [ 3066.276750] kauditd_printk_skb: 164 callbacks suppressed [ 3066.276765] audit: type=1400 audit(1555317508.220:15194): avc: denied { create } for pid=29487 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3066.314958] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) 08:38:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) 08:38:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3066.425453] audit: type=1400 audit(1555317508.260:15195): avc: denied { write } for pid=29487 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3066.582946] audit: type=1400 audit(1555317508.310:15196): avc: denied { create } for pid=29487 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3066.723979] audit: type=1400 audit(1555317508.520:15197): avc: denied { map } for pid=29522 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3066.853344] audit: type=1400 audit(1555317508.520:15198): avc: denied { map } for pid=29522 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffff7f, 0x0, 0x0}) [ 3067.029407] audit: type=1400 audit(1555317508.590:15199): avc: denied { map } for pid=29522 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) dup2(r1, r2) [ 3067.147160] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3067.179425] audit: type=1400 audit(1555317508.590:15200): avc: denied { map } for pid=29522 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3067.377406] audit: type=1400 audit(1555317508.610:15201): avc: denied { map } for pid=29522 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3067.521160] audit: type=1400 audit(1555317508.650:15202): avc: denied { map } for pid=29522 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3067.645273] audit: type=1400 audit(1555317508.650:15203): avc: denied { map } for pid=29522 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3067.810902] binder: 29617:29619 ioctl c0306201 20000440 returned -14 [ 3067.832288] binder: release 29617:29619 transaction 4232 out, still active [ 3067.841940] binder: undelivered TRANSACTION_COMPLETE [ 3069.068203] net_ratelimit: 24 callbacks suppressed [ 3069.068213] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.068254] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.073272] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.078285] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.093601] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.098920] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.104379] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.109494] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.114795] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.120019] protocol 88fb is buggy, dev hsr_slave_1 08:38:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) tkill(r1, 0x1000000000013) 08:38:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) 08:38:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:31 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0xc) ioctl(r1, 0x4148, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) 08:38:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100000000000000, 0x0, 0x0}) [ 3069.753145] binder: 29728:29729 ioctl c0306201 20000440 returned -14 08:38:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) r2 = gettid() r3 = getuid() sendmsg$nl_netfilter(r1, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1a8c, 0x11, 0xd, 0x0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@typed={0xc, 0x1, @u64=0x7}, @nested={0x1bc, 0x36, [@generic="5e6241127b16d8c38c", @typed={0x3c, 0x84, @binary="a3cd2416a7e21f166b9ea462e77bd245b949e55a71c0dedc0f606a49d43a55bbae0ec7b7cf0ce6dfc0748d15b8f81d801e902ce4bc774f"}, @generic="3886b93303e28d35fe0b1b95975c45641745a5411c551b384cf154ecdae78ab518d7fa0b1af93b53feb9a8cf1e520b768a9cd667743ef7f492d79b020a6f04f3e78bd3fcecd482ed395174ceee2c1c94a3db598860d650a3a14de55dece04e5da60342ddae3b0994046a957d6fafaf9f364b0e10757818e39238492af651629c34b3290801fd5a5e19423cf1a1e60be78f1f4244c0e1b8f0e97ffe2a0d293b4e6081f7e2848b41ce7d57b723503ca3418641ba35b830cbbe8e111bf11f90c394c7727c", @typed={0x8, 0x62, @pid=r2}, @generic="6e58e702ce633feb64d4ad935530101d4e5d41fd387adf40c856fb1101863045261c71d1bb0533469791e7029f446fe5ccda3010d861c19dbecd594809a1a5c2c81956e16cd0df659e00221d0ae04f279250cd395ee7a39b0263725d2338e35c8eb93ba1188368f1", @generic="c5d3a700bab3fb0c6362ef4dd9e128f96a759c57f6fb3316e4f6def8c0d9fc8b13a8047b12edb958566eec7e8ba6fafcc01ace1fe127d2331bdad8129b96"]}, @typed={0x8, 0x20, @ipv4=@empty}, @typed={0x8, 0x7c, @ipv4=@multicast2}, @generic="7072995927310ec93f537c68ed0e34c750c291fae9a03e427f3ec1afb60ae8cf63c2d5516eb5ca0671c65fe33fce76e40a945054d6ecb3c732eef70f8c9c16994ee1fae778540df5d1656bff884d408f9e5a74555b3fd2b63e8328d22bcfcc08e1ac7ff5f822090ac4cfb3ecd1f54f3dbd1b93abcf031aa432e341f90cfea6b0f848f008d36581bb0792d7215de9e8494bffbc23068378c184b46bc1c16cc8cbfad709161eb9596479df73d2c86c0c1eb24a674969d05375d7cdcfb253e85ff9d734199c", @nested={0x1390, 0x80, [@generic="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", @generic="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", @generic="a14b81dc88e4e958e3bce6488c870bd0ea9621f759d8ecfc470690c13a41da29098976617f3eba794f89e4f5cff2066329a373fb6274782d5e21f1b8664a9022658e4464af9bbcfc52969a5428a66328d17c64e638d65817c9ec1cf92c181ba0b7ca0870fac4af23d109d31af051b4275d38117172dfc261f84fc88087f4e97eeae599e2a4e937997c3bf1ba2ecddf811de7f25af895158dfdd878477ab360c22f472ff46cb4f9bec832bcf5a52ecdf118b5ceea03da540db125e2fc307bc1a66e07cdf740b27169e859359fddb117", @generic="b0b8f116e48a769ac9", @generic="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", @typed={0x8, 0x13, @uid=r3}, @generic="93fb6c8798b37a7941f338e8527da14f3e9194f7106122946e8fa88721428f8a9b80b715df3b", @generic="389550be43ea79e96cbb6210fb294155de022fe5bce04e47654d4ab938c6e4daf5684ec4cdcce52fea26adcec1ccbe48785c0afb32fa37fe274a6baea0a8a61bdb39f3bedc9401d9e9b82a171ee8e982c1706fd589907dd8220c004dac8c04f7981d7bd5efca0f27c109ef3f5ce221f9591b9089d5a6ddbea4ddd3a042fdd5df4b350925fd5333b0770cc60141ecbcbf"]}, @nested={0x44c, 0x11, [@generic="90975e53d2781a6e2c0358ec3d9dd80637ef2546b3b697f19c261fc433c215a930378439b820090a6d19497dffe87ce9e7c337095898cec9c920caf0b47c4f69a3369c715411db1c829eda751fe75ae2c1a93560ede21145d40c3337c2c50279d863589383dc2ff4b46d97b032d685aacc6e887947c1272b43af884a6c7a006e33f20ed018146f327b1869a347b469032e4b3f17b262b2638468715bc58c3e0e34e0e03f6aaa4926d3a1d7db4e909ffb421a3a1517fe03e4461a08d0a1c7202f1c8906bae80fbaaec1c8cbc3b51d57d5a37b294d11f6c957939cff044fb1750960", @generic="d8e75bbd55e950fff30c76617bb488b5cb3f4260203492e45b0c9f41d1a44a334233667ed6fcfd5324efdc0481553a47475580b16efbb2bc1e16355bfed341f4a2090b70a0aa07b9a207f482f904cc3209ad31c8c81395ba9b8716f7cc49ad1f99027eb885e9c7d4f7c49182e1be31bb74fa50c37a42c35cad6e5541970d983dd40d75644aa7ed41250ebd288d9e3bb63b95f980bdaa7896ae32d8affe31dde8ae944f563b06962618b8", @generic="abb1091e36be95c67784f13bfb2ee34421832869300401a215fc696c26afd37dc4886761ad39d4c25359ecba8955408c7bb08ad45be97dcdb3d56ae09df16185fa8c36a0a4f009f52716167deee43cb098e47712dec2af877dc3acd3107e3452d8268ba60be293bc7d34bbad93b41d7d56ee7c74a8d344390aedbdfb7af489c49314b909cbc4e456f909fea1d17be0fc1a72b61d361f8fd92f04a1fb7bf8575458eed27d78b0e92e4587da59e404c961", @generic="57060064793f1f5bbbdc74d2b6135a32c426fefa3d9632154327a622193f1104338e697cc6d32e00f986758d30bd544cf36bff118a6a6c20043bb7ee6011d8f4d6449f669a0727777e2b1cc073353b36817d5d197705f74aa36822d9794d1c051afa524034a0eca4d996ddf08c7a82710a7a75d80ed64cbf2e6fa08736d6580c4490a2ed4159048cc2403321af14f4f84bfb872c2c56fe41e5e10c245493cba44a10d76b215fca5ecbe7f11287f0b096dac4424718f9d98839111fb31432179135ef31b6349458824c4d8ff738b76c057a778c1a5e42", @generic="1caa1013ca4efdc8c37a85ac22bdbf1cf8a61e5c266784ade68eb32cd934535371845821d502c7bad93605d37e457ae6d046807eeaf905159a6620990c237b685b1e467700479c662aa4d5f73be956041f2b28775487595ab440d777788f4d162fe1746071b1f656ffdba0bb91230e27f8beb0f22d43e1a1080c677a2fc1c2fe9522e80920", @typed={0x4, 0x18}, @generic="0990006bbdcd83f7fd9a132ed775fd25b7567f80debf80fb1772cdec972d26728c93a13d106097b9f0b3be9bef32528dfca38d9b52c232c27c16fa1b25bdd0059deadb09a59de2a6510659f9ca36340b1819c6dfc6e45c146246afe8e49c789d9a793f6ec3f30a8e81130ca18e1b73e941406163f55acd33acbb2c767e2f0b9f00efa2b9cc70adc2383aad003557b7409e796270961631f0860764d2a5d6304861a9d29c6cf383073af30e"]}]}, 0x1a8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 3069.793789] binder: release 29728:29729 transaction 4233 out, still active [ 3069.814462] binder: undelivered TRANSACTION_COMPLETE [ 3069.817491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) 08:38:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x200000000000000, 0x0, 0x0}) [ 3070.624414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) dup2(0xffffffffffffffff, r1) [ 3070.917490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3071.060733] binder: 29856:29857 ioctl c0306201 20000440 returned -14 [ 3071.113961] binder: release 29856:29857 transaction 4234 out, still active [ 3071.130743] binder: undelivered TRANSACTION_COMPLETE [ 3071.607359] kauditd_printk_skb: 137 callbacks suppressed [ 3071.607374] audit: type=1400 audit(1555317513.550:15341): avc: denied { map } for pid=29964 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.683849] audit: type=1400 audit(1555317513.590:15342): avc: denied { map } for pid=29964 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.713194] audit: type=1400 audit(1555317513.600:15343): avc: denied { map } for pid=29964 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.744413] audit: type=1400 audit(1555317513.600:15344): avc: denied { map } for pid=29964 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.801593] audit: type=1400 audit(1555317513.600:15345): avc: denied { map } for pid=29964 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.844695] audit: type=1400 audit(1555317513.610:15346): avc: denied { map } for pid=29965 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.867388] audit: type=1400 audit(1555317513.610:15347): avc: denied { map } for pid=29965 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.890019] audit: type=1400 audit(1555317513.610:15348): avc: denied { map } for pid=29965 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.914134] audit: type=1400 audit(1555317513.620:15349): avc: denied { map } for pid=29964 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3071.939329] audit: type=1400 audit(1555317513.620:15350): avc: denied { map } for pid=29965 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:34 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) 08:38:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300000000000000, 0x0, 0x0}) 08:38:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) [ 3073.107317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3073.156544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:38:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3073.244207] binder: 29970:29976 ioctl c0306201 20000440 returned -14 08:38:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 3073.310679] binder: release 29970:29976 transaction 4235 out, still active [ 3073.317819] binder: undelivered TRANSACTION_COMPLETE 08:38:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) dup2(r1, 0xffffffffffffffff) [ 3073.936748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3075.308328] net_ratelimit: 26 callbacks suppressed [ 3075.308336] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.318226] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.318470] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.323428] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.333646] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.338747] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.343861] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.349072] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.354178] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.359256] protocol 88fb is buggy, dev hsr_slave_1 08:38:38 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x400000000000000, 0x0, 0x0}) 08:38:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x200000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)) 08:38:38 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000939ff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x29) accept4(r1, 0x0, 0x0, 0x0) 08:38:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') read$eventfd(r1, &(0x7f0000000180), 0x1ea) [ 3076.408057] binder: 30106:30111 ioctl c0306201 20000440 returned -14 [ 3076.435182] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3076.453234] binder: release 30106:30111 transaction 4236 out, still active [ 3076.464489] binder: undelivered TRANSACTION_COMPLETE 08:38:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3076.623195] kauditd_printk_skb: 114 callbacks suppressed [ 3076.623209] audit: type=1400 audit(1555317518.570:15465): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3076.779286] audit: type=1400 audit(1555317518.610:15466): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x500000000000000, 0x0, 0x0}) [ 3076.892395] audit: type=1400 audit(1555317518.640:15467): avc: denied { map } for pid=30124 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:38 executing program 2: r0 = socket$inet6(0xa, 0x4000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3077.048625] audit: type=1400 audit(1555317518.670:15468): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3077.212109] audit: type=1400 audit(1555317518.680:15469): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:39 executing program 4: syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) [ 3077.263489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3077.346163] audit: type=1400 audit(1555317518.710:15470): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3077.508190] audit: type=1400 audit(1555317518.710:15471): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3077.618744] binder: 30341:30342 ioctl c0306201 20000440 returned -14 [ 3077.652988] audit: type=1400 audit(1555317518.800:15472): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3077.677763] binder: release 30341:30342 transaction 4237 out, still active [ 3077.689534] binder: undelivered TRANSACTION_COMPLETE [ 3077.831671] audit: type=1400 audit(1555317518.800:15473): avc: denied { map } for pid=30124 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3077.949521] audit: type=1400 audit(1555317518.960:15474): avc: denied { map } for pid=30330 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:41 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x200) r1 = memfd_create(&(0x7f0000000200)='\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 08:38:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 08:38:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x600000000000000, 0x0, 0x0}) 08:38:41 executing program 4: r0 = open(0x0, 0x80040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000b00)) r3 = memfd_create(0x0, 0x1) pwritev(r3, &(0x7f0000f50f90), 0x6a, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 3079.779349] binder: 30455:30461 ioctl c0306201 20000440 returned -14 [ 3079.801460] binder: release 30455:30461 transaction 4238 out, still active [ 3079.805508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3079.812449] binder: undelivered TRANSACTION_COMPLETE 08:38:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:42 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000939ff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 