[ 127.900629][ T41] audit: type=1400 audit(1595205983.474:41): avc: denied { map } for pid=9087 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:25548' (ECDSA) to the list of known hosts. [ 130.507017][ T41] audit: type=1400 audit(1595205986.084:42): avc: denied { map } for pid=9099 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/20 00:46:26 fuzzer started 2020/07/20 00:46:26 dialing manager at 10.0.2.10:41673 2020/07/20 00:46:27 syscalls: 3205 2020/07/20 00:46:27 code coverage: enabled 2020/07/20 00:46:27 comparison tracing: enabled 2020/07/20 00:46:27 extra coverage: enabled 2020/07/20 00:46:27 setuid sandbox: enabled 2020/07/20 00:46:27 namespace sandbox: enabled 2020/07/20 00:46:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/20 00:46:27 fault injection: enabled 2020/07/20 00:46:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/20 00:46:27 net packet injection: enabled 2020/07/20 00:46:27 net device setup: enabled 2020/07/20 00:46:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/20 00:46:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/20 00:46:27 USB emulation: enabled [ 131.479718][ T41] audit: type=1400 audit(1595205987.054:43): avc: denied { integrity } for pid=9115 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 00:47:07 executing program 0: [ 171.961627][ T41] audit: type=1400 audit(1595206027.534:44): avc: denied { map } for pid=9121 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 00:47:07 executing program 1: prctl$PR_MCE_KILL_GET(0x22) socket$inet6_sctp(0xa, 0x0, 0x84) [ 172.720957][ T9122] IPVS: ftp: loaded support on port[0] = 21 00:47:08 executing program 2: r0 = socket(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) [ 172.926427][ T9124] IPVS: ftp: loaded support on port[0] = 21 [ 173.060197][ T9122] chnl_net:caif_netlink_parms(): no params data found 00:47:08 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) [ 173.208158][ T9127] IPVS: ftp: loaded support on port[0] = 21 [ 173.246670][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 173.302958][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.316555][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.335442][ T9122] device bridge_slave_0 entered promiscuous mode [ 173.360172][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.372810][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.387284][ T9122] device bridge_slave_1 entered promiscuous mode [ 173.427890][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.458392][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.486274][ T9133] IPVS: ftp: loaded support on port[0] = 21 [ 173.511601][ T9122] team0: Port device team_slave_0 added [ 173.534527][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.548058][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.561870][ T9124] device bridge_slave_0 entered promiscuous mode [ 173.577095][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.590832][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.604601][ T9124] device bridge_slave_1 entered promiscuous mode [ 173.619564][ T9122] team0: Port device team_slave_1 added [ 173.657116][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.669504][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.713137][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.735651][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.747561][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.794755][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.820362][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.842335][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.877046][ T9124] team0: Port device team_slave_0 added [ 173.889756][ T9124] team0: Port device team_slave_1 added [ 173.976822][ T9122] device hsr_slave_0 entered promiscuous mode [ 174.065003][ T9122] device hsr_slave_1 entered promiscuous mode [ 174.166098][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.176970][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.217132][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.277872][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.297243][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.408595][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.492491][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 174.566928][ T9124] device hsr_slave_0 entered promiscuous mode [ 174.624084][ T9124] device hsr_slave_1 entered promiscuous mode [ 174.694026][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.709187][ T9124] Cannot create hsr debugfs directory [ 174.894777][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.913316][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.933305][ T9127] device bridge_slave_0 entered promiscuous mode [ 174.946826][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 174.968422][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.981287][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.995142][ T9127] device bridge_slave_1 entered promiscuous mode [ 175.088343][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.122908][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.169240][ T9127] team0: Port device team_slave_0 added [ 175.198467][ T9127] team0: Port device team_slave_1 added [ 175.203069][ T41] audit: type=1400 audit(1595206030.774:45): avc: denied { create } for pid=9122 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.242615][ T9122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.262085][ T41] audit: type=1400 audit(1595206030.774:46): avc: denied { write } for pid=9122 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.321003][ T41] audit: type=1400 audit(1595206030.774:47): avc: denied { read } for pid=9122 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.382676][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.396712][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.457542][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.510433][ T9122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.576879][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.588906][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.634745][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.657431][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.670181][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.683852][ T9133] device