[?25l[?1c7[ ok 8[?25h[?0c. [ 34.034719] audit: type=1800 audit(1555812520.746:33): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 34.057173] audit: type=1800 audit(1555812520.746:34): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.874819] random: sshd: uninitialized urandom read (32 bytes read) [ 38.177832] audit: type=1400 audit(1555812524.886:35): avc: denied { map } for pid=7168 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.243318] random: sshd: uninitialized urandom read (32 bytes read) [ 38.928648] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. [ 44.611832] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/21 02:08:51 fuzzer started [ 44.809960] audit: type=1400 audit(1555812531.516:36): avc: denied { map } for pid=7177 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.527492] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/21 02:08:54 dialing manager at 10.128.0.105:43303 2019/04/21 02:08:54 syscalls: 2434 2019/04/21 02:08:54 code coverage: enabled 2019/04/21 02:08:54 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/21 02:08:54 extra coverage: extra coverage is not supported by the kernel 2019/04/21 02:08:54 setuid sandbox: enabled 2019/04/21 02:08:54 namespace sandbox: enabled 2019/04/21 02:08:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/21 02:08:54 fault injection: enabled 2019/04/21 02:08:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/21 02:08:54 net packet injection: enabled 2019/04/21 02:08:54 net device setup: enabled [ 48.501221] random: crng init done 02:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000000000009d004"]) 02:10:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x87) accept$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) pipe(0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x2da5) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x16f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x144) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendto$inet6(r1, &(0x7f00000002c0)='\n', 0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x1ff) close(r1) 02:10:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xc01, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00OH\xd9M\xe2\x14\x15.\xdc\xde\x96\xa1\x9a\xd6\x912\x00\"\xa2\xbfL\xa2\xc0\xad\xb9ap\x1eR\x13\xcd\x97\x9d\a\xcc\x8dc\xb2\x8a\xe3K(\xf9\xd9\x1fe^qi[\x97\x87\xff\xff\x99\xde\xa4\x02\xc2\xfd\xce\xe5\xb7\x8a9/\n\xca\x05\xe5\x91\x97\xf4\x1cK8\x15\x81\x9d\xee\x96\x9d-\x18=\xae\x1e\r\xc3\x84\xd2\x87\x7f:(/\x0f\x9b\x85\xcc\xa4\x1b\xccO\x10\xd9\xa1\xf3\x16i\xcb\x9elKW\xe8\xf6\xe5\v\xde\x83\xa6\xe22\xec\x13W\x97\xdaN\xaf\xc5>\xb8\xd1\x8d\b%\x1c/\xfe\xaa\x04D\xac\xf2O\xff\xfe\xd9\x84\xfa\xa3\xb1]\bAoA\x18\x0eK\xa6\x17\x82Ff}%]jwrE\xb7 #v\x8cF\x90\x8f\"Kq\t', 0x0, 0x24000000) [ 170.398269] audit: type=1400 audit(1555812657.106:37): avc: denied { map } for pid=7177 comm="syz-fuzzer" path="/root/syzkaller-shm147740224" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 02:10:57 executing program 2: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) ftruncate(r0, 0x0) 02:10:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0x0, 0xffffffffffff0001}]}) 02:10:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101080, 0x5) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x7fff, 0x2, 0x0, 0x0, @msi={0x401, 0xffffffffffffb12c, 0x7fff}}, {0x200, 0x3, 0x0, 0x0, @msi={0x3, 0x3fa, 0x401}}]}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) [ 170.452791] audit: type=1400 audit(1555812657.166:38): avc: denied { map } for pid=7195 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13808 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 171.430286] IPVS: ftp: loaded support on port[0] = 21 [ 171.751480] chnl_net:caif_netlink_parms(): no params data found [ 171.758686] IPVS: ftp: loaded support on port[0] = 21 [ 171.818167] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.825208] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.832709] device bridge_slave_0 entered promiscuous mode [ 171.843287] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.849704] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.856816] device bridge_slave_1 entered promiscuous mode [ 171.884207] IPVS: ftp: loaded support on port[0] = 21 [ 171.893556] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.903390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.935224] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.942994] team0: Port device team_slave_0 added [ 171.951043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.958464] team0: Port device team_slave_1 added [ 171.970744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.985091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.072655] device hsr_slave_0 entered promiscuous mode [ 172.110508] device hsr_slave_1 entered promiscuous mode [ 172.164012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.171426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.233086] chnl_net:caif_netlink_parms(): no params data found [ 172.252136] IPVS: ftp: loaded support on port[0] = 21 [ 172.287916] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.294449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.301531] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.307907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.323690] chnl_net:caif_netlink_parms(): no params data found [ 172.399793] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.406429] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.413795] device bridge_slave_0 entered promiscuous mode [ 172.436067] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.442928] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.450070] device bridge_slave_1 entered promiscuous mode [ 172.467082] IPVS: ftp: loaded support on port[0] = 21 [ 172.493479] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.502916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.513954] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.521660] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.528741] device bridge_slave_0 entered promiscuous mode [ 172.535776] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.542339] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.549328] device bridge_slave_1 entered promiscuous mode [ 172.573128] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.581897] team0: Port device team_slave_0 added [ 172.608154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.616843] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.625883] team0: Port device team_slave_1 added [ 172.634499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.647074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.668284] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.683542] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 172.689754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.706037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.713962] team0: Port device team_slave_0 added [ 172.726557] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.734060] team0: Port device team_slave_1 added [ 