08:38:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700000000000000, 0x0, 0x0}) [ 3080.519628] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xf0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x29, 0x2, 0x0) r2 = getpid() perf_event_open(&(0x7f00000017c0)={0x1, 0x70, 0x80, 0xffffffff, 0x2, 0x80, 0x0, 0x2, 0x20008, 0x1, 0xffffffff80000001, 0x9, 0x7, 0x3f, 0x2, 0x401, 0x4, 0x5, 0x3, 0x1, 0x8, 0x100, 0x8001, 0x4, 0x846b, 0x8001, 0xac, 0x8000, 0x81, 0x4, 0x0, 0x100000000, 0x2, 0x24, 0x9, 0x4, 0xffff, 0x8001, 0x0, 0x8ded, 0x2, @perf_config_ext={0x4, 0x3}, 0x4000, 0x0, 0x20, 0x5, 0x7fffffff, 0x6a3b, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffff9c, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)={&(0x7f0000001680)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001700)=r3) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0xee6e0000, 0x2a0]}, 0xf}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0xc0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, &(0x7f0000001740)={0x1, 0x8}, 0x0, 0x0, &(0x7f0000001780)={0x7, 0x1, 0x8, 0x7f}, &(0x7f0000000440)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='io.stat\x00', 0x0, 0x0) [ 3081.188980] binder: 30692:30713 ioctl c0306201 20000440 returned -14 [ 3081.236050] binder: release 30692:30713 transaction 4239 out, still active [ 3081.253626] binder: undelivered TRANSACTION_COMPLETE [ 3081.548227] net_ratelimit: 25 callbacks suppressed [ 3081.548235] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.548270] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.553247] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.568540] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.573731] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.579112] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.584230] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.589489] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.594587] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.728696] kauditd_printk_skb: 141 callbacks suppressed [ 3081.728709] audit: type=1400 audit(1555317523.680:15616): avc: denied { map } for pid=30904 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.832392] audit: type=1400 audit(1555317523.680:15617): avc: denied { map } for pid=30904 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.856588] audit: type=1400 audit(1555317523.680:15618): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.882385] audit: type=1400 audit(1555317523.680:15619): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.909639] audit: type=1400 audit(1555317523.700:15620): avc: denied { map } for pid=30904 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.933914] audit: type=1400 audit(1555317523.700:15621): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.967289] audit: type=1400 audit(1555317523.700:15622): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3081.993766] audit: type=1400 audit(1555317523.720:15623): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3082.041556] audit: type=1400 audit(1555317523.720:15624): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3082.067762] audit: type=1400 audit(1555317523.740:15625): avc: denied { map } for pid=30904 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3082.108203] protocol 88fb is buggy, dev hsr_slave_0 08:38:44 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 08:38:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa00000000000000, 0x0, 0x0}) 08:38:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xf0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x29, 0x2, 0x0) r2 = getpid() perf_event_open(&(0x7f00000017c0)={0x1, 0x70, 0x80, 0xffffffff, 0x2, 0x80, 0x0, 0x2, 0x20008, 0x1, 0xffffffff80000001, 0x9, 0x7, 0x3f, 0x2, 0x401, 0x4, 0x5, 0x3, 0x1, 0x8, 0x100, 0x8001, 0x4, 0x846b, 0x8001, 0xac, 0x8000, 0x81, 0x4, 0x0, 0x100000000, 0x2, 0x24, 0x9, 0x4, 0xffff, 0x8001, 0x0, 0x8ded, 0x2, @perf_config_ext={0x4, 0x3}, 0x4000, 0x0, 0x20, 0x5, 0x7fffffff, 0x6a3b, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffff9c, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)={&(0x7f0000001680)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001700)=r3) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0xee6e0000, 0x2a0]}, 0xf}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0xc0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, &(0x7f0000001740)={0x1, 0x8}, 0x0, 0x0, &(0x7f0000001780)={0x7, 0x1, 0x8, 0x7f}, &(0x7f0000000440)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='io.stat\x00', 0x0, 0x0) 08:38:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, 0xe8) [ 3083.172233] binder: 30906:30911 ioctl c0306201 20000440 returned -14 [ 3083.187479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3083.190172] binder: release 30906:30911 transaction 4240 out, still active [ 3083.235033] binder: undelivered TRANSACTION_COMPLETE 08:38:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readahead(0xffffffffffffffff, 0x0, 0x0) 08:38:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x240000000000000, 0xfffffffffffffffe) 08:38:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200000000000000, 0x0, 0x0}) [ 3084.040247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:46 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 08:38:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x1) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 08:38:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3084.730549] binder: 31092:31114 ioctl c0306201 20000440 returned -14 08:38:46 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) [ 3084.790647] binder: release 31092:31114 transaction 4241 out, still active [ 3084.809296] binder: undelivered TRANSACTION_COMPLETE [ 3084.933758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:47 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2000000000000000, 0x0, 0x0}) [ 3085.859117] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:48 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 08:38:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4f19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3086.249453] binder: 31325:31335 ioctl c0306201 20000440 returned -14 [ 3086.310488] binder: release 31325:31335 transaction 4242 out, still active [ 3086.317608] binder: undelivered TRANSACTION_COMPLETE 08:38:48 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3086.738534] kauditd_printk_skb: 146 callbacks suppressed [ 3086.738547] audit: type=1400 audit(1555317528.690:15772): avc: denied { map } for pid=31420 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3086.811309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3086.879696] audit: type=1400 audit(1555317528.730:15773): avc: denied { create } for pid=31431 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:48 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5019c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3087.036035] audit: type=1400 audit(1555317528.750:15774): avc: denied { map } for pid=31398 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f00000000000000, 0x0, 0x0}) [ 3087.191296] audit: type=1400 audit(1555317528.760:15775): avc: denied { write } for pid=31431 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3087.347732] audit: type=1400 audit(1555317528.770:15776): avc: denied { map } for pid=31420 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3087.518261] audit: type=1400 audit(1555317528.800:15777): avc: denied { map } for pid=31420 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:49 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3087.654905] audit: type=1400 audit(1555317528.800:15778): avc: denied { map } for pid=31420 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3087.788182] net_ratelimit: 23 callbacks suppressed [ 3087.788190] protocol 88fb is buggy, dev hsr_slave_0 [ 3087.788223] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.793254] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.808524] protocol 88fb is buggy, dev hsr_slave_0 [ 3087.813800] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.819036] protocol 88fb is buggy, dev hsr_slave_0 [ 3087.823189] audit: type=1400 audit(1555317528.810:15779): avc: denied { map } for pid=31398 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3087.824139] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.853361] protocol 88fb is buggy, dev hsr_slave_0 [ 3087.858541] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.965185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3088.038619] audit: type=1400 audit(1555317528.810:15780): avc: denied { map } for pid=31398 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3088.348930] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.360466] audit: type=1400 audit(1555317528.830:15781): avc: denied { map } for pid=31450 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x3f, 0x4, [0x0]}) 08:38:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4800000000000000, 0x0, 0x0}) [ 3089.024494] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:51 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5219c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:51 executing program 2: [ 3089.679287] binder: 31722:31728 ioctl c0306201 20000440 returned -14 [ 3089.725385] binder: release 31722:31728 transaction 4243 out, still active [ 3089.758280] binder: undelivered TRANSACTION_COMPLETE 08:38:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:51 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3089.983874] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:52 executing program 2: 08:38:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5319c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c00000000000000, 0x0, 0x0}) 08:38:52 executing program 2: 08:38:52 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3090.741296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5419c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:52 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:38:53 executing program 2: [ 3091.447779] binder: 31848:31851 ioctl c0306201 20000440 returned -14 [ 3091.562251] binder: release 31848:31851 transaction 4244 out, still active [ 3091.598477] binder: undelivered TRANSACTION_COMPLETE [ 3091.754378] kauditd_printk_skb: 177 callbacks suppressed [ 3091.754394] audit: type=1400 audit(1555317533.700:15959): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3091.977492] audit: type=1400 audit(1555317533.700:15960): avc: denied { map } for pid=31852 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) [ 3092.163462] audit: type=1400 audit(1555317533.740:15961): avc: denied { create } for pid=31861 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:38:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6000000000000000, 0x0, 0x0}) 08:38:54 executing program 2: [ 3092.408172] audit: type=1400 audit(1555317533.780:15962): avc: denied { map } for pid=31852 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3092.528262] audit: type=1400 audit(1555317533.800:15963): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3092.695876] audit: type=1400 audit(1555317533.800:15964): avc: denied { map } for pid=31852 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:54 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3092.799489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3092.880941] audit: type=1400 audit(1555317533.800:15965): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5619c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3093.045183] audit: type=1400 audit(1555317533.870:15966): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:55 executing program 2: 08:38:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) [ 3093.208215] audit: type=1400 audit(1555317533.980:15967): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3093.268831] binder: 31978:31979 ioctl c0306201 20000440 returned -14 [ 3093.307438] binder: release 31978:31979 transaction 4245 out, still active [ 3093.325077] binder: undelivered TRANSACTION_COMPLETE [ 3093.368424] audit: type=1400 audit(1555317533.980:15968): avc: denied { map } for pid=31854 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3093.605225] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:55 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5719c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:55 executing program 2: [ 3094.028203] net_ratelimit: 24 callbacks suppressed [ 3094.028212] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.038205] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.038265] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.043316] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.053438] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.058587] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.063781] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.068951] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.074406] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.079536] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.385440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:38:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 08:38:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6800000000000000, 0x0, 0x0}) 08:38:57 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:57 executing program 2: 08:38:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5819c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:57 executing program 2: [ 3095.795944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3095.824387] binder: 32105:32109 ioctl c0306201 20000440 returned -14 08:38:57 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3095.891107] binder: release 32105:32109 transaction 4246 out, still active [ 3095.902321] binder: undelivered TRANSACTION_COMPLETE 08:38:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5919c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:38:58 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 08:38:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c00000000000000, 0x0, 0x0}) 08:38:58 executing program 2: [ 3096.677047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 3096.781985] kauditd_printk_skb: 166 callbacks suppressed [ 3096.781999] audit: type=1400 audit(1555317538.730:16135): avc: denied { map } for pid=32211 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5a19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3096.939793] audit: type=1400 audit(1555317538.780:16136): avc: denied { map } for pid=32219 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:59 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 3097.092420] audit: type=1400 audit(1555317538.780:16137): avc: denied { map } for pid=32219 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:59 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:38:59 executing program 2: [ 3097.258824] audit: type=1400 audit(1555317538.860:16138): avc: denied { map } for pid=32219 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3097.416918] audit: type=1400 audit(1555317538.890:16139): avc: denied { map } for pid=32219 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3097.609241] audit: type=1400 audit(1555317539.070:16140): avc: denied { map } for pid=32227 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3097.708721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3097.772592] audit: type=1400 audit(1555317539.080:16141): avc: denied { map } for pid=32227 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5b19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:38:59 executing program 2: 08:38:59 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 3097.926371] audit: type=1400 audit(1555317539.090:16142): avc: denied { map } for pid=32227 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:38:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 3098.128165] audit: type=1400 audit(1555317539.100:16143): avc: denied { map } for pid=32227 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7400000000000000, 0x0, 0x0}) 08:39:00 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3098.308201] audit: type=1400 audit(1555317539.140:16144): avc: denied { map } for pid=32227 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3098.611419] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) close(r0) 08:39:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5c19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:01 executing program 0: setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb5a24929f233b2ab5f0bec6642bca1daa04ffbbb6b41c0c6322072cb94a8b005afff39ff5903521885e0ef0d16f474e68e721a68aad8e65"], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3099.121656] binder: 32357:32362 ioctl c0306201 20000440 returned -14 [ 3099.211090] binder: release 32357:32362 transaction 4247 out, still active [ 3099.238327] binder: undelivered TRANSACTION_COMPLETE 08:39:01 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3099.805910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5d19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7a00000000000000, 0x0, 0x0}) [ 3100.268206] net_ratelimit: 25 callbacks suppressed [ 3100.268214] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.268253] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.274006] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.279411] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.294889] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.300639] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.306052] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.311305] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.316733] protocol 88fb is buggy, dev hsr_slave_1 08:39:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:02 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x20000000005, @dev={[], 0xa}, 'ip_vti0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3100.722908] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3100.758790] binder: 32571:32590 ioctl c0306201 20000440 returned -14 08:39:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5e19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3100.812781] binder: release 32571:32590 transaction 4248 out, still active [ 3100.827945] binder: undelivered TRANSACTION_COMPLETE [ 3100.828194] protocol 88fb is buggy, dev hsr_slave_0 08:39:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0}) [ 3101.521653] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5f19c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3101.966020] kauditd_printk_skb: 166 callbacks suppressed [ 3101.966034] audit: type=1400 audit(1555317543.910:16311): avc: denied { map } for pid=32734 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3102.104704] audit: type=1400 audit(1555317543.960:16312): avc: denied { map } for pid=32734 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3102.173111] binder: 302:333 ioctl c0306201 20000440 returned -14 [ 3102.191393] audit: type=1400 audit(1555317543.970:16313): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3102.227979] binder: release 302:333 transaction 4249 out, still active [ 3102.234092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3102.238700] binder: undelivered TRANSACTION_COMPLETE [ 3102.333552] audit: type=1400 audit(1555317543.970:16314): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3102.407986] audit: type=1400 audit(1555317544.010:16315): avc: denied { map } for pid=32734 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3102.544332] audit: type=1400 audit(1555317544.040:16316): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:04 executing program 0: setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb5a24929f233b2ab5f0bec6642bca1daa04ffbbb6b41c0c6322072cb94a8b005afff39ff5903521885e0ef0d16f474e68e721a68aad8e65"], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:39:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:04 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 08:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6009c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3102.669479] audit: type=1400 audit(1555317544.040:16317): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffff7f00000000, 0x0, 0x0}) [ 3102.855556] audit: type=1400 audit(1555317544.090:16318): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3103.034186] audit: type=1400 audit(1555317544.100:16319): avc: denied { map } for pid=32734 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3103.189724] audit: type=1400 audit(1555317544.120:16320): avc: denied { call } for pid=302 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:39:05 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3103.314223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6060c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:05 executing program 0: setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb5a24929f233b2ab5f0bec6642bca1daa04ffbbb6b41c0c6322072cb94a8b005afff39ff5903521885e0ef0d16f474e68e721a68aad8e65"], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:39:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/psched\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/29, 0xd}], 0x1) [ 3103.635018] binder: 539:562 ioctl c0306201 20000440 returned -14 [ 3103.679883] binder: release 539:562 transaction 4250 out, still active [ 3103.686653] binder: undelivered TRANSACTION_COMPLETE 08:39:06 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3104.284289] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) 08:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6063c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:06 executing program 0: setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb5a24929f233b2ab5f0bec6642bca1daa04ffbbb6b41c0c6322072cb94a8b005afff39ff5903521885e0ef0d16f474e68e721a68aad8e65"], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x20000080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1000, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:39:06 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f5119c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3105.170105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb70ce5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:07 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3105.950845] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3, 0x0}) [ 3106.062808] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb72fe5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f4519c2deb718e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:08 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:08 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3106.508194] net_ratelimit: 23 callbacks suppressed [ 3106.508203] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.508237] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.513327] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.518586] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.534535] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.539839] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.545049] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.550309] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.555511] protocol 88fb is buggy, dev hsr_slave_1 08:39:08 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3106.854490] binder: release 919:922 transaction 4251 out, still active [ 3106.886565] binder: undelivered TRANSACTION_COMPLETE [ 3106.934697] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.975402] kauditd_printk_skb: 188 callbacks suppressed [ 3106.975416] audit: type=1400 audit(1555317548.920:16509): avc: denied { map } for pid=923 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3107.068206] protocol 88fb is buggy, dev hsr_slave_0 08:39:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 08:39:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb760e5155682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3107.196165] audit: type=1400 audit(1555317548.930:16511): avc: denied { map } for pid=923 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3107.369027] audit: type=1400 audit(1555317548.930:16510): avc: denied { map } for pid=920 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3107.558325] audit: type=1400 audit(1555317548.970:16512): avc: denied { map } for pid=920 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3107.677435] audit: type=1400 audit(1555317548.970:16513): avc: denied { map } for pid=920 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:09 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4, 0x0}) [ 3107.830701] audit: type=1400 audit(1555317548.980:16514): avc: denied { map } for pid=921 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:09 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3108.008053] audit: type=1400 audit(1555317548.980:16515): avc: denied { map } for pid=921 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3108.051130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3108.181543] audit: type=1400 audit(1555317548.990:16516): avc: denied { create } for pid=924 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:39:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5605682f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3108.323298] audit: type=1400 audit(1555317549.000:16517): avc: denied { map } for pid=923 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3108.417199] binder: release 1065:1089 transaction 4252 out, still active [ 3108.428215] binder: undelivered TRANSACTION_COMPLETE [ 3108.437511] audit: type=1400 audit(1555317549.030:16518): avc: denied { map } for pid=920 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:10 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl(r0, 0x4161, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) 08:39:10 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3109.040853] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5, 0x0}) 08:39:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5156082f3c413cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl(r0, 0x4161, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) 08:39:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3109.878393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3109.938603] binder: release 1298:1301 transaction 4253 out, still active [ 3109.945610] binder: undelivered TRANSACTION_COMPLETE 08:39:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c460cc44c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:12 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:12 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl(r0, 0x4161, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) 08:39:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0}) [ 3110.728911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3111.199635] binder: release 1416:1420 transaction 4254 out, still active [ 3111.213747] binder: undelivered TRANSACTION_COMPLETE 08:39:14 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0}) 08:39:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc60c1ec6989ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:14 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl(r0, 0x4161, 0x0) 08:39:14 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3112.377090] kauditd_printk_skb: 183 callbacks suppressed [ 3112.377104] audit: type=1400 audit(1555317554.320:16702): avc: denied { create } for pid=1549 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3112.402881] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3112.418030] binder: release 1550:1553 transaction 4255 out, still active 08:39:14 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) [ 3112.440025] binder: undelivered TRANSACTION_COMPLETE 08:39:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec0a89ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3112.516057] audit: type=1400 audit(1555317554.340:16703): avc: denied { write } for pid=1549 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3112.697711] audit: type=1400 audit(1555317554.360:16704): avc: denied { call } for pid=1550 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 3112.748198] net_ratelimit: 24 callbacks suppressed [ 3112.748244] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.758200] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.758392] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.763349] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.768483] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.778466] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.783640] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.788796] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.793963] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.799120] protocol 88fb is buggy, dev hsr_slave_1 08:39:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa, 0x0}) 08:39:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:14 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3112.994124] audit: type=1400 audit(1555317554.450:16705): avc: denied { create } for pid=1549 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3113.123779] audit: type=1400 audit(1555317554.690:16706): avc: denied { map } for pid=1691 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3113.219669] binder: release 1766:1770 transaction 4256 out, still active [ 3113.226608] binder: undelivered TRANSACTION_COMPLETE [ 3113.242476] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3113.261521] audit: type=1400 audit(1555317554.760:16707): avc: denied { map } for pid=1691 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:15 executing program 0: ioctl(0xffffffffffffffff, 0x4161, 0x0) [ 3113.476472] audit: type=1400 audit(1555317554.770:16708): avc: denied { map } for pid=1691 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3113.637246] audit: type=1400 audit(1555317554.770:16709): avc: denied { map } for pid=1691 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3113.791870] audit: type=1400 audit(1555317554.780:16710): avc: denied { map } for pid=1691 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3113.865256] audit: type=1400 audit(1555317554.790:16711): avc: denied { map } for pid=1691 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec2589ef070000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:17 executing program 0: ioctl(0xffffffffffffffff, 0x4161, 0x0) 08:39:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12, 0x0}) 08:39:17 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3115.772421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:17 executing program 0: ioctl(0xffffffffffffffff, 0x4161, 0x0) 08:39:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef040000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3115.883029] binder: release 1989:1994 transaction 4257 out, still active [ 3115.899776] binder: undelivered