bridge_slave_0 entered promiscuous mode [ 175.697435][ T9122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.806104][ T9122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.910287][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.925645][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.940805][ T9133] device bridge_slave_1 entered promiscuous mode [ 175.980761][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.001969][ T9133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.019729][ T9124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.125920][ T9127] device hsr_slave_0 entered promiscuous mode [ 176.195532][ T9127] device hsr_slave_1 entered promiscuous mode [ 176.263717][ T9127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.278002][ T9127] Cannot create hsr debugfs directory [ 176.297629][ T9124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.371352][ T9124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.471261][ T9133] team0: Port device team_slave_0 added [ 176.482558][ T9124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.558778][ T9133] team0: Port device team_slave_1 added [ 176.598615][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.610090][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.649815][ T9133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.678212][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.689802][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.732523][ T9133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.916247][ T9133] device hsr_slave_0 entered promiscuous mode [ 176.973952][ T9133] device hsr_slave_1 entered promiscuous mode [ 177.063750][ T9133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.077698][ T9133] Cannot create hsr debugfs directory [ 177.147174][ T9127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.217037][ T9127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.278304][ T9127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.369306][ T9127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.501623][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.538492][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.561137][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.579036][ T9133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.651313][ T9133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.737281][ T9133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.841530][ T9133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.949811][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.979964][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.009576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.028955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.044754][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.059125][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.087256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.107278][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.124026][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.139639][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.154581][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.167844][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.181067][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.207452][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.232530][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.247962][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.263392][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.276817][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.294735][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.326062][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.341947][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.358855][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.377223][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.391589][ T2856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.406001][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.438853][ T9124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.462619][ T9124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.505209][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.523162][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.545323][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.560797][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.576297][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.592025][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.613389][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.639048][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.658257][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.672833][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.689176][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.703996][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.719690][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.736494][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.755650][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.772664][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.789690][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.806536][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.822478][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.851341][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.880428][ T9122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.916261][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.942115][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.976013][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.990850][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.012631][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.029581][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.048095][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.062517][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.082086][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.096204][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.110904][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.122822][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.137943][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.152000][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.165141][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.183426][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.206895][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.226490][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.242461][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.258703][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.271935][ T2856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.285724][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.300110][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.316716][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.333437][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.348023][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.366494][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.385355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.401190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.416843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.432579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.464255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.484223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.500633][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.514092][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.528364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.544204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.561091][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.577677][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.592784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.608268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.623251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.640759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.661270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.684391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.709946][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.729564][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.763988][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.778866][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.797449][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.811382][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.826137][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.840572][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.862962][ T9127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.889145][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.903302][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.916968][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.931030][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.962696][ T9124] device veth0_vlan entered promiscuous mode [ 179.979485][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.994514][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.009903][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.029089][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.058024][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.076445][ T9122] device veth0_vlan entered promiscuous mode [ 180.087542][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.100593][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.113998][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.127631][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.141345][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.153755][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.169624][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.182807][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.199586][ T9124] device veth1_vlan entered promiscuous mode [ 180.227392][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.250991][ T9122] device veth1_vlan entered promiscuous mode [ 180.276211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.295751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.321815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.340954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.355277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.369317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.391812][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.420228][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.446660][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.485782][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.500680][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.523872][ T9124] device veth0_macvtap entered promiscuous mode [ 180.541332][ T9124] device veth1_macvtap entered promiscuous mode [ 180.555510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.569463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.583342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.596401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.611260][ T9122] device veth0_macvtap entered promiscuous mode [ 180.631374][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.643947][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.655810][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.668549][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.680424][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.693798][ T9122] device veth1_macvtap entered promiscuous mode [ 180.704666][ T9127] device veth0_vlan entered promiscuous mode [ 180.716300][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.727337][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.739674][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.765491][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.777534][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.796430][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.811639][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.822958][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.834923][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.845707][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.857980][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.874500][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.886234][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.904862][ T9133] device veth0_vlan entered promiscuous mode [ 180.927815][ T9127] device veth1_vlan entered