172.745731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.754478] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.792818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.843439] device hsr_slave_0 entered promiscuous mode [ 172.880464] device hsr_slave_1 entered promiscuous mode [ 172.951086] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.958602] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.967711] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 172.982502] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.994080] IPVS: ftp: loaded support on port[0] = 21 [ 173.053053] device hsr_slave_0 entered promiscuous mode [ 173.100871] device hsr_slave_1 entered promiscuous mode [ 173.144510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.151749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.159141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.167047] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.184700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.192504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.204585] chnl_net:caif_netlink_parms(): no params data found [ 173.247549] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.254213] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.267124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.293882] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.300683] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.307817] device bridge_slave_0 entered promiscuous mode [ 173.319846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.328113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.335943] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.342472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.353563] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.364845] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.371692] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.378730] device bridge_slave_1 entered promiscuous mode [ 173.427258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.454735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.467244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.483788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.491781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.499380] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.505973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.517068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.533465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.552847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.568547] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.576020] team0: Port device team_slave_0 added [ 173.583410] chnl_net:caif_netlink_parms(): no params data found [ 173.595245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.605224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.613865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.621288] team0: Port device team_slave_1 added [ 173.633444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.641569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.649273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.657033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.668329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.676778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.694959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.704948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.721148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.731204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.738380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.769864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.778143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.786294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.794025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.805210] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.811391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.832935] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.839316] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.846952] device bridge_slave_0 entered promiscuous mode [ 173.854923] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.861401] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.868505] device bridge_slave_1 entered promiscuous mode [ 173.898119] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.909751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.928269] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.992409] device hsr_slave_0 entered promiscuous mode [ 174.030684] device hsr_slave_1 entered promiscuous mode [ 174.103169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.116685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.124150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.133493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.145931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.178690] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.196631] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.212850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.220451] team0: Port device team_slave_0 added [ 174.226345] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.233799] team0: Port device team_slave_1 added [ 174.243130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.250538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.260280] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.266359] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.280741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.341123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.347646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.384686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.388011] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 174.392897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.436539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.445788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.454071] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.460509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.463262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.476877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.499535] chnl_net:caif_netlink_parms(): no params data found [ 174.514128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.523225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.530643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.538040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 174.546868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.555451] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.562096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.572957] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.579941] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.602697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 02:11:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 174.644494] device hsr_slave_0 entered promiscuous mode [ 174.680551] device hsr_slave_1 entered