TRANSACTION_COMPLETE 08:39:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:18 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3116.506871] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:18 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:39:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48, 0x0}) [ 3117.382613] kauditd_printk_skb: 145 callbacks suppressed [ 3117.382627] audit: type=1400 audit(1555317559.330:16857): avc: denied { map } for pid=2120 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.459680] binder: release 2118:2121 transaction 4258 out, still active [ 3117.466660] binder: undelivered TRANSACTION_COMPLETE [ 3117.536689] audit: type=1400 audit(1555317559.330:16858): avc: denied { map } for pid=2120 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.624555] audit: type=1400 audit(1555317559.370:16859): avc: denied { map } for pid=2120 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.682895] audit: type=1400 audit(1555317559.440:16860): avc: denied { map } for pid=2120 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.751956] audit: type=1400 audit(1555317559.590:16861): avc: denied { map } for pid=2138 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.783201] audit: type=1400 audit(1555317559.590:16862): avc: denied { map } for pid=2138 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.815760] audit: type=1400 audit(1555317559.610:16863): avc: denied { map } for pid=2138 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.848463] audit: type=1400 audit(1555317559.610:16864): avc: denied { map } for pid=2138 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.878673] audit: type=1400 audit(1555317559.630:16865): avc: denied { map } for pid=2138 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3117.904998] audit: type=1400 audit(1555317559.640:16866): avc: denied { map } for pid=2138 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3118.988226] net_ratelimit: 24 callbacks suppressed [ 3118.988236] protocol 88fb is buggy, dev hsr_slave_0 [ 3118.988279] protocol 88fb is buggy, dev hsr_slave_1 [ 3118.993338] protocol 88fb is buggy, dev hsr_slave_1 [ 3118.998478] protocol 88fb is buggy, dev hsr_slave_0 [ 3119.013507] protocol 88fb is buggy, dev hsr_slave_1 [ 3119.018681] protocol 88fb is buggy, dev hsr_slave_0 [ 3119.023735] protocol 88fb is buggy, dev hsr_slave_1 [ 3119.031098] protocol 88fb is buggy, dev hsr_slave_0 [ 3119.036173] protocol 88fb is buggy, dev hsr_slave_1 08:39:21 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef080000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:21 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:39:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c, 0x0}) 08:39:21 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x4161, 0x0) [ 3119.345015] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3119.375059] binder: release 2229:2234 transaction 4259 out, still active [ 3119.399595] binder: undelivered TRANSACTION_COMPLETE 08:39:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef0b0000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3119.548227] protocol 88fb is buggy, dev hsr_slave_0 08:39:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60, 0x0}) 08:39:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4161, 0x0) [ 3120.438347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3120.734388] binder: release 2368:2370 transaction 4260 out, still active [ 3120.756309] binder: undelivered TRANSACTION_COMPLETE 08:39:24 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef600000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:24 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4161, 0x0) 08:39:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68, 0x0}) [ 3122.776499] kauditd_printk_skb: 112 callbacks suppressed [ 3122.776512] audit: type=1400 audit(1555317564.720:16979): avc: denied { create } for pid=2488 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3122.809102] binder: release 2490:2493 transaction 4261 out, still active 08:39:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4161, 0x0) [ 3122.825655] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3122.837877] binder: undelivered TRANSACTION_COMPLETE 08:39:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070200516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3122.931749] audit: type=1400 audit(1555317564.750:16980): avc: denied { call } for pid=2490 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:39:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3123.057462] audit: type=1400 audit(1555317564.760:16981): avc: denied { write } for pid=2488 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3123.153409] audit: type=1400 audit(1555317564.860:16982): avc: denied { create } for pid=2488 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3123.308003] audit: type=1400 audit(1555317565.080:16983): avc: denied { map } for pid=2528 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:25 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3123.465490] audit: type=1400 audit(1555317565.080:16984): avc: denied { map } for pid=2528 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c, 0x0}) [ 3123.613999] audit: type=1400 audit(1555317565.110:16985): avc: denied { map } for pid=2528 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:25 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) [ 3123.763871] audit: type=1400 audit(1555317565.120:16986): avc: denied { map } for pid=2528 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3123.834510] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3123.909941] audit: type=1400 audit(1555317565.170:16987): avc: denied { map } for pid=2528 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3124.052994] audit: type=1400 audit(1555317565.200:16988): avc: denied { map } for pid=2528 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3124.427063] binder: release 2624:2626 transaction 4262 out, still active [ 3124.437801] binder: undelivered TRANSACTION_COMPLETE [ 3125.228226] net_ratelimit: 24 callbacks suppressed [ 3125.228235] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.228270] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.233243] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.238407] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.253511] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.258637] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.263696] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.268837] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.273904] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.788221] protocol 88fb is buggy, dev hsr_slave_0 08:39:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:28 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x74, 0x0}) 08:39:28 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:28 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) 08:39:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070300516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3126.252437] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:28 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) 08:39:28 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3126.321145] binder: release 2732:2737 transaction 4263 out, still active [ 3126.333276] binder: undelivered TRANSACTION_COMPLETE 08:39:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070400516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a, 0x0}) 08:39:28 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3127.062698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3127.553717] binder: release 2879:2880 transaction 4264 out, still active [ 3127.565678] binder: undelivered TRANSACTION_COMPLETE [ 3127.823759] kauditd_printk_skb: 138 callbacks suppressed [ 3127.823774] audit: type=1400 audit(1555317569.770:17127): avc: denied { map } for pid=2939 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3127.942993] audit: type=1400 audit(1555317569.810:17128): avc: denied { map } for pid=2939 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.016467] audit: type=1400 audit(1555317569.820:17129): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.178867] audit: type=1400 audit(1555317569.830:17130): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.227333] audit: type=1400 audit(1555317569.870:17131): avc: denied { map } for pid=2939 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.258194] audit: type=1400 audit(1555317569.890:17132): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.308175] audit: type=1400 audit(1555317569.930:17133): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.358188] audit: type=1400 audit(1555317569.930:17134): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.428171] audit: type=1400 audit(1555317569.930:17135): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3128.470275] audit: type=1400 audit(1555317569.950:17136): avc: denied { map } for pid=2939 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:31 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:39:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070500516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:31 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) 08:39:31 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) [ 3129.728026] binder: release 3020:3025 transaction 4265 out, still active [ 3129.746226] binder: undelivered TRANSACTION_COMPLETE 08:39:31 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3129.788597] FAULT_INJECTION: forcing a failure. [ 3129.788597] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.811264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3129.841209] CPU: 0 PID: 3034 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 3129.848191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3129.857651] Call Trace: [ 3129.860308] dump_stack+0x172/0x1f0 [ 3129.863998] should_fail.cold+0xa/0x1b [ 3129.868017] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3129.873152] ? security_compute_av+0x27b/0xb70 [ 3129.877776] __should_failslab+0x121/0x190 [ 3129.882041] should_failslab+0x9/0x14 [ 3129.885861] kmem_cache_alloc+0x47/0x700 [ 3129.889962] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3129.895174] ? avc_compute_av+0x225/0x690 [ 3129.899350] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3129.904488] avc_alloc_node+0x2a/0x630 [ 3129.908403] ? kasan_check_read+0x11/0x20 [ 3129.912575] avc_compute_av+0x22d/0x690 [ 3129.916573] avc_has_extended_perms+0x815/0x10f0 [ 3129.921357] ? find_held_lock+0x35/0x130 [ 3129.925543] ? avc_ss_reset+0x190/0x190 [ 3129.929549] ? kasan_check_read+0x11/0x20 [ 3129.933731] ? mark_held_locks+0x100/0x100 [ 3129.937998] ? proc_fail_nth_write+0x9d/0x1e0 [ 3129.942521] ? proc_cwd_link+0x1d0/0x1d0 [ 3129.946623] ? __fget+0x340/0x540 [ 3129.950108] ? __might_sleep+0x95/0x190 [ 3129.954108] selinux_file_ioctl+0x46f/0x5e0 [ 3129.958455] ? kasan_check_read+0x11/0x20 [ 3129.962623] ? selinux_file_mprotect+0x620/0x620 [ 3129.967410] ? iterate_fd+0x360/0x360 [ 3129.971236] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3129.976880] ? fput+0x128/0x1a0 [ 3129.980624] security_file_ioctl+0x7d/0xc0 [ 3129.984875] ? security_file_ioctl+0x7d/0xc0 [ 3129.989311] ksys_ioctl+0x57/0xd0 [ 3129.992781] __x64_sys_ioctl+0x73/0xb0 [ 3129.996692] do_syscall_64+0x103/0x610 [ 3130.000601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3130.005804] RIP: 0033:0x458c29 [ 3130.009111] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3130.028771] RSP: 002b:00007fdf681a1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3130.037183] RAX: ffffffffffffffda RBX: 00007fdf681a1c90 RCX: 0000000000458c29 [ 3130.044578] RDX: 0000000000000000 RSI: 0000000000004161 RDI: 0000000000000003 [ 3130.051893] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3130.059198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf681a26d4 [ 3130.066488] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000004 08:39:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070600516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 08:39:32 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) 08:39:32 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0}) 08:39:32 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3130.752975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070700516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:32 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 3131.387531] binder: release 3171:3173 transaction 4266 out, still active [ 3131.423688] binder: undelivered TRANSACTION_COMPLETE [ 3131.468193] net_ratelimit: 24 callbacks suppressed [ 3131.468205] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.468233] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.473232] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.478299] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.493394] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.498634] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.503732] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.509408] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.514769] protocol 88fb is buggy, dev hsr_slave_1 08:39:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, 0x0) [ 3131.719515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:33 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070a00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3132.108205] protocol 88fb is buggy, dev hsr_slave_0 08:39:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0}) 08:39:34 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2, 0x0) 08:39:34 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3132.475819] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070e00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3132.828903] kauditd_printk_skb: 146 callbacks suppressed [ 3132.828918] audit: type=1400 audit(1555317574.780:17283): avc: denied { call } for pid=3306 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 3132.838384] binder: release 3306:3308 transaction 4267 out, still active [ 3132.968271] binder: undelivered TRANSACTION_COMPLETE [ 3132.984074] audit: type=1400 audit(1555317574.780:17284): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.124179] audit: type=1400 audit(1555317574.780:17285): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.286087] audit: type=1400 audit(1555317574.820:17286): avc: denied { map } for pid=3304 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.444059] audit: type=1400 audit(1555317574.840:17287): avc: denied { map } for pid=3304 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.457100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3133.584195] audit: type=1400 audit(1555317574.860:17288): avc: denied { map } for pid=3307 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.703430] audit: type=1400 audit(1555317574.900:17289): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.863588] audit: type=1400 audit(1555317574.910:17290): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3133.987171] audit: type=1400 audit(1555317574.970:17291): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3134.125198] audit: type=1400 audit(1555317574.970:17292): avc: denied { map } for pid=3307 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:36 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) 08:39:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4112, 