promiscuous mode [ 180.948814][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.967716][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.991436][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.009477][ T9133] device veth1_vlan entered promiscuous mode [ 181.025424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.039931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.074209][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.092686][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.111782][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.132545][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.149317][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.448600][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.485727][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.510194][ T9133] device veth0_macvtap entered promiscuous mode [ 181.591018][ T41] audit: type=1400 audit(1595206037.164:48): avc: denied { associate } for pid=9124 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 181.661309][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.683206][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.698499][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.716627][ T9127] device veth0_macvtap entered promiscuous mode [ 181.945066][ T9133] device veth1_macvtap entered promiscuous mode [ 181.959715][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.961897][ T9124] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 181.976205][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.047904][ T9127] device veth1_macvtap entered promiscuous mode [ 182.159684][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:47:17 executing program 0: [ 182.192496][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.231722][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.262603][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:47:17 executing program 0: [ 182.294320][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.325074][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:47:17 executing program 0: [ 182.350754][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.378068][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:47:18 executing program 0: [ 182.405604][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.432720][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:47:18 executing program 0: [ 182.460586][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.489838][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.518284][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 00:47:18 executing program 0: [ 182.539923][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.559811][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.585906][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.607491][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.631973][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.649139][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.670564][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.689392][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.709784][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.738350][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.757387][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.781153][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.804524][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.825664][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.846235][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.860582][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.875675][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.892664][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.906029][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:47:19 executing program 1: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 0: 00:47:19 executing program 2: 00:47:19 executing program 0: 00:47:19 executing program 1: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:19 executing program 1: 00:47:19 executing program 2: [ 183.752525][ T9202] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 00:47:19 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 2: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:19 executing program 3: 00:47:19 executing program 2: 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 3: 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 3: 00:47:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:19 executing program 2: 00:47:19 executing program 1: 00:47:19 executing program 3: 00:47:19 executing program 2: 00:47:19 executing program 1: 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:19 executing program 3: 00:47:19 executing program 1: 00:47:19 executing program 1: 00:47:19 executing program 2: 00:47:20 executing program 3: 00:47:20 executing program 2: 00:47:20 executing program 3: 00:47:20 executing program 1: 00:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:20 executing program 2: 00:47:20 executing program 3: 00:47:20 executing program 1: 00:47:20 executing program 2: 00:47:20 executing program 1: 00:47:20 executing program 3: 00:47:20 executing program 1: 00:47:20 executing program 2: 00:47:20 executing program 1: 00:47:20 executing program 3: 00:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:20 executing program 2: 00:47:20 executing program 1: 00:47:20 executing program 1: 00:47:20 executing program 2: 00:47:20 executing program 3: 00:47:20 executing program 2: 00:47:20 executing program 3: 00:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:20 executing program 1: 00:47:20 executing program 2: 00:47:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0xf, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x2e, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x7b37, 0x0, 0x48c4]}, 0x40) 00:47:20 executing program 1: 00:47:20 executing program 2: [ 184.918803][ T41] audit: type=1400 audit(1595206040.494:49): avc: denied { map_create } for pid=9330 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 00:47:20 executing program 2: 00:47:20 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) [ 184.967886][ T41] audit: type=1400 audit(1595206040.494:50): avc: denied { map_read map_write } for pid=9330 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 