promiscuous mode [ 174.735653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.742351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.753064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.763342] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.772178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 02:11:01 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1261, 0x0) 02:11:01 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x8}, 0x0) [ 174.784826] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.792892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.809895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.819338] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.825815] bridge0: port 1(bridge_slave_0) entered forwarding state 02:11:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB='\n']}) [ 174.843431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.852444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.879813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.896799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.912042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.919923] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.926428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.934190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.945279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.956739] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.967007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.979786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.989092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 174.997113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.005244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.020709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.036191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.052649] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.067782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.076138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.084248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.092217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.099431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.107021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.118314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.126146] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.133624] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.141232] device bridge_slave_0 entered promiscuous mode [ 175.149899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.163099] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.169242] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.177013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.181903] kvm: emulating exchange as write [ 175.186845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.199821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.211158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.222620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.233352] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.239873] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.247437] device bridge_slave_1 entered promiscuous mode [ 175.256209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.266882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.279292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.287779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.295380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 02:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x7b, 0x0, [0x40000001]}) [ 175.303039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.310746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.318174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.333470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.377730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.388048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.396306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.405382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.413620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.421347] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.421374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.423627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.441850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.471147] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.477452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.497296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.507993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.518026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.526155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.533895] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.540287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.554119] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.562105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.576315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.591498] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.603642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.619396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.632016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.649601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.661910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.674035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.683275] team0: Port device team_slave_0 added [ 175.691492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.702603] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.711460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.719559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.727782] team0: Port device team_slave_1 added [ 175.733613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.742646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.750810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.759575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.766993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.774145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.782211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.792852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.802201] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.808303] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.818676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.827624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.835543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.850930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.868544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.885757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.893791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.904830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.914953] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.921343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.932277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.941039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.955530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.966034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.976361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.988414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.996753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.009591] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.016458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.023944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.031692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.084385] device