0x0) 08:39:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070f00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3134.494797] binder: release 3533:3534 transaction 4268 out, still active [ 3134.505761] binder: undelivered TRANSACTION_COMPLETE [ 3134.600588] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, 0x0) 08:39:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef074800516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa00, 0x0}) 08:39:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:37 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4140, 0x0) [ 3135.475845] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3135.572960] binder: release 3759:3761 transaction 4269 out, still active [ 3135.601099] binder: undelivered TRANSACTION_COMPLETE [ 3137.708205] net_ratelimit: 23 callbacks suppressed [ 3137.708255] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.713300] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.713352] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.718512] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.733633] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.738841] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.743918] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.749105] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.754157] protocol 88fb is buggy, dev hsr_slave_1 08:39:39 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:39:39 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, 0x0) 08:39:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef074c00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:39 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) 08:39:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200, 0x0}) 08:39:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3137.972527] kauditd_printk_skb: 143 callbacks suppressed [ 3137.972541] audit: type=1400 audit(1555317579.920:17436): avc: denied { create } for pid=3879 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3138.006870] binder: release 3881:3884 transaction 4270 out, still active 08:39:40 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4142, 0x0) [ 3138.029119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3138.042394] binder: undelivered TRANSACTION_COMPLETE 08:39:40 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3138.120871] audit: type=1400 audit(1555317579.920:17437): avc: denied { call } for pid=3881 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:39:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef076000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3138.220498] audit: type=1400 audit(1555317579.970:17438): avc: denied { write } for pid=3879 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:39:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3138.348182] protocol 88fb is buggy, dev hsr_slave_0 [ 3138.354858] audit: type=1400 audit(1555317580.050:17439): avc: denied { create } for pid=3879 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3138.472606] audit: type=1400 audit(1555317580.210:17440): avc: denied { map } for pid=3913 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3138.613567] audit: type=1400 audit(1555317580.220:17441): avc: denied { map } for pid=3913 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000, 0x0}) [ 3138.780570] audit: type=1400 audit(1555317580.230:17442): avc: denied { map } for pid=3913 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:40 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 3138.857783] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3138.916833] audit: type=1400 audit(1555317580.240:17443): avc: denied { map } for pid=3913 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3139.070499] audit: type=1400 audit(1555317580.290:17444): avc: denied { map } for pid=3913 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3139.183011] audit: type=1400 audit(1555317580.400:17445): avc: denied { map } for pid=3913 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3139.441442] binder: release 4005:4008 transaction 4271 out, still active [ 3139.454309] binder: undelivered TRANSACTION_COMPLETE 08:39:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) 08:39:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4143, 0x0) 08:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef076800516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:43 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) 08:39:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00, 0x0}) 08:39:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, 0x0) [ 3141.369822] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3141.380331] binder: release 4113:4119 transaction 4272 out, still active [ 3141.387250] binder: undelivered TRANSACTION_COMPLETE 08:39:43 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) 08:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef076c00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800, 0x0}) 08:39:43 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'dummy0\x00'}}, 0x1e) sendmmsg(r0, 0x0, 0x0, 0x0) [ 3142.170988] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3142.714255] binder: release 4243:4246 transaction 4273 out, still active [ 3142.725007] binder: undelivered TRANSACTION_COMPLETE [ 3143.002996] kauditd_printk_skb: 131 callbacks suppressed [ 3143.003010] audit: type=1400 audit(1555317584.950:17577): avc: denied { map } for pid=4256 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.065787] audit: type=1400 audit(1555317584.960:17578): avc: denied { map } for pid=4319 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.154438] audit: type=1400 audit(1555317584.990:17579): avc: denied { map } for pid=4319 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.238207] audit: type=1400 audit(1555317585.000:17580): avc: denied { map } for pid=4256 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.323566] audit: type=1400 audit(1555317585.000:17581): avc: denied { map } for pid=4256 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.355525] audit: type=1400 audit(1555317585.010:17582): avc: denied { map } for pid=4319 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.381099] audit: type=1400 audit(1555317585.010:17583): avc: denied { map } for pid=4319 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.406758] audit: type=1400 audit(1555317585.010:17584): avc: denied { map } for pid=4319 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.431182] audit: type=1400 audit(1555317585.010:17585): avc: denied { map } for pid=4256 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.457012] audit: type=1400 audit(1555317585.010:17586): avc: denied { map } for pid=4256 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3143.948216] net_ratelimit: 24 callbacks suppressed [ 3143.948223] protocol 88fb is buggy, dev hsr_slave_0 [ 3143.948260] protocol 88fb is buggy, dev hsr_slave_1 [ 3143.965074] protocol 88fb is buggy, dev hsr_slave_1 [ 3143.983921] protocol 88fb is buggy, dev hsr_slave_0 [ 3143.989120] protocol 88fb is buggy, dev hsr_slave_1 [ 3143.994301] protocol 88fb is buggy, dev hsr_slave_0 [ 3143.999437] protocol 88fb is buggy, dev hsr_slave_1 [ 3144.004569] protocol 88fb is buggy, dev hsr_slave_0 [ 3144.009709] protocol 88fb is buggy, dev hsr_slave_1 [ 3144.588270] protocol 88fb is buggy, dev hsr_slave_0 08:39:46 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) 08:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef077400516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, 0x0) 08:39:46 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 08:39:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00, 0x0}) [ 3144.785874] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3144.812428] binder: release 4357:4359 transaction 4274 out, still active [ 3144.822855] binder: undelivered TRANSACTION_COMPLETE 08:39:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, 0x0) 08:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef077a00516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:46 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 08:39:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000, 0x0}) [ 3145.591382] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:47 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4b47, 0x0) [ 3146.008833] binder: release 4483:4484 transaction 4275 out, still active [ 3146.015867] binder: undelivered TRANSACTION_COMPLETE 08:39:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000013) 08:39:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07f000516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) dup2(r0, r1) 08:39:50 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4b49, 0x0) 08:39:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800, 0x0}) [ 3148.270154] kauditd_printk_skb: 116 callbacks suppressed [ 3148.270168] audit: type=1400 audit(1555317590.220:17703): avc: denied { create } for pid=4595 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3148.303813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3148.340534] binder: release 4592:4597 transaction 4276 out, still active [ 3148.356789] binder: undelivered TRANSACTION_COMPLETE 08:39:50 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x541b, 0x0) 08:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070003516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3148.412530] audit: type=1400 audit(1555317590.220:17704): avc: denied { write } for pid=4595 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:39:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) [ 3148.568165] audit: type=1400 audit(1555317590.270:17705): avc: denied { call } for pid=4592 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 08:39:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3148.719436] audit: type=1400 audit(1555317590.300:17706): avc: denied { create } for pid=4595 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:39:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00, 0x0}) [ 3148.868151] audit: type=1400 audit(1555317590.470:17707): avc: denied { map } for pid=4614 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3149.008224] audit: type=1400 audit(1555317590.480:17708): avc: denied { map } for pid=4614 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5421, 0x0) [ 3149.146516] audit: type=1400 audit(1555317590.480:17709): avc: denied { map } for pid=4614 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3149.284599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3149.305876] audit: type=1400 audit(1555317590.490:17710): avc: denied { map } for pid=4614 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3149.426635] audit: type=1400 audit(1555317590.510:17711): avc: denied { map } for pid=4614 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3149.579117] audit: type=1400 audit(1555317590.540:17712): avc: denied { map } for pid=4614 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3149.606642] binder: release 4724:4726 transaction 4277 out, still active [ 3149.647957] binder: undelivered TRANSACTION_COMPLETE [ 3150.188193] net_ratelimit: 23 callbacks suppressed [ 3150.188201] protocol 88fb is buggy, dev hsr_slave_0 [ 3150.188241] protocol 88fb is buggy, dev hsr_slave_1 [ 3150.193320] protocol 88fb is buggy, dev hsr_slave_1 [ 3150.198470] protocol 88fb is buggy, dev hsr_slave_0 [ 3150.213529] protocol 88fb is buggy, dev hsr_slave_1 [ 3150.218741] protocol 88fb is buggy, dev hsr_slave_0 [ 3150.223831] protocol 88fb is buggy, dev hsr_slave_1 [ 3150.229028] protocol 88fb is buggy, dev hsr_slave_0 [ 3150.234204] protocol 88fb is buggy, dev hsr_slave_1 [ 3150.828220] protocol 88fb is buggy, dev hsr_slave_0 08:39:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070005516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 08:39:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400, 0x0}) 08:39:53 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:53 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5450, 0x0) 08:39:53 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) 08:39:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070006516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3151.599632] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:53 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000), &(0x7f00000001c0)=0x4) [ 3151.728810] binder: release 4834:4843 transaction 4278 out, still active [ 3151.736014] binder: undelivered TRANSACTION_COMPLETE 08:39:53 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5451, 0x0) 08:39:53 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 3152.187806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00, 0x0}) 08:39:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070007516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") getxattr(0x0, 0x0, 0x0, 0x0) 08:39:54 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 08:39:54 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 08:39:54 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5452, 0x0) [ 3153.083922] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3153.098241] binder: release 4966:4969 transaction 4279 out, still active [ 3153.105131] binder: undelivered TRANSACTION_COMPLETE 08:39:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400002100001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r1) tkill(r2, 0x1000000000016) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) 08:39:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000a516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:55 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 3153.448166] kauditd_printk_skb: 163 callbacks suppressed [ 3153.448178] audit: type=1400 audit(1555317595.390:17876): avc: denied { map } for pid=5019 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5460, 0x0) [ 3153.656101] audit: type=1400 audit(1555317595.390:17877): avc: denied { map } for pid=5019 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 3153.801885] audit: type=1400 audit(1555317595.420:17878): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3153.963781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3153.970340] audit: type=1400 audit(1555317595.420:17879): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:39:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000e516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3154.135525] audit: type=1400 audit(1555317595.480:17880): avc: denied { map } for pid=5019 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3154.259011] audit: type=1400 audit(1555317595.570:17881): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:56 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:56 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) [ 3154.433835] audit: type=1400 audit(1555317595.570:17882): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:56 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, 0x0) [ 3154.621603] audit: type=1400 audit(1555317595.590:17883): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3154.677471] binder: release 5103:5104 transaction 4280 out, still active [ 3154.698409] binder: undelivered TRANSACTION_COMPLETE [ 3154.810782] audit: type=1400 audit(1555317595.590:17884): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3154.925210] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'security-\x00'}, 0x0, 0x0) [ 3154.956609] audit: type=1400 audit(1555317595.630:17885): avc: denied { map } for