00:47:20 executing program 3: 00:47:20 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/39) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000080), 0x0) 00:47:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) socket$inet(0x2, 0xa, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:20 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/39) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000080), 0x0) 00:47:20 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/39) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000080), 0x0) [ 185.167137][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.217553][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.314646][ T2856] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.573841][ T2856] usb 6-1: Using ep0 maxpacket: 8 [ 185.714605][ T2856] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 185.894575][ T2856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.894587][ T2856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.894596][ T2856] usb 6-1: Product: syz [ 185.894604][ T2856] usb 6-1: Manufacturer: syz [ 185.894612][ T2856] usb 6-1: SerialNumber: syz [ 185.926198][ T9340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 185.989471][ T2856] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 186.192147][ T23] usb 6-1: USB disconnect, device number 2 [ 186.964084][ T4334] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.223985][ T4334] usb 6-1: Using ep0 maxpacket: 8 [ 187.344002][ T4334] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 187.523994][ T4334] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.540807][ T4334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.555400][ T4334] usb 6-1: Product: syz [ 187.563229][ T4334] usb 6-1: Manufacturer: syz [ 187.572650][ T4334] usb 6-1: SerialNumber: syz [ 187.605286][ T9340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 187.625085][ T4334] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 187.834039][ T9151] usb 6-1: USB disconnect, device number 3 00:47:23 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/39) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000080), 0x0) 00:47:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) socket$inet(0x2, 0xa, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @mcast1, @mcast2}) 00:47:23 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/39) 00:47:23 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 187.912720][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 00:47:23 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 187.985473][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) socket$inet(0x2, 0xa, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:23 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:23 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) [ 188.054986][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 00:47:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:23 executing program 1: ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 188.157186][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 1: ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd29}]}, 0x1c}}, 0x0) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:23 executing program 1: ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5c, 0x0}) [ 188.227146][ T41] audit: type=1400 audit(1595206043.804:51): avc: denied { create } for pid=9414 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 188.285167][ T41] audit: type=1400 audit(1595206043.804:52): avc: denied { write } for pid=9414 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 188.308184][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 1: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:23 executing program 1: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 188.402765][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:24 executing program 1: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:24 executing program 1: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 188.469945][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.563792][ T9152] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 188.814032][ T9152] usb 7-1: Using ep0 maxpacket: 32 [ 188.984317][ T9152] usb 7-1: unable to get BOS descriptor or descriptor too short [ 189.074490][ T9152] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 189.273934][ T9152] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 189.293094][ T9152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.310286][ T9152] usb 7-1: Product: syz [ 189.319685][ T9152] usb 7-1: Manufacturer: syz [ 189.329554][ T9152] usb 7-1: SerialNumber: syz [ 189.578232][ T9152] usb 7-1: USB disconnect, device number 2 00:47:25 executing program 1: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:25 executing program 2: process_vm_readv(0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/138, 0x8a}], 0x1, 0x0, 0x0, 0x0) 00:47:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:25 executing program 1: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x10000, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:25 executing program 2: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) [ 190.184953][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:25 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) [ 190.229001][ T41] audit: type=1400 audit(1595206045.804:53): avc: denied { open } for pid=9459 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 00:47:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:25 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) 00:47:25 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, 0x0) [ 190.296038][ T41] audit: type=1400 audit(1595206045.804:54): avc: denied { perfmon } for pid=9459 comm="syz-executor.2" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 00:47:25 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x0, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 190.330043][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.371184][ T41] audit: type=1400 audit(1595206045.804:55): avc: denied { kernel } for pid=9459 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 190.433185][ T41] audit: type=1400 audit(1595206045.804:56): avc: denied { confidentiality } for pid=9459 comm="syz-executor.2" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 