hsr_slave_0 entered promiscuous mode [ 176.121020] device hsr_slave_1 entered promiscuous mode [ 176.161619] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.168931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.187898] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.194705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.211821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.219732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.259914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.272419] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.280991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.292887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.309096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.321071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.329800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.347910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.357965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.369189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.379510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.387805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.398196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.412749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.423083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.444437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.456890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.469804] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.477549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.488082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.496654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.517424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.545902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.558615] 8021q: adding VLAN 0 to HW filter on device bond0 02:11:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) [ 176.584610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.605558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.614452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.626535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.637072] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.649928] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.687394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.699163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.709056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.718370] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.724887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.739616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.752757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.762997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.775120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.783214] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.789674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.803026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.816227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.829315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.858418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.868251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.878012] audit: type=1804 audit(1555812663.586:39): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir458035688/syzkaller.E9IEWv/0/memory.events" dev="sda1" ino=16526 res=1 [ 176.881038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.919077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.927659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.938308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.953939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.962930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.973907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.982680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.992221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.002762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.016203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.025320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.038212] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.046667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.074998] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.096386] 8021q: adding VLAN 0 to HW filter on device batadv0 02:11:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xc01, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00OH\xd9M\xe2\x14\x15.\xdc\xde\x96\xa1\x9a\xd6\x912\x00\"\xa2\xbfL\xa2\xc0\xad\xb9ap\x1eR\x13\xcd\x97\x9d\a\xcc\x8dc\xb2\x8a\xe3K(\xf9\xd9\x1fe^qi[\x97\x87\xff\xff\x99\xde\xa4\x02\xc2\xfd\xce\xe5\xb7\x8a9/\n\xca\x05\xe5\x91\x97\xf4\x1cK8\x15\x81\x9d\xee\x96\x9d-\x18=\xae\x1e\r\xc3\x84\xd2\x87\x7f:(/\x0f\x9b\x85\xcc\xa4\x1b\xccO\x10\xd9\xa1\xf3\x16i\xcb\x9elKW\xe8\xf6\xe5\v\xde\x83\xa6\xe22\xec\x13W\x97\xdaN\xaf\xc5>\xb8\xd1\x8d\b%\x1c/\xfe\xaa\x04D\xac\xf2O\xff\xfe\xd9\x84\xfa\xa3\xb1]\bAoA\x18\x0eK\xa6\x17\x82Ff}%]jwrE\xb7 #v\x8cF\x90\x8f\"Kq\t', 0x0, 0x24000000) 02:11:04 executing program 0: 02:11:04 executing program 2: [ 177.705812] audit: type=1804 audit(1555812664.416:40): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir458035688/syzkaller.E9IEWv/1/memory.events" dev="sda1" ino=16523 res=1 [ 178.167863] mmap: syz-executor.4 (7330) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 178.200867] hrtimer: interrupt took 26900 ns 02:11:05 executing program 4: 02:11:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000440)=@dstopts={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x800) 02:11:05 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\n', 0x131d1561) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="0adc1f123c123f319bd070") 02:11:05 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:05 executing program 0: 02:11:05 executing program 5: 02:11:05 executing program 1: 02:11:05 executing program 5: 02:11:05 executing program 4: 02:11:05 executing program 1: 02:11:05 executing program 4: 02:11:05 executing program 5: 02:11:05 executing program 0: 02:11:05 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:05 executing program 3: 02:11:05 executing program 5: 02:11:05 executing program 1: 02:11:05 executing program 0: 02:11:05 executing program 4: 02:11:05 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:05 executing program 5: 02:11:05 executing program 0: 02:11:05 executing program 4: 02:11:05 executing