pid=5019 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:39:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000f516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) 08:39:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) 08:39:57 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, 0x0) 08:39:57 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:39:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000640)=0x3f) pipe2$9p(&(0x7f0000000100), 0x800) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) unshare(0x40000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 08:39:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070020516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:58 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, 0x0) 08:39:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3156.428176] net_ratelimit: 23 callbacks suppressed [ 3156.428185] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.428227] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.433254] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.438617] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.454310] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.459847] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.466208] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.471577] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.477520] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.483040] protocol 88fb is buggy, dev hsr_slave_1 08:39:58 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) [ 3156.648681] IPVS: ftp: loaded support on port[0] = 21 08:39:58 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, 0x0) 08:39:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) [ 3156.771748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070048516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:39:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3157.400686] IPVS: ftp: loaded support on port[0] = 21 [ 3157.534508] binder: release 5454:5458 transaction 4281 out, still active [ 3157.554144] binder: undelivered TRANSACTION_COMPLETE 08:39:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, 0x0) [ 3157.853907] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) 08:39:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef075648516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3158.475794] kauditd_printk_skb: 173 callbacks suppressed [ 3158.475807] audit: type=1400 audit(1555317600.420:18059): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3158.593200] audit: type=1400 audit(1555317600.420:18060): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3158.658026] audit: type=1400 audit(1555317600.490:18061): avc: denied { map } for pid=5569 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3158.717998] audit: type=1400 audit(1555317600.510:18062): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3158.753080] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3158.864316] audit: type=1400 audit(1555317600.510:18063): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3158.951969] audit: type=1400 audit(1555317600.570:18064): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3159.045396] audit: type=1400 audit(1555317600.580:18065): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3159.121076] audit: type=1400 audit(1555317600.600:18066): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3159.256474] audit: type=1400 audit(1555317600.640:18067): avc: denied { map } for pid=5569 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3159.373645] audit: type=1400 audit(1555317600.660:18068): avc: denied { create } for pid=5573 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:40:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 08:40:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07004c516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) 08:40:02 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40049409, 0x0) 08:40:02 executing program 1: syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)) open$dir(&(0x7f0000000140)='./file0\x00', 0x2069802, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 3161.110830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, 0x0) [ 3161.160705] binder: release 5583:5589 transaction 4282 out, still active [ 3161.178452] binder: undelivered TRANSACTION_COMPLETE 08:40:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef074856516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 08:40:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, 0x0) [ 3161.866606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070060516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:04 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:04 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40086602, 0x0) [ 3162.496607] binder: release 5719:5722 transaction 4283 out, still active [ 3162.513260] binder: undelivered TRANSACTION_COMPLETE [ 3162.668186] net_ratelimit: 24 callbacks suppressed [ 3162.668199] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.668229] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.673244] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.688517] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.693603] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.698804] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.703967] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.709065] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.714218] protocol 88fb is buggy, dev hsr_slave_1 08:40:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070068516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3163.308228] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.480581] kauditd_printk_skb: 131 callbacks suppressed [ 3163.480595] audit: type=1400 audit(1555317605.430:18200): avc: denied { create } for pid=5839 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3163.515498] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3163.603319] audit: type=1400 audit(1555317605.460:18201): avc: denied { write } for pid=5839 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3163.669454] audit: type=1400 audit(1555317605.480:18202): avc: denied { map } for pid=5837 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3163.721687] audit: type=1400 audit(1555317605.480:18203): avc: denied { map } for pid=5837 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3163.826057] audit: type=1400 audit(1555317605.520:18204): avc: denied { create } for pid=5839 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3163.905415] audit: type=1400 audit(1555317605.750:18205): avc: denied { map } for pid=5843 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3163.955511] audit: type=1400 audit(1555317605.790:18206): avc: denied { map } for pid=5843 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3164.036882] audit: type=1400 audit(1555317605.790:18207): avc: denied { map } for pid=5843 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") inotify_init1(0x7fc) 08:40:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) 08:40:06 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xfdfffffffffffffe) 08:40:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07006c516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40087602, 0x0) [ 3164.165129] audit: type=1400 audit(1555317605.790:18208): avc: denied { map } for pid=5843 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3164.286028] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3164.303910] audit: type=1400 audit(1555317605.820:18209): avc: denied { map } for pid=5843 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3164.326519] binder: release 5846:5854 transaction 4284 out, still active [ 3164.326532] binder: undelivered TRANSACTION_COMPLETE 08:40:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184150, 0x0) 08:40:06 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 08:40:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070074516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) 08:40:07 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 08:40:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:07 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) 08:40:07 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184152, 0x0) [ 3165.218851] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07007a516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3165.725250] binder: release 6074:6075 transaction 4285 out, still active [ 3165.751276] binder: undelivered TRANSACTION_COMPLETE 08:40:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000040), 0x1c) 08:40:08 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000939ff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 08:40:08 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020940d, 0x0) [ 3166.359668] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xa000000, 0x0}) 08:40:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef0700f0516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:08 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001180)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r2) 08:40:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "eb5942cee9d4d9ebe27506dbbbcbde723aee2dff8ddd354227b653e7223b2e34", "98f9b93f40091f04749ef870292660e3de0b3880742b2952f7bbe97eb8e5cc61", "ce95ff7b3df939e8cc76a635d5004f41a723435086d094fdd1c46cd3601ef878", "fec8efb3ed8e216e50740b0c68332ccfe12c3d2db5b475d997d2b4ed43428f56", "eb29cf3176c6a32a424ac0db132f4d8f8fb2f3b02b2e4726abe358a93d3aadac", "d5413c4af1ad887bf49989cf"}}) 08:40:08 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80044100, 0x0) [ 3167.055410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070002516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3167.322721] binder: release 6211:6216 transaction 4286 out, still active [ 3167.339620] binder: undelivered TRANSACTION_COMPLETE 08:40:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000100)=""/27, 0x1b, 0x2) 08:40:09 executing program 1: syz_execute_func(&(0x7f0000000140)="f3abf564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bf34dd9e0") clone(0x2220, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000600)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 08:40:09 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, 0x0) [ 3167.945231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070003516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12000000, 0x0}) 08:40:10 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0x102, 0x1}, 0x20) 08:40:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3168.494680] kauditd_printk_skb: 176 callbacks suppressed [ 3168.494702] audit: type=1400 audit(1555317610.440:18386): avc: denied { map } for pid=6336 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80086601, 0x0) [ 3168.653295] audit: type=1400 audit(1555317610.450:18387): avc: denied { map } for pid=6346 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3168.684677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3168.838196] audit: type=1400 audit(1555317610.480:18388): avc: denied { map } for pid=6346 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3168.868886] binder: release 6355:6357 transaction 4287 out, still active [ 3168.875806] binder: undelivered TRANSACTION_COMPLETE [ 3168.908199] net_ratelimit: 23 callbacks suppressed [ 3168.908207] protocol 88fb is buggy, dev hsr_slave_0 [ 3168.908233] protocol 88fb is buggy, dev hsr_slave_1 [ 3168.913308] protocol 88fb is buggy, dev hsr_slave_1 [ 3168.928748] protocol 88fb is buggy, dev hsr_slave_0 [ 3168.933900] protocol 88fb is buggy, dev hsr_slave_1 [ 3168.939128] protocol 88fb is buggy, dev hsr_slave_0 [ 3168.944226] protocol 88fb is buggy, dev hsr_slave_1 [ 3168.949472] protocol 88fb is buggy, dev hsr_slave_0 08:40:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070004516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3168.955011] protocol 88fb is buggy, dev hsr_slave_1 [ 3169.018242] audit: type=1400 audit(1555317610.510:18389): avc: denied { map } for pid=6346 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3169.174492] audit: type=1400 audit(1555317610.520:18390): avc: denied { map } for pid=6346 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x208204) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000003700)=ANY=[@ANYBLOB="00080000000000004806000000000040"]) [ 3169.330928] audit: type=1400 audit(1555317610.530:18391): avc: denied { map } for pid=6346 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80087601, 0x0) [ 3169.477987] audit: type=1400 audit(1555317610.540:18392): avc: denied { map } for pid=6348 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3169.540993] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3169.548236] protocol 88fb is buggy, dev hsr_slave_0 [ 3169.603059] audit: type=1400 audit(1555317610.550:18393): avc: denied { create } for pid=6349 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:40:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070005516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x20000000, 0x0}) 08:40:11 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xffffffd2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000140)="410f01f964ff0941c3c4e2c99758423eded8738d66420fe2e33ea163917b1f00000000c442019dcc6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 3169.813586] audit: type=1400 audit(1555317610.550:18394): avc: denied { map } for pid=6348 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 3169.907600] audit: type=1400 audit(1555317610.550:18395): avc: denied { map } for pid=6348 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/138, 0x8a}], 0x2}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 3170.289602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:12 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, 0x0) 08:40:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070006516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3170.639564] binder: release 6588:6592 transaction 4288 out, still active [ 3170.646617] binder: undelivered TRANSACTION_COMPLETE 08:40:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:13 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184151, 0x0) 08:40:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f000000, 0x0}) [ 3171.287777] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070007516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x40000000015, 0x40000000000005, 0x0) getsockopt$sock_int(r1, 0x1, 0x6, 0x0, &(0x7f0000000080)=0x10b) 08:40:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 08:40:13 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184153, 0x0) 08:40:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000a516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48000000, 0x0}) 08:40:14 executing program 4: 08:40:14 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, 0x0) [ 3172.715780] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3172.770165] EXT4-fs (loop1): group descriptors corrupted! 