00:47:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:26 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x0, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) 00:47:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x39, 0x0, &(0x7f0000001000)) 00:47:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:26 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x0, "fabcccf72277a30733eda8bf574908902562f600fed2cf17a50fb0dd72502bad"}) [ 190.552458][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:26 executing program 1: semctl$SEM_INFO(0x0, 0x0, 0x12, &(0x7f00000000c0)=""/39) [ 190.609483][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a6868170900be808376"], 0x0}, 0x0) 00:47:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:26 executing program 2: setitimer(0x0, 0x0, &(0x7f0000000040)) [ 190.672438][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 190.691184][ T9505] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 00:47:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:26 executing program 2: setitimer(0x0, 0x0, &(0x7f0000000040)) [ 190.758401][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f0000000040)={@mcast2, @mcast1, @mcast2}) 00:47:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 190.812149][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.933754][ T28] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.194146][ T28] usb 6-1: Using ep0 maxpacket: 16 [ 191.333894][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.366865][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.395486][ T28] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.428702][ T28] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.456173][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.489068][ T28] usb 6-1: config 0 descriptor?? [ 191.990094][ T28] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 192.018514][ T28] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 192.073137][ T28] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input5 [ 192.201727][ T28] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 192.247311][ T28] usb 6-1: USB disconnect, device number 4 [ 192.963912][ T9151] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 193.224166][ T9151] usb 6-1: Using ep0 maxpacket: 16 [ 193.363907][ T9151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.398115][ T9151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.423339][ T9151] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.455323][ T9151] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.476733][ T9151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.498351][ T9151] usb 6-1: config 0 descriptor?? 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 193.707890][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 193.743951][ T9151] usbhid 6-1:0.0: can't add hid device: -71 [ 193.744141][ T9151] usbhid: probe of 6-1:0.0 failed with error -71 [ 193.745555][ T9151] usb 6-1: USB disconnect, device number 5 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 0: close(0xffffffffffffffff) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x9}]) 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 0: close(0xffffffffffffffff) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x9}]) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 0: close(0xffffffffffffffff) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x9}]) 00:47:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:30 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x805c4d65, 0x0) 00:47:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x805c4d65, 0x0) 00:47:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) 00:47:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 00:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 00:47:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/90, 0x5a) 00:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 00:47:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) socket$inet(0x2, 0xa, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 00:47:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:47:30 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/90, 0x5a) 00:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7, 0x200}) [ 194.883136][ T9681] ================================================================== [ 194.883632][ T9681] BUG: KASAN: vmalloc-out-of-bounds in bitfill_aligned+0x34a/0x400 [ 194.883632][ T9681] Write of size 8 at addr ffffc90009881000 by task syz-executor.2/9681 [ 194.883632][ T9681] [ 194.883632][ T9681] CPU: 0 PID: 9681 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 194.883632][ T9681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 194.883632][ T9681] Call Trace: [ 194.885415][ T9681] dump_stack+0x18f/0x20d [ 194.885415][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.885415][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.885415][ T9681] print_address_description.constprop.0.cold+0x5/0x436 [ 194.885415][ T9681] ? lockdep_hardirqs_off+0x66/0xa0 [ 194.885415][ T9681] ? vprintk_func+0x97/0x1a6 [ 194.885415][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.885415][ T9681] kasan_report.cold+0x1f/0x37 [ 194.885415][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.885415][ T9681] bitfill_aligned+0x34a/0x400 [ 194.885415][ T9681] sys_fillrect+0x408/0x7a0 [ 194.885415][ T9681] ? sys_fillrect+0x7a0/0x7a0 [ 194.885415][ T9681] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 194.885415][ T9681] bit_clear_margins+0x2d5/0x4a0 [ 194.885415][ T9681] ? bit_bmove+0x210/0x210 [ 194.885415][ T9681] ? fb_get_color_depth+0x11a/0x240 [ 194.885415][ T9681] fbcon_clear_margins+0x1d5/0x230 [ 194.885415][ T9681] fbcon_switch+0xb6e/0x16c0 [ 194.885415][ T9681] ? fbcon_scroll+0x3600/0x3600 [ 194.885415][ T9681] ? fbcon_cursor+0x52b/0x650 [ 194.885415][ T9681] ? kmalloc_array.constprop.0+0x20/0x20 [ 194.885415][ T9681] ? is_console_locked+0x5/0x10 [ 194.885415][ T9681] ? fbcon_set_origin+0x26/0x50 [ 194.885415][ T9681] redraw_screen+0x2ae/0x770 [ 194.885415][ T9681] ? vc_init+0x440/0x440 [ 194.885415][ T9681] ? fb_get_color_depth+0x11a/0x240 [ 194.885415][ T9681] ? fbcon_set_palette+0x3a8/0x490 [ 194.885415][ T9681] fbcon_modechanged+0x575/0x710 [ 194.885415][ T9681] fbcon_update_vcs+0x3a/0x50 [ 