program 3: 02:11:05 executing program 1: 02:11:05 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:05 executing program 5: 02:11:05 executing program 4: 02:11:05 executing program 0: 02:11:05 executing program 1: 02:11:05 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:05 executing program 3: 02:11:06 executing program 4: 02:11:06 executing program 5: 02:11:06 executing program 1: 02:11:06 executing program 0: 02:11:06 executing program 3: 02:11:06 executing program 5: 02:11:06 executing program 4: 02:11:06 executing program 1: 02:11:06 executing program 0: 02:11:06 executing program 3: 02:11:06 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:06 executing program 5: 02:11:06 executing program 4: 02:11:06 executing program 3: 02:11:06 executing program 1: 02:11:06 executing program 0: 02:11:06 executing program 5: 02:11:06 executing program 3: 02:11:06 executing program 0: 02:11:06 executing program 4: 02:11:06 executing program 1: 02:11:07 executing program 3: 02:11:07 executing program 5: 02:11:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c02, 0x0) 02:11:07 executing program 4: 02:11:07 executing program 0: 02:11:07 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:07 executing program 3: 02:11:07 executing program 3: 02:11:07 executing program 0: 02:11:07 executing program 5: 02:11:07 executing program 4: 02:11:07 executing program 1: 02:11:07 executing program 4: 02:11:07 executing program 3: 02:11:08 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:08 executing program 0: 02:11:08 executing program 5: 02:11:08 executing program 1: 02:11:08 executing program 4: 02:11:08 executing program 3: 02:11:08 executing program 0: 02:11:08 executing program 3: 02:11:08 executing program 4: 02:11:08 executing program 1: 02:11:08 executing program 5: 02:11:08 executing program 0: 02:11:09 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(r0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:09 executing program 3: 02:11:09 executing program 5: 02:11:09 executing program 1: 02:11:09 executing program 4: 02:11:09 executing program 0: 02:11:09 executing program 0: 02:11:09 executing program 1: 02:11:09 executing program 3: 02:11:09 executing program 5: 02:11:09 executing program 4: 02:11:09 executing program 0: 02:11:09 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:09 executing program 1: 02:11:09 executing program 3: 02:11:09 executing program 5: 02:11:09 executing program 4: 02:11:09 executing program 0: 02:11:09 executing program 5: 02:11:09 executing program 3: 02:11:09 executing program 4: 02:11:09 executing program 1: 02:11:09 executing program 0: 02:11:09 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:09 executing program 4: 02:11:09 executing program 1: 02:11:09 executing program 3: 02:11:09 executing program 0: 02:11:09 executing program 5: 02:11:09 executing program 4: 02:11:09 executing program 3: r0 = msgget(0x3, 0x10) msgsnd(r0, &(0x7f0000000200)={0x1}, 0xfffffffffffffea8, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = open(0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x20}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)=ANY=[@ANYBLOB='D'], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) msgctl$IPC_RMID(0x0, 0x0) 02:11:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x5411) 02:11:09 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 02:11:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000280)) 02:11:10 executing program 1: 02:11:10 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:10 executing program 4: 02:11:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000004c0)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000640)=0x7, 0x4) pivot_root(0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 02:11:10 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000040)=""/49, 0x31}], 0x241}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 02:11:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 02:11:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 02:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a06760661ff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 02:11:10 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xa) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:11:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000000), &(0x7f0000001080)=0x3ab) 02:11:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="09b230f0d93cc7e4cce648b6280cadab"}, 0x1c) 02:11:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 02:11:10 executing program 4: add_key$user(&(0x7f0000001100)='user\x00', &(0x7f00000010c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) [ 184.114305] sock: process `syz-executor.1' is using obsolete getsockopt SO_BSDCOMPAT [ 184.138287] audit: type=1400 audit(1555812670.846:41): avc: denied { name_bind } for pid=7600 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 184.218644] audit: type=1400 audit(1555812670.846:42): avc: denied { node_bind } for pid=7600 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 184.258039] audit: type=1400 audit(1555812670.896:43): avc: denied { name_connect } for pid=7600 comm="syz-executor.3" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:11:11 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x7) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f00000002c0)="ce0410000013000000911efc1fb35c22cc6dc37916215963e155", 0x1a, 0x0, 0x0, 0x0) 02:11:11 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5e831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4ca31, 0xffffffffffffffff, 0x0) 02:11:11 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 02:11:11 executing program 3: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'v[th1_\x10\x00\x00\x00\x00\x02 \x00', 0x8}, 0xfffffffffffffd75) ioctl(r0, 0x8916, &(0x7f0000000000)) 02:11:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="9f13c09991e22cf34bbc61f207a53f5631e4cb91d3a6aed64da21f86f171d48c51aa240b6b01c19def1d6d6bfe804bc420b17ff65ac1") ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:11:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x0) 02:11:11 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:11 executing program 0: msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0xe0000, 0x0) getdents64(r0, &(0x7f00000001c0)=""/95, 0x5f) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) preadv(r1, &(0x7f0000000480), 0x1000000000000269, 0x10400003) [ 184.922176] audit: type=1400 audit(1555812671.636:44): avc: denied { map } for pid=7613 comm="syz-executor.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28096 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 02:11:11 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5e831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4ca31, 0xffffffffffffffff, 0x0) 02:11:12 executing program 2: msgsnd(0x0, &(0x7f00000000c0), 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:12 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000080)="01000000000000001804000007ff01000000000000d849832f") 02:11:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000180)="a2e6fa9a", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="db042200110000000000c627bf232255fc00e024a4a1dc2e7ee07049cc869470342501ac7f712d6ee37a7d0c", 0x2c}], 0x1}}], 0x1, 0x0) 02:11:12 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',group_id=E']) 02:11:12 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x204400, 0x0) dup2(r0, r1) 02:11:12 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, 0x0, 0x10) 02:11:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x89e1) 02:11:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x7}]}) 02:11:13 executing program 2: msgsnd(0x0, &(0x7f00000000c0), 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x96d4, 0x0, 0x0, 0x0, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x81, 0xfffffffffffffc00}, 0x3c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/97, &(0x7f0000000080)=0x61) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) 02:11:13 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="800d00003804000019000300e60100006c0000000000000001f77d3d34000000004000000040000011333899000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 02:11:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:13 executing program 3: perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80001, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 02:11:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="800d00003804000019000300e60100006c0000000000000001f77d3d34000000004000000040000011333899000000006d5ebe5a0000ffff53ef6f418bb6eb8ad8595fc3cb3761a9bb5ed06f673744287048e6315d509b6410f114f5ad", 0x5d, 0x400}], 0x0, 0x0) 02:11:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) [ 186.520784] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 186.535761] audit: type=1400 audit(1555812673.246:45): avc: denied { create } for pid=7699 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:11:13 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 186.595328] bond0: Releasing backup interface bond_slave_1 [ 186.605538] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 186.630525] audit: type=1400 audit(1555812673.276:46): avc: denied { setopt } for pid=7699 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 186.664715] audit: type=1400 audit(1555812673.276:47): avc: denied { getopt } for pid=7699 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:11:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0xfffffffffffffffe, 0x0) mq_open(&(0x7f0000000780)='\x00', 0x0, 0xb4, &(0x7f00000007c0)={0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0x20, 0xff, 0x120000000000000, 0x2}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) sendto$inet6(r1, &(0x7f0000000000), 0xab94, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xd8) lstat(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) vmsplice(r0, &(0x7f0000000700)=[{0x0}], 0x1, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, r2, 0x0, 0x0, r3, 0x140, 0x7}, 0xffffffff, 0xbfd4, 0x8, 0x20, 0x1, 0x7, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000740)=0x10000) capset(0x0, 0x0) request_key(0x0, &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 186.692301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.706232] audit: type=1400 audit(1555812673.276:48): avc: denied { ioctl } for pid=7699 comm="syz-executor.0" path="socket:[28254]" dev="sockfs" ino=28254 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:11:13 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) [ 186.767384] bond0: Releasing backup interface bond_slave_1 [ 186.794838] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem 02:11:13 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 186.819339] EXT4-fs (loop3): Invalid log block size: 1031665409 [ 186.953730] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 187.006021] EXT4-fs (loop3): Invalid log block size: 1031665409 02:11:14 executing program 2: msgsnd(0x0, &(0x7f00000000c0), 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:14 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:14 executing program 3: syz_emit_ethernet(0x114, &(0x7f0000000280)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "f83394", 0xde, 0x29, 0x0, @remote, @rand_addr="6056b8d937dd51706f0de590371d5f51", {[@dstopts={0x0, 0x8, [], [@generic={0x0, 0x42, "4589cb74ef2e85c9befda47d6eabebe067dfb24021c1bc8eff47c27a195d789b0a5ba31ee5e8c93414f161203168c23a6f6ed67cc54411897844ee51c75cf4cca74f"}]}], @udp={0x4e20, 0x4e24, 0x8e, 0x0, [@guehdr={0x2, 0x10000, 0xfffffffffffffbff, 0x5, 0x100, [0x80]}, @guehdr={0x2, 0x401, 0x3, 0x0, 0x100, [0x80]}, @guehdr={0x2, 0x0, 0x0, 0x883c, 0x100, [0x80]}, @guehdr={0x2, 0x1000, 0x5, 0x101, 0x100, [0x80]}, @guehdr={0x2, 0x7, 0xffffffffffffffff, 0x7, 0x100, [0x80]}], "7beee1a3184d584955770aecde53c6c134144d985837865853205b04b249b5a31dbc69bc0a538d0d2479a2af8da067abeed45ac1dd86a9613558d326a5d3a768b8cd0edd42981dae3d83f65e4545e46b369ebb7de03fe035a16796b2bcaa"}}}}}}, 0x0) 02:11:14 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000280)=0x31, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @initdev}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:11:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x96d4, 0x0, 0x0, 0x0, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x81, 0xfffffffffffffc00}, 0x3c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/97, &(0x7f0000000080)=0x61) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) 02:11:14 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:14 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0xfffffffffffffffe, 0x0) mq_open(0x0, 0x0, 0xb4, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0xff, 0x120000000000000, 0x2}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) sendto$inet6(r0, &(0x7f0000000000), 0xab94, 0x0, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) capset(0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 02:11:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001540)=""/138, 0x8a}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/129, 0x81}], 0x5}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 02:11:14 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:14 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) [ 187.454627] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:11:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x96d4, 0x0, 0x0, 0x0, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x81, 0xfffffffffffffc00}, 0x3c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/97, &(0x7f0000000080)=0x61) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) [ 187.648739] bond0: Releasing backup interface bond_slave_1 [ 187.719652] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:11:14 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000) 02:11:14 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000140), 0x4000000000001fc, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') 02:11:14 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:14 executing program 3: syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff93297806d35708060001080006040001aaaaaaaaaa00000014659077ffa808000000000000006cbd848ea1e29000d138a1841ce8cb23773e00"/74], 0x0) 02:11:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x96d4, 0x0, 0x0, 0x0, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x81, 0xfffffffffffffc00}, 0x3c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/97, &(0x7f0000000080)=0x61) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) 02:11:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) read(r0, 0x0, 0x0) 02:11:14 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d1798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000400000a00000000000000000000000004000000b1e40c000000000000de0000000000"], 0xd8}}, 0x0) 02:11:14 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 188.248136] bond0: Releasing backup interface bond_slave_1 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000) [ 188.287562] audit: type=1400 audit(1555812674.966:49): avc: denied { create } for pid=7794 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:11:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x21}, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 188.352329] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000) [ 188.453649] audit: type=1400 audit(1555812674.996:50): avc: denied { write } for pid=7794 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:11:15 executing program 1: symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') symlink(0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x400) 02:11:15 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) close(r0) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/100, 0x800}) ioctl(r1, 0x8916, &(0x7f0000000000)) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x1000) 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0xff4a) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x1000) 02:11:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 02:11:15 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8000}, {}], 0x2, 0x1ff) 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x1000) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x0) 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) msgctl$IPC_RMID(0x0, 0x0) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:11:15 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x0) 02:11:15 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:11:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a0501ff6880fffdffff270a06000006000100060000007d0a00010c000200007059c93f0022ff"], 0x2c}, 0x1, 0x4800000000000000}, 0x0) 02:11:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:16 executing program 2: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x0) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 02:11:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 02:11:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}, 0x0) [ 189.513980] kauditd_printk_skb: 1 callbacks suppressed [ 189.513989] audit: type=1400 audit(1555812676.226:52): avc: denied { write } for pid=7917 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 189.548797] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$LOOP_GET_STATUS64(r0, 0x125f, 0x0) 02:11:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 02:11:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:11:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) unshare(0x600) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 02:11:16 executing program 0: request_key(0x0, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 02:11:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, "8d0c8b53ec74fe53f6bf60f7fa14a1a7f7a3e949416557e78ee581efa26807ec2979cd43c0753b5bac2cc9f883b98651907210463ce25ae85cf8dc6a620d9043", "07b30efcd303dcdaa57643220db96d495596d5876b4220ce716de1c6faf33fae69c6db2464333cf7c4c9cbd716d8c0c35bed01706e0be8bdd28809b36f8f4c86", "ce77dc3cbd400ee58bfa94d65fe87a0ac82211108846a97c3f2f7e305fe9511b"}) 02:11:16 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1, 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_genetlink_get_family_id$tipc2(0x0) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) 02:11:16 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x0, 0x9}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000200)) 02:11:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xff}, 0x13) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) 02:11:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0xff00000000000000, 0x0, 0xffffffae}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) 02:11:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 02:11:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$LOOP_GET_STATUS64(r0, 0x4c02, 0x0) 02:11:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[]}}, 0x0) 02:11:16 executing program 1: r0 = msgget(0x3, 0x10) msgsnd(r0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000a80)={0x5}, 0x8, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x20}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)=ANY=[@ANYBLOB='D'], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) msgctl$IPC_RMID(0x0, 0x0) 02:11:16 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1, 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_genetlink_get_family_id$tipc2(0x0) 02:11:17 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:17 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 02:11:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x0) 02:11:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB]}}, 0x0) 02:11:17 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/231, 0xe7) 02:11:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB]}}, 0x0) 02:11:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0xa001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x80000000, 0x8, 0x0, 0x1fd, 0x9fd5, 0xffff, 0x1, 0x6, 0xfffffffffffffff8}}, 0x43) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000100)) mq_open(&(0x7f0000000140)='bridge_slave_1\x00', 0x400000000000c1, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, 0x0, 0x7}, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000040)) read$alg(r0, &(0x7f0000000380)=""/230, 0xe6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$P9_RRENAMEAT(r0, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) listen(r1, 0x5) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, &(0x7f0000000680)=""/31, 0x1f}, 0x2000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x354daf895057b821) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$KDSETLED(r1, 0x4b32, 0x4000000000000058) 02:11:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syslog(0x3, &(0x7f0000000200)=""/198, 0xc6) 02:11:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB]}}, 0x0) 02:11:17 executing program 1: msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000001440)=ANY=[], 0x0, 0xfffffffffffffffc, 0x1000) 02:11:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:17 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x1, 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_genetlink_get_family_id$tipc2(0x0) 02:11:17 executing program 0: syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b80)='\x00'}) 02:11:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d179"], 0x6c}}, 0x0) 02:11:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000019, &(0x7f0000548000)=0x5, 0x38e) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 02:11:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d179"], 0x6c}}, 0x0) [ 191.242757] audit: type=1400 audit(1555812677.946:53): avc: denied { set_context_mgr } for pid=8055 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 02:11:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 02:11:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:11:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010027030270fff8", 0x16}], 0x0, 0x0) 02:11:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c09, 0x0) 02:11:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:11:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300021b0000000200000000000011050006004e5800000a0000000000000000000000000007000000000000000010f6ff7500000000000d000800e0020000b89c0fa2997da12ba81996d8ee000000809ac1ec4695c939af6fa7fc171ae122a395a7e00088a08594e3d179"], 0x6c}}, 0x0) 02:11:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 191.486177] ================================================================== [ 191.493815] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 191.493832] Read of size 8 at addr ffffffff8677d6f8 by task syz-executor.1/8086 [ 191.493835] [ 191.493850] CPU: 0 PID: 8086 Comm: syz-executor.1 Not tainted 4.14.113 #3 [ 191.507873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.507880] Call Trace: [ 191.507914] dump_stack+0x138/0x19c [ 191.507929] ? strscpy+0x20e/0x2c0 [ 191.507958] print_address_description.cold+0x5/0x1dc [ 191.507972] ? strscpy+0x20e/0x2c0 [ 191.522827] FAT-fs (loop0): bogus number of directory entries (515) [ 191.525995] kasan_report.cold+0xaf/0x2b5 [ 191.526011] __asan_report_load8_noabort+0x14/0x20 [ 191.526024] strscpy+0x20e/0x2c0 [ 191.526042] prepare_error_buf+0x94/0x1aa0 [ 191.528781] FAT-fs (loop0): Can't find a valid FAT filesystem [ 191.532329] ? io_schedule+0x1c/0x70 [ 191.532345] ? __wait_on_bit+0x92/0x130 [ 191.532356] ? scnprintf_le_key+0x600/0x600 02:11:18 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) pselect6(0x40, &(0x7f00000000c0)={0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 191.532367] ? out_of_line_wait_on_bit+0xba/0xd0 [ 191.532380] __reiserfs_warning+0x9f/0xb0 [ 191.532389] ? reiserfs_printk+0xd0/0xd0 [ 191.532418] ? __bread_gfp+0x63/0x290 [ 191.603119] ? __brelse+0x50/0x60 [ 191.606591] ? read_super_block+0x11d/0x8c0 [ 191.610908] reiserfs_fill_super+0xa71/0x2b20 [ 191.615405] ? finish_unfinished+0x1010/0x1010 [ 191.620012] ? snprintf+0xa5/0xd0 [ 191.623468] ? set_blocksize+0x270/0x300 [ 191.627530] ? ns_test_super+0x50/0x50 [ 191.631409] mount_bdev+0x2c1/0x370 [ 191.635060] ? finish_unfinished+0x1010/0x1010 [ 191.639650] get_super_block+0x35/0x40 [ 191.643638] mount_fs+0x9d/0x2a7 [ 191.646997] vfs_kern_mount.part.0+0x5e/0x3d0 [ 191.651493] do_mount+0x417/0x27d0 [ 191.655021] ? copy_mount_options+0x5c/0x2f0 [ 191.659426] ? rcu_read_lock_sched_held+0x110/0x130 [ 191.664447] ? copy_mount_string+0x40/0x40 [ 191.668682] ? copy_mount_options+0x1fe/0x2f0 [ 191.673195] SyS_mount+0xab/0x120 [ 191.676640] ? copy_mnt_ns+0x8c0/0x8c0 [ 191.680538] do_syscall_64+0x1eb/0x630 [ 191.684415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.689258] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.694487] RIP: 0033:0x45b69a [ 191.697664] RSP: 002b:00007faa05d44a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 191.705386] RAX: ffffffffffffffda RBX: 00007faa05d44b40 RCX: 000000000045b69a [ 191.712691] RDX: 00007faa05d44ae0 RSI: 0000000020000200 RDI: 00007faa05d44b00 [ 191.719974] RBP: 0000000000000000 R08: 00007faa05d44b40 R09: 00007faa05d44ae0 [ 191.727244] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 191.734509] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 191.741794] [ 191.743434] The buggy address belongs to the variable: [ 191.749720] __func__.31266+0x2dd8/0x3a60 [ 191.753852] [ 191.755643] Memory state around the buggy address: [ 191.760564] ffffffff8677d580: 01 fa fa fa fa fa fa fa 01 fa fa fa fa fa fa fa [ 191.767918] ffffffff8677d600: 00 00 00 00 00 07 fa fa fa fa fa fa 00 00 00 07 [ 191.775369] >ffffffff8677d680: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 04 02:11:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f00000000c0)=0x2c) [ 191.782735] ^ [ 191.790012] ffffffff8677d700: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 00 [ 191.797372] ffffffff8677d780: 00 00 00 00 02 fa fa fa fa fa fa fa 00 00 00 00 [ 191.805781] ================================================================== [ 191.813128] Disabling lock debugging due to kernel taint [ 191.818836] Kernel panic - not syncing: panic_on_warn set ... [ 191.818836] [ 191.826237] CPU: 0 PID: 8086 Comm: syz-executor.1 Tainted: G B 4.14.113 #3 [ 191.834372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.843725] Call Trace: [ 191.846326] dump_stack+0x138/0x19c [ 191.851320] ? strscpy+0x20e/0x2c0 [ 191.854851] panic+0x1f2/0x438 [ 191.858061] ? add_taint.cold+0x16/0x16 [ 191.862071] kasan_end_report+0x47/0x4f [ 191.866036] kasan_report.cold+0x136/0x2b5 [ 191.870271] __asan_report_load8_noabort+0x14/0x20 [ 191.875209] strscpy+0x20e/0x2c0 [ 191.878566] prepare_error_buf+0x94/0x1aa0 [ 191.882789] ? io_schedule+0x1c/0x70 [ 191.886490] ? __wait_on_bit+0x92/0x130 [ 191.890459] ? scnprintf_le_key+0x600/0x600 [ 191.894770] ? out_of_line_wait_on_bit+0xba/0xd0 [ 191.899511] __reiserfs_warning+0x9f/0xb0 [ 191.903835] ? reiserfs_printk+0xd0/0xd0 [ 191.907919] ? __bread_gfp+0x63/0x290 [ 191.911737] ? __brelse+0x50/0x60 [ 191.915204] ? read_super_block+0x11d/0x8c0 [ 191.919527] reiserfs_fill_super+0xa71/0x2b20 [ 191.924036] ? finish_unfinished+0x1010/0x1010 [ 191.928635] ? snprintf+0xa5/0xd0 [ 191.932132] ? set_blocksize+0x270/0x300 [ 191.936192] ? ns_test_super+0x50/0x50 [ 191.940098] mount_bdev+0x2c1/0x370 [ 191.943717] ? finish_unfinished+0x1010/0x1010 [ 191.948294] get_super_block+0x35/0x40 [ 191.952174] mount_fs+0x9d/0x2a7 [ 191.955538] vfs_kern_mount.part.0+0x5e/0x3d0 [ 191.960116] do_mount+0x417/0x27d0 [ 191.963748] ? copy_mount_options+0x5c/0x2f0 [ 191.968180] ? rcu_read_lock_sched_held+0x110/0x130 [ 191.973221] ? copy_mount_string+0x40/0x40 [ 191.977986] ? copy_mount_options+0x1fe/0x2f0 [ 191.982509] SyS_mount+0xab/0x120 [ 191.985964] ? copy_mnt_ns+0x8c0/0x8c0 [ 191.989862] do_syscall_64+0x1eb/0x630 [ 191.993767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.998721] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.003904] RIP: 0033:0x45b69a [ 192.007085] RSP: 002b:00007faa05d44a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 192.014822] RAX: ffffffffffffffda RBX: 00007faa05d44b40 RCX: 000000000045b69a [ 192.022116] RDX: 00007faa05d44ae0 RSI: 0000000020000200 RDI: 00007faa05d44b00 [ 192.029866] RBP: 0000000000000000 R08: 00007faa05d44b40 R09: 00007faa05d44ae0 [ 192.037152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 192.044528] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 192.053044] Kernel Offset: disabled [ 192.056673] Rebooting in 86400 seconds..