08:40:14 executing program 1: 08:40:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000e516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3173.186910] binder: release 6854:6858 transaction 4289 out, still active [ 3173.201625] binder: undelivered TRANSACTION_COMPLETE 08:40:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:15 executing program 4: 08:40:15 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, 0x0) [ 3173.522000] kauditd_printk_skb: 199 callbacks suppressed [ 3173.522012] audit: type=1400 audit(1555317615.470:18595): avc: denied { map } for pid=6859 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:15 executing program 1: [ 3173.712870] audit: type=1400 audit(1555317615.470:18596): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3173.869082] audit: type=1400 audit(1555317615.470:18597): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:16 executing program 4: 08:40:16 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c000000, 0x0}) [ 3174.023944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3174.024173] audit: type=1400 audit(1555317615.530:18598): avc: denied { map } for pid=6883 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3174.202491] audit: type=1400 audit(1555317615.610:18599): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07000f516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) [ 3174.355284] audit: type=1400 audit(1555317615.610:18600): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x3d2) close(r0) 08:40:16 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, 0x0) [ 3174.545396] audit: type=1400 audit(1555317615.650:18601): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3174.649851] audit: type=1400 audit(1555317615.650:18602): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3174.786740] binder: release 6984:6987 transaction 4290 out, still active [ 3174.798757] binder: undelivered TRANSACTION_COMPLETE [ 3174.809619] audit: type=1400 audit(1555317615.700:18603): avc: denied { map } for pid=6883 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:40:16 executing program 4: [ 3174.994007] audit: type=1400 audit(1555317615.760:18604): avc: denied { map } for pid=6930 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3175.148201] net_ratelimit: 24 callbacks suppressed [ 3175.148209] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.148243] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.153222] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.168641] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.173832] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.179076] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.184464] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.189687] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.194906] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.280211] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:17 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, 0x0) 08:40:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070048516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:17 executing program 1: 08:40:17 executing program 4: 08:40:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x60000000, 0x0}) [ 3175.788250] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.079092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:18 executing program 4: 08:40:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0189436, 0x0) 08:40:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef07004c516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:40:18 executing program 1: [ 3176.618371] binder: release 7119:7120 transaction 4291 out, still active [ 3176.625312] binder: undelivered TRANSACTION_COMPLETE 08:40:18 executing program 4: [ 3177.073481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070060516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:19 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc020660b, 0x0) 08:40:19 executing program 1: 08:40:19 executing program 4: 08:40:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x68000000, 0x0}) [ 3177.908754] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3177.938553] binder: release 7250:7257 transaction 4292 out, still active [ 3177.945694] binder: undelivered TRANSACTION_COMPLETE 08:40:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000000207fbdf2cbd70000400000000000000d00043008b4a0780413225da717ce4226fb2dd52ca0b525006d1f69f6019c2deb718e5155682f3c413cc44c1ec6989ef070068516e14f4090000000000000055366fb124a396f2f485fdacbb954f25975fd7eb89575b2ed9b1b5248357cd5b91f444df4b991d0d6422da5e0e7b825508003f000900000021b372bde5488066f205d997d828691cd6a2948ed8d50d85adcb6df6bb8aca5b06eab03ce233797107ca4b5205dd5f7b9a7ff3ceaf72fc9de4774e58b1fe1ed35693690c48c8a1311ada66b29c4833ed3b458dbbe755cce00014000700ff0200"/248], 0xf8}}, 0x0) 08:40:20 executing program 1: 08:40:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884113, 0x0) 08:40:20 executing program 4: [ 3178.625178] kauditd_printk_skb: 194 callbacks suppressed [ 3178.625190] audit: type=1400 audit(1555317620.570:18799): avc: denied { map } for pid=7354 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3178.758210] audit: type=1400 audit(1555317620.580:18800): avc: denied { map } for pid=7354 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3178.872983] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3178.902564] audit: type=1400 audit(1555317620.610:18801): avc: denied { map } for pid=7354 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.037871] audit: type=1400 audit(1555317620.630:18802): avc: denied { map } for pid=7354 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.183101] audit: type=1400 audit(1555317620.680:18803): avc: denied { map } for pid=7354 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.308784] audit: type=1400 audit(1555317620.720:18804): avc: denied { map } for pid=7354 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.444212] audit: type=1400 audit(1555317620.730:18805): avc: denied { map } for pid=7354 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.518188] audit: type=1400 audit(1555317620.780:18806): avc: denied { map } for pid=7354 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 3179.572149] audit: type=1400 audit(1555317620.780:18807): avc: denied { create } for pid=7365 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3179.627100] audit: type=1400 audit(1555317620.790:18808): avc: denied { write } for pid=7365 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3181.388172] net_ratelimit: 24 callbacks suppressed [ 3181.388179] protocol 88fb is buggy, dev hsr_slave_0 [ 3181.388209] protocol 88fb is buggy, dev hsr_slave_1 [ 3181.393215] protocol 88fb is buggy, dev hsr_slave_1 [ 3181.408401] protocol 88fb is buggy, dev hsr_slave_0 [ 3181.413442] protocol 88fb is buggy, dev hsr_slave_1 [ 3181.418668] protocol 88fb is buggy, dev hsr_slave_0 [ 3181.423746] protocol 88fb is buggy, dev hsr_slave_1 [ 3181.428956] protocol 88fb is buggy, dev hsr_slave_0 [ 3181.434031] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.028217] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.628191] net_ratelimit: 24 callbacks suppressed [ 3187.628199] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.628238] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.633204] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.638354] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.653385] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.658563] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.663642] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.668795] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.673877] protocol 88fb is buggy, dev hsr_slave_1 [ 3188.268204] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.868171] net_ratelimit: 24 callbacks suppressed [ 3193.868179] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.868245] protocol 88fb is buggy, dev hsr_slave_1 [ 3193.873178] protocol 88fb is buggy, dev hsr_slave_1 [ 3193.878332] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.893352] protocol 88fb is buggy, dev hsr_slave_1 [ 3193.898618] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.903813] protocol 88fb is buggy, dev hsr_slave_1 [ 3193.908979] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.914033] protocol 88fb is buggy, dev hsr_slave_1 [ 3194.508207] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.108178] net_ratelimit: 24 callbacks suppressed [ 3200.108214] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.113180] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.123270] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.128526] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.133591] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.138745] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.143833] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.148950] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.154050] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.748200] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.348178] net_ratelimit: 24 callbacks suppressed [ 3206.348187] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.348216] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.353223] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.368394] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.373474] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.378737] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.383807] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.388972] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.394051] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.988217] protocol 88fb is buggy, dev hsr_slave_0 [ 3212.588193] net_ratelimit: 25 callbacks suppressed [ 3212.588201] protocol 88fb is buggy, dev hsr_slave_0 [ 3212.588240] protocol 88fb is buggy, dev hsr_slave_1 [ 3212.593266] protocol 88fb is buggy, dev hsr_slave_1 [ 3212.598420] protocol 88fb is buggy, dev hsr_slave_0 [ 3212.613419] protocol 88fb is buggy, dev hsr_slave_1 [ 3212.618569] protocol 88fb is buggy, dev hsr_slave_0 [ 3212.623639] protocol 88fb is buggy, dev hsr_slave_1 [ 3212.628786] protocol 88fb is buggy, dev hsr_slave_0 [ 3212.633876] protocol 88fb is buggy, dev hsr_slave_1 [ 3213.228179] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.828175] net_ratelimit: 23 callbacks suppressed [ 3218.828210] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.833168] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.843361] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.848518] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.853586] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.858850] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.863916] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.869056] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.874836] protocol 88fb is buggy, dev hsr_slave_1 [ 3219.468226] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.068172] net_ratelimit: 24 callbacks suppressed [ 3225.068181] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.068208] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.073195] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.078412] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.093623] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.098865] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.103968] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.109170] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.114241] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.708202] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.308170] net_ratelimit: 23 callbacks suppressed [ 3231.308179] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.308222] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.313368] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.318572] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.333700] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.338985] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.344358] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.349734] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.355117] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.948210] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.548215] net_ratelimit: 23 callbacks suppressed [ 3237.548223] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.548260] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.553270] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.558782] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.574741] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.580413] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.585482] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.592077] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.597770] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.188209] protocol 88fb is buggy, dev hsr_slave_0 [ 3243.788168] net_ratelimit: 24 callbacks suppressed [ 3243.788177] protocol 88fb is buggy, dev hsr_slave_0 [ 3243.788221] protocol 88fb is buggy, dev hsr_slave_1 [ 3243.793295] protocol 88fb is buggy, dev hsr_slave_1 [ 3243.798434] protocol 88fb is buggy, dev hsr_slave_0 [ 3243.813622] protocol 88fb is buggy, dev hsr_slave_1 [ 3243.818935] protocol 88fb is buggy, dev hsr_slave_0 [ 3243.824139] protocol 88fb is buggy, dev hsr_slave_1 [ 3243.829349] protocol 88fb is buggy, dev hsr_slave_0 [ 3243.834510] protocol 88fb is buggy, dev hsr_slave_1 [ 3244.428222] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.028182] net_ratelimit: 24 callbacks suppressed [ 3250.028189] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.028230] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.033194] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.038345] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.053518] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.058884] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.064052] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.069196] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.074306] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.668201] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.268161] net_ratelimit: 23 callbacks suppressed [ 3256.268169] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.268192] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.273187] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.288514] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.293585] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.298820] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.303882] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.309080] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.314219] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.908188] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.508178] net_ratelimit: 24 callbacks suppressed [ 3262.508187] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.508202] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.513197] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.518237] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.523356] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.538525] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.543893] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.548992] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.554096] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.559237] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.748173] net_ratelimit: 24 callbacks suppressed [ 3268.748181] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.748247] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.754079] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.759206] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.774174] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.779351] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.784610] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.789835] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.794891] protocol 88fb is buggy, dev hsr_slave_1 [ 3269.388234] protocol 88fb is buggy, dev hsr_slave_0 [ 3274.988192] net_ratelimit: 23 callbacks suppressed [ 3274.988201] protocol 88fb is buggy, dev hsr_slave_0 [ 3274.998158] protocol 88fb is buggy, dev hsr_slave_0 [ 3274.998304] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.003235] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.016485] protocol 88fb is buggy, dev hsr_slave_0 [ 3275.021597] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.026914] protocol 88fb is buggy, dev hsr_slave_0 [ 3275.032047] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.037144] protocol 88fb is buggy, dev hsr_slave_0 [ 3275.042502] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.228173] net_ratelimit: 23 callbacks suppressed [ 3281.228242] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.233170] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.238323] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.243220] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.248289] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.258418] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.263470] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.268643] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.273827] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.868229] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.468175] net_ratelimit: 23 callbacks suppressed [ 3287.468188] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.468211] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.473213] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.478422] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.493700] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.499020] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.504206] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.509383] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.514538] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.108177] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.708180] net_ratelimit: 22 callbacks suppressed [ 3293.708189] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.708216] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.713228] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.728491] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.733658] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.738943] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.744035] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.749617] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.754690] protocol 88fb is buggy, dev hsr_slave_1 [ 3294.348225] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.948173] net_ratelimit: 24 callbacks suppressed [ 3299.948182] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.948206] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.955044] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.971197] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.976538] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.981792] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.987219] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.992600] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.997804] protocol 88fb is buggy, dev hsr_slave_1 [ 3300.588249] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.188176] net_ratelimit: 25 callbacks suppressed [ 3306.188185] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.188245] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.193184] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.198316] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.213709] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.218871] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.223932] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.229276] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.234333] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.828187] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.428175] net_ratelimit: 24 callbacks suppressed [ 3312.428184] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.428219] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.433189] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.438332] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.453319] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.458472] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.463539] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.468939] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.474041] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.068200] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.668169] net_ratelimit: 23 callbacks suppressed [ 3318.668177] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.668205] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.673223] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.688530] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.693580] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.698886] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.703951] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.709164] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.714870] protocol 88fb is buggy, dev hsr_slave_1 [ 3319.308222] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.908174] net_ratelimit: 23 callbacks suppressed [ 3324.908182] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.908220] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.913231] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.918379] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.933481] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.938671] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.943739] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.948876] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.953946] protocol 88fb is buggy, dev hsr_slave_1 [ 3325.548230] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.148165] net_ratelimit: 23 callbacks suppressed [ 3331.148174] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.148214] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.153174] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.158394] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.173812] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.178951] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.184033] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.189178] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.194246] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.788216] protocol 88fb is buggy, dev hsr_slave_0 [ 3333.788909] INFO: task syz-executor.2:7172 blocked for more than 140 seconds. [ 3333.796340] Not tainted 4.19.34 #2 [ 3333.809358] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3333.817385] syz-executor.2 D28216 7172 18849 0x00000004 [ 3333.828084] Call Trace: [ 3333.830802] __schedule+0x817/0x1d00 [ 3333.834612] ? __mutex_lock+0x721/0x1300 [ 3333.844890] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3333.850288] ? kasan_check_read+0x11/0x20 [ 3333.855080] schedule+0x92/0x1c0 [ 3333.865061] schedule_preempt_disabled+0x13/0x20 [ 3333.871869] __mutex_lock+0x726/0x1300 [ 3333.875775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3333.887356] ? vhost_net_stop_vq+0x2d/0x120 [ 3333.892076] ? mutex_trylock+0x1e0/0x1e0 [ 3333.896150] ? kasan_check_write+0x14/0x20 [ 3333.906128] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 3333.911299] ? wait_for_completion+0x440/0x440 [ 3333.915902] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3333.927153] mutex_lock_nested+0x16/0x20 [ 3333.934081] ? mutex_lock_nested+0x16/0x20 [ 3333.950838] vhost_net_stop_vq+0x2d/0x120 [ 3333.955019] ? vhost_net_open+0x730/0x730 [ 3333.964830] vhost_net_release+0x5d/0x190 [ 3333.972063] __fput+0x2df/0x8b0 [ 3333.975363] ____fput+0x16/0x20 [ 3333.981667] task_work_run+0x14a/0x1c0 [ 3333.985591] exit_to_usermode_loop+0x273/0x2c0 [ 3333.993911] do_syscall_64+0x52d/0x610 [ 3333.997828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3334.006762] RIP: 0033:0x4129e1 [ 3334.013036] Code: bb c8 00 00 00 ff 15 1e 6e 24 00 85 c0 89 c5 0f 85 7e fc ff ff e9 32 ff ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 48 <89> 5c 24 d0 4c 89 6c 24 e8 48 89 d3 48 89 6c 24 d8 4c 89 64 24 e0 [ 3334.038914] RSP: 002b:00007ffdc487d500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3334.046665] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1 [ 3334.059877] RDX: 0000001b2dc20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3334.067261] RBP: 0000000000740b28 R08: 00000000ffc1511e R09: 00000000ffc15122 [ 3334.078571] R10: 00007ffdc487d5d0 R11: 0000000000000293 R12: 0000000000000001 [ 3334.085866] R13: 0000000000307b15 R14: 0000000000307b42 R15: 000000000073bf0c [ 3334.097902] [ 3334.097902] Showing all locks held in the system: [ 3334.105553] 1 lock held by khungtaskd/1034: [ 3334.115438] #0: 00000000c7f66dca (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 3334.126399] 1 lock held by rsyslogd/7561: [ 3334.135291] #0: 00000000a93f2491 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 3334.144612] 2 locks held by getty/7684: [ 3334.153386] #0: 00000000f415711f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.163082] #1: 00000000b04fe621 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.176999] 2 locks held by getty/7685: [ 3334.182150] #0: 00000000e60c63da (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.195173] #1: 00000000ad24612a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.205674] 2 locks held by getty/7686: [ 3334.214309] #0: 0000000041271f4f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.224419] #1: 000000002349e9e4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.238616] 2 locks held by getty/7687: [ 3334.242789] #0: 000000004c19d1a3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.257680] #1: 00000000993d0c4f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.267959] 2 locks held by getty/7688: [ 3334.276809] #0: 00000000960ad9d5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.286616] #1: 00000000c990f588 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.301528] 2 locks held by getty/7689: [ 3334.305869] #0: 00000000cfa7d7bb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.316380] #1: 0000000038d31605 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.331111] 2 locks held by getty/7690: [ 3334.335105] #0: 000000008a5fc3f7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3334.345493] #1: 000000000fb8b57e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 3334.362418] 1 lock held by syz-executor.2/7172: [ 3334.367162] #0: 0000000089ab3a04 (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120 [ 3334.376832] 1 lock held by vhost-7211/7218: [ 3334.386896] [ 3334.389733] ============================================= [ 3334.389733] [ 3334.396779] NMI backtrace for cpu 1 [ 3334.400523] CPU: 1 PID: 1034 Comm: khungtaskd Not tainted 4.19.34 #2 [ 3334.407014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3334.416446] Call Trace: [ 3334.419044] dump_stack+0x172/0x1f0 [ 3334.422693] nmi_cpu_backtrace.cold+0x63/0xa4 [ 3334.427274] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 3334.432213] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 3334.437504] arch_trigger_cpumask_backtrace+0x14/0x20 [ 3334.442720] watchdog+0x9c6/0xec0 [ 3334.446275] kthread+0x357/0x430 [ 3334.449645] ? reset_hung_task_detector+0x30/0x30 [ 3334.454586] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 3334.460046] ret_from_fork+0x3a/0x50 [ 3334.463871] Sending NMI from CPU 1 to CPUs 0: [ 3334.468824] NMI backtrace for cpu 0 [ 3334.468829] CPU: 0 PID: 7218 Comm: vhost-7211 Not tainted 4.19.34 #2 [ 3334.468835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3334.468839] RIP: 0010:iotlb_access_ok+0x416/0x540 [ 3334.468849] Code: 38 4c 89 e6 48 8b 7d c8 4d 89 ee e8 a4 3e 39 fc 4d 29 e6 4c 39 65 c8 74 35 e8 76 3d 39 fc 4c 01 75 d0 4c 8b 75 a8 48 8b 5d d0 <4c> 89 f7 48 89 de e8 7f 3e 39 fc 49 39 de 0f 86 31 ff ff ff 4d 89 [ 3334.468853] RSP: 0018:ffff8882126b7aa0 EFLAGS: 00000246 [ 3334.468860] RAX: ffff888089f5a600 RBX: 0000000000000000 RCX: ffffffff8531fa0e [ 3334.468865] RDX: 0000000000000000 RSI: ffffffff8531f9ca RDI: 0000000000000006 [ 3334.468869] RBP: ffff8882126b7b28 R08: ffff888089f5a600 R09: ffffed10420441a8 [ 3334.468874] R10: ffff8882126b7b60 R11: ffff888210220d3b R12: 0000000000000010 [ 3334.468879] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 3334.468884] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 3334.468889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3334.468893] CR2: ffffffffff600400 CR3: 0000000055fff000 CR4: 00000000001406f0 [ 3334.468898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3334.468903] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3334.468905] Call Trace: [ 3334.468908] vq_iotlb_prefetch+0x114/0x230 [ 3334.468911] handle_rx+0x13e/0x1a60 [ 3334.468915] ? finish_task_switch+0x146/0x790 [ 3334.468918] ? find_held_lock+0x35/0x130 [ 3334.468922] ? finish_task_switch+0x146/0x790 [ 3334.468925] ? _raw_spin_unlock_irq+0x28/0x90 [ 3334.468929] ? finish_task_switch+0x146/0x790 [ 3334.468932] ? _raw_spin_unlock_irq+0x28/0x90 [ 3334.468935] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3334.468939] ? peek_head_len+0x940/0x940 [ 3334.468942] ? trace_hardirqs_on+0x67/0x230 [ 3334.468945] ? kasan_check_read+0x11/0x20 [ 3334.468949] ? _raw_spin_unlock_irq+0x5e/0x90 [ 3334.468953] ? perf_trace_sched_stat_template+0x140/0x570 [ 3334.468956] ? __switch_to_asm+0x34/0x70 [ 3334.468959] ? __switch_to_asm+0x40/0x70 [ 3334.468963] ? __schedule+0x81f/0x1d00 [ 3334.468966] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 3334.468969] handle_rx_net+0x19/0x20 [ 3334.468973] vhost_worker+0x2a2/0x4a0 [ 3334.468976] ? vhost_flush_work+0x20/0x20 [ 3334.468980] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3334.468983] ? __kthread_parkme+0xfb/0x1b0 [ 3334.468986] kthread+0x357/0x430 [ 3334.468989] ? vhost_flush_work+0x20/0x20 [ 3334.468993] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 3334.468996] ret_from_fork+0x3a/0x50 [ 3334.476408] Kernel panic - not syncing: hung_task: blocked tasks [ 3334.717346] CPU: 1 PID: 1034 Comm: khungtaskd Not tainted 4.19.34 #2 [ 3334.723928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3334.733459] Call Trace: [ 3334.736254] dump_stack+0x172/0x1f0 [ 3334.739891] panic+0x263/0x51d [ 3334.743094] ? __warn_printk+0xf3/0xf3 [ 3334.746991] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 3334.752135] ? ___preempt_schedule+0x16/0x18 [ 3334.756637] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 3334.762179] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 3334.768599] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 3334.774057] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 3334.779698] watchdog+0x9d7/0xec0 [ 3334.783166] kthread+0x357/0x430 [ 3334.786543] ? reset_hung_task_detector+0x30/0x30 [ 3334.791477] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 3334.796939] ret_from_fork+0x3a/0x50 [ 3334.802059] Kernel Offset: disabled [ 3334.805891] Rebooting in 86400 seconds..