194.885415][ T9681] fb_set_var+0xae8/0xd60 [ 194.885415][ T9681] ? fb_blank+0x190/0x190 [ 194.885415][ T9681] ? lock_release+0x8d0/0x8d0 [ 194.885415][ T9681] ? lock_is_held_type+0xb0/0xe0 [ 194.885415][ T9681] ? do_fb_ioctl+0x2f2/0x6c0 [ 194.885415][ T9681] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 194.885415][ T9681] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 194.885415][ T9681] ? trace_hardirqs_on+0x5f/0x220 [ 194.885415][ T9681] do_fb_ioctl+0x33f/0x6c0 [ 194.885415][ T9681] ? fb_set_suspend+0x1a0/0x1a0 [ 194.885415][ T9681] ? tomoyo_execute_permission+0x470/0x470 [ 194.885415][ T9681] ? lock_is_held_type+0xb0/0xe0 [ 194.885415][ T9681] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 194.885415][ T9681] ? do_vfs_ioctl+0x27d/0x1090 [ 194.885415][ T9681] ? __fget_files+0x294/0x400 [ 194.885415][ T9681] fb_ioctl+0xdd/0x130 [ 194.885415][ T9681] ? do_fb_ioctl+0x6c0/0x6c0 [ 194.885415][ T9681] ksys_ioctl+0x11a/0x180 [ 194.885415][ T9681] __x64_sys_ioctl+0x6f/0xb0 [ 194.885415][ T9681] ? lockdep_hardirqs_on+0x6a/0xe0 [ 194.885415][ T9681] do_syscall_64+0x60/0xe0 [ 194.885415][ T9681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.885415][ T9681] RIP: 0033:0x45c049 [ 194.885415][ T9681] Code: Bad RIP value. [ 194.885415][ T9681] RSP: 002b:00007f21d3db9c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.885415][ T9681] RAX: ffffffffffffffda RBX: 00000000006fb3c0 RCX: 000000000045c049 [ 194.885415][ T9681] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 194.885415][ T9681] RBP: 00000000004a906e R08: 0000000000000000 R09: 0000000000000000 [ 194.885415][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000074bf00 [ 194.885415][ T9681] R13: 00007ffcaf1a90bf R14: 00007f21d3d9a000 R15: 0000000000000003 [ 194.885415][ T9681] [ 194.885415][ T9681] [ 194.885415][ T9681] Memory state around the buggy address: [ 194.885415][ T9681] ffffc90009880f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.885415][ T9681] ffffc90009880f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.885415][ T9681] >ffffc90009881000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 194.885415][ T9681] ^ [ 194.885415][ T9681] ffffc90009881080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 194.885415][ T9681] ffffc90009881100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 194.885415][ T9681] ================================================================== [ 194.885415][ T9681] Disabling lock debugging due to kernel taint [ 194.894380][ T9681] Kernel panic - not syncing: panic_on_warn set ... [ 194.894407][ T9681] CPU: 0 PID: 9681 Comm: syz-executor.2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 194.894413][ T9681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 194.894427][ T9681] Call Trace: [ 194.894687][ T9681] dump_stack+0x18f/0x20d [ 194.894698][ T9681] ? bitfill_aligned+0x310/0x400 [ 194.894739][ T9681] panic+0x2e3/0x75c [ 194.894749][ T9681] ? __warn_printk+0xf3/0xf3 [ 194.894760][ T9681] ? preempt_schedule_common+0x59/0xc0 [ 194.894769][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.894850][ T9681] ? preempt_schedule_thunk+0x16/0x18 [ 194.894867][ T9681] ? trace_hardirqs_on+0x55/0x220 [ 194.894876][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.894889][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.894902][ T9681] end_report+0x4d/0x53 [ 194.894913][ T9681] kasan_report.cold+0xd/0x37 [ 194.894925][ T9681] ? bitfill_aligned+0x34a/0x400 [ 194.894936][ T9681] bitfill_aligned+0x34a/0x400 [ 194.894948][ T9681] sys_fillrect+0x408/0x7a0 [ 194.894960][ T9681] ? sys_fillrect+0x7a0/0x7a0 [ 194.894980][ T9681] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 194.894993][ T9681] bit_clear_margins+0x2d5/0x4a0 [ 194.895004][ T9681] ? bit_bmove+0x210/0x210 [ 194.895017][ T9681] ? fb_get_color_depth+0x11a/0x240 [ 194.895028][ T9681] fbcon_clear_margins+0x1d5/0x230 [ 194.895039][ T9681] fbcon_switch+0xb6e/0x16c0 [ 194.895050][ T9681] ? fbcon_scroll+0x3600/0x3600 [ 194.895066][ T9681] ? fbcon_cursor+0x52b/0x650 [ 194.895078][ T9681] ? kmalloc_array.constprop.0+0x20/0x20 [ 194.895095][ T9681] ? is_console_locked+0x5/0x10 [ 194.895106][ T9681] ? fbcon_set_origin+0x26/0x50 [ 194.895120][ T9681] redraw_screen+0x2ae/0x770 [ 194.895131][ T9681] ? vc_init+0x440/0x440 [ 194.895150][ T9681] ? fb_get_color_depth+0x11a/0x240 [ 194.895162][ T9681] ? fbcon_set_palette+0x3a8/0x490 [ 194.895173][ T9681] fbcon_modechanged+0x575/0x710 [ 194.895185][ T9681] fbcon_update_vcs+0x3a/0x50 [ 194.895196][ T9681] fb_set_var+0xae8/0xd60 [ 194.895208][ T9681] ? fb_blank+0x190/0x190 [ 194.895220][ T9681] ? lock_release+0x8d0/0x8d0 [ 194.895231][ T9681] ? lock_is_held_type+0xb0/0xe0 [ 194.895243][ T9681] ? do_fb_ioctl+0x2f2/0x6c0 [ 194.895255][ T9681] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 194.895267][ T9681] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 194.895278][ T9681] ? trace_hardirqs_on+0x5f/0x220 [ 194.895293][ T9681] do_fb_ioctl+0x33f/0x6c0 [ 194.895369][ T9681] ? fb_set_suspend+0x1a0/0x1a0 [ 194.895384][ T9681] ? tomoyo_execute_permission+0x470/0x470 [ 194.895395][ T9681] ? lock_is_held_type+0xb0/0xe0 [ 194.895425][ T9681] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 194.895438][ T9681] ? do_vfs_ioctl+0x27d/0x1090 [ 194.895456][ T9681] ? __fget_files+0x294/0x400 [ 194.895467][ T9681] fb_ioctl+0xdd/0x130 [ 194.895479][ T9681] ? do_fb_ioctl+0x6c0/0x6c0 [ 194.895490][ T9681] ksys_ioctl+0x11a/0x180 [ 194.895498][ T9681] __x64_sys_ioctl+0x6f/0xb0 [ 194.895504][ T9681] ? lockdep_hardirqs_on+0x6a/0xe0 [ 194.895517][ T9681] do_syscall_64+0x60/0xe0 [ 194.895529][ T9681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.895539][ T9681] RIP: 0033:0x45c049 [ 194.895545][ T9681] Code: Bad RIP value. [ 194.895554][ T9681] RSP: 002b:00007f21d3db9c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.895570][ T9681] RAX: ffffffffffffffda RBX: 00000000006fb3c0 RCX: 000000000045c049 [ 194.895578][ T9681] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 194.895587][ T9681] RBP: 00000000004a906e R08: 0000000000000000 R09: 0000000000000000 [ 194.895595][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000074bf00 [ 194.895604][ T9681] R13: 00007ffcaf1a90bf R14: 00007f21d3d9a000 R15: 0000000000000003 [ 194.903598][ T9681] Kernel Offset: disabled [ 194.903598][ T9681] Rebooting in 86400 seconds..