Warning: Permanently added '[localhost]:22906' (ECDSA) to the list of known hosts. syzkaller login: [ 111.302802][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 111.302915][ T39] audit: type=1400 audit(1580126230.099:42): avc: denied { map } for pid=9014 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/27 11:57:10 fuzzer started 2020/01/27 11:57:12 dialing manager at 10.0.2.10:46639 2020/01/27 11:57:12 syscalls: 2928 2020/01/27 11:57:12 code coverage: enabled 2020/01/27 11:57:12 comparison tracing: enabled 2020/01/27 11:57:12 extra coverage: enabled 2020/01/27 11:57:12 setuid sandbox: enabled 2020/01/27 11:57:12 namespace sandbox: enabled 2020/01/27 11:57:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/27 11:57:12 fault injection: enabled 2020/01/27 11:57:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/27 11:57:12 net packet injection: enabled 2020/01/27 11:57:12 net device setup: enabled 2020/01/27 11:57:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/27 11:57:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:57:52 executing program 0: [ 153.459945][ T39] audit: type=1400 audit(1580126272.259:43): avc: denied { map } for pid=9035 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22541 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 11:57:52 executing program 1: [ 153.685274][ T9036] IPVS: ftp: loaded support on port[0] = 21 [ 153.750723][ T9038] IPVS: ftp: loaded support on port[0] = 21 11:57:52 executing program 2: [ 153.917159][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 153.922596][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 153.949105][ T9038] chnl_net:caif_netlink_parms(): no params data found 11:57:52 executing program 3: [ 154.012233][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.026649][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.045621][ T9036] device bridge_slave_0 entered promiscuous mode [ 154.066340][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.077565][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.090159][ T9036] device bridge_slave_1 entered promiscuous mode [ 154.131249][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.141769][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.152786][ T9038] device bridge_slave_0 entered promiscuous mode [ 154.168607][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.190015][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.209862][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.220682][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.233249][ T9038] device bridge_slave_1 entered promiscuous mode [ 154.263988][ T9045] IPVS: ftp: loaded support on port[0] = 21 [ 154.265803][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.293432][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.310143][ T9036] team0: Port device team_slave_0 added [ 154.324654][ T9036] team0: Port device team_slave_1 added [ 154.354518][ T9038] team0: Port device team_slave_0 added [ 154.370077][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.380972][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.428892][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.456483][ T9038] team0: Port device team_slave_1 added [ 154.472353][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.487576][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.537727][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.582536][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.595008][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.639525][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.658694][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.669331][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.711399][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.878239][ T9036] device hsr_slave_0 entered promiscuous mode [ 154.946397][ T9036] device hsr_slave_1 entered promiscuous mode [ 155.086002][ T9038] device hsr_slave_0 entered promiscuous mode [ 155.134558][ T9038] device hsr_slave_1 entered promiscuous mode [ 155.204286][ T9038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.215153][ T9038] Cannot create hsr debugfs directory [ 155.246998][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 155.342115][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.352186][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.364518][ T9041] device bridge_slave_0 entered promiscuous mode [ 155.402064][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.413510][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.424476][ T9041] device bridge_slave_1 entered promiscuous mode [ 155.475160][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 155.489767][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.534901][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.580980][ T9041] team0: Port device team_slave_0 added [ 155.595674][ T9041] team0: Port device team_slave_1 added [ 155.630075][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.645999][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.696794][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.718567][ T39] audit: type=1400 audit(1580126274.519:44): avc: denied { create } for pid=9036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 155.732478][ T9038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.761800][ T39] audit: type=1400 audit(1580126274.519:45): avc: denied { write } for pid=9036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 155.806287][ T39] audit: type=1400 audit(1580126274.519:46): avc: denied { read } for pid=9036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 155.867779][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.896960][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.937951][ T9045] device bridge_slave_0 entered promiscuous mode [ 155.960940][ T9036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.072766][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.084345][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.124842][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.153344][ T9038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.208791][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.219624][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.232780][ T9045] device bridge_slave_1 entered promiscuous mode [ 156.253151][ T9036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.340529][ T9036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.417494][ T9038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.520809][ T9038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.590707][ T9036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.659729][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.693661][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.757429][ T9041] device hsr_slave_0 entered promiscuous mode [ 156.814929][ T9041] device hsr_slave_1 entered promiscuous mode [ 156.864321][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.878816][ T9041] Cannot create hsr debugfs directory [ 156.906783][ T9045] team0: Port device team_slave_0 added [ 156.929975][ T9045] team0: Port device team_slave_1 added [ 156.961964][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.972509][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.044504][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.082603][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.092715][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.147412][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.216899][ T9045] device hsr_slave_0 entered promiscuous mode [ 157.314816][ T9045] device hsr_slave_1 entered promiscuous mode [ 157.404669][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.416880][ T9045] Cannot create hsr debugfs directory [ 157.564338][ T9041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.646192][ T9041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.708815][ T9041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.796245][ T9041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.878077][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.909620][ T9045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.981776][ T9045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.072488][ T9045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.169111][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.179931][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.192668][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.207018][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.218134][ T9045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.292558][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.308249][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.324248][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.334792][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.351316][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.398734][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.416518][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.429370][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.440845][ T9042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.455891][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.470054][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.483836][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.497188][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.510319][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.524949][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.539918][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.552006][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.563995][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.577721][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.593733][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.613446][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.631090][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.646815][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.659785][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.675670][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.698942][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.712618][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.725462][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.737386][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.749989][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.790687][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.809401][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.823730][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.834772][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.859712][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.871051][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.882009][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.905208][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.917870][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.934977][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.952433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.965907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.977002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.007252][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.018941][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.031406][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.043367][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.055479][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.066592][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.078854][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.090118][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.105249][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.117546][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.133318][ T9036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.151166][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.162929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.176393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.192539][ T9038] device veth0_vlan entered promiscuous mode [ 159.204700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.217639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.236060][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.248138][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.261281][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.273114][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.282251][ T9052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.295175][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.309770][ T9038] device veth1_vlan entered promiscuous mode [ 159.331059][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.342886][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.353896][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.367422][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.378721][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.389205][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.402165][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.417403][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.442826][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.459490][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.472625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.487858][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.500455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.512007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.524730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.537237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.550068][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.568799][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.579489][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.591913][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.602474][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.618885][ T9041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.637371][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.649330][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.663042][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.678145][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.689184][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.700162][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.714714][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.733975][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.771610][ T9038] device veth0_macvtap entered promiscuous mode [ 159.803426][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.831692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.857151][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.880084][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.905699][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.923761][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.940187][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.958836][ T9038] device veth1_macvtap entered promiscuous mode [ 159.978916][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.018757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.032419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.045401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.058478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.070806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.083603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.099138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.120860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.136166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.152590][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.166495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.179337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.203220][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.217150][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.232760][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.252657][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.271884][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.291992][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.311064][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.327252][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.341593][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.359199][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.391919][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.409196][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.430603][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.446844][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.463367][ T9036] device veth0_vlan entered promiscuous mode [ 160.484627][ T39] audit: type=1400 audit(1580126279.279:47): avc: denied { associate } for pid=9038 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 160.515749][ T9036] device veth1_vlan entered promiscuous mode [ 160.572131][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.591596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.607225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.628640][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.649855][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.671486][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.686572][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.715026][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.731454][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.749294][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.763551][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.784692][ T9041] device veth0_vlan entered promiscuous mode [ 160.838822][ T9041] device veth1_vlan entered promiscuous mode [ 160.885014][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.918678][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 11:57:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/53, 0x35) [ 160.961262][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.003675][ T9036] device veth0_macvtap entered promiscuous mode [ 161.010664][ T39] audit: type=1400 audit(1580126279.809:48): avc: denied { open } for pid=9057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 161.007116][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 161.033056][ T9036] device veth1_macvtap entered promiscuous mode [ 161.058105][ T39] audit: type=1400 audit(1580126279.809:49): avc: denied { kernel } for pid=9057 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 161.107154][ T9045] device veth0_vlan entered promiscuous mode [ 161.139417][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.155222][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.169179][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.182461][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.195662][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.207553][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.219325][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.231015][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.245184][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.275090][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.288983][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.303419][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.312816][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.323465][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.335435][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.349608][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.366935][ T9045] device veth1_vlan entered promiscuous mode [ 161.381500][ T9041] device veth0_macvtap entered promiscuous mode [ 161.395094][ T9041] device veth1_macvtap entered promiscuous mode [ 161.408838][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 161.429539][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.451782][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.482070][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.499791][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.518399][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.537402][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.556315][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.577398][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:58:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000480), 0xb}, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x803, 0xa0) connect(r3, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r7, 0x0, 0x0) fallocate(r7, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) [ 161.601085][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.624311][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.649751][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.674025][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.689717][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.711421][ T9045] device veth0_macvtap entered promiscuous mode [ 161.734603][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.746483][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.746928][ T39] audit: type=1400 audit(1580126280.549:50): avc: denied { map } for pid=9061 comm="syz-executor.1" path="socket:[39947]" dev="sockfs" ino=39947 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 161.760140][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.832314][ T9045] device veth1_macvtap entered promiscuous mode [ 161.849691][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 161.875820][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.898330][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 161.918928][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.939493][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.974413][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.987252][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 11:58:00 executing program 0: [ 162.006674][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.042207][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:58:00 executing program 0: 11:58:01 executing program 2: 11:58:01 executing program 0: 11:58:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000880)='./bus\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r7, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r8, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r8, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r9}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xa2ffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) [ 162.270901][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.318902][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.356140][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.384827][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.416717][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.447246][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.467817][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.487637][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.535622][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.556045][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.579633][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.607076][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.629611][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.657547][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.677863][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.705751][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.739228][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:58:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1, 0x0) 11:58:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000480), 0xb}, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x803, 0xa0) connect(r3, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r7, 0x0, 0x0) fallocate(r7, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 11:58:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) socket$inet_sctp(0x2, 0x801, 0x84) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@ethernet={0x0, @link_local}, 0x80) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x60800) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r3 = socket$kcm(0xa, 0x0, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@ethernet={0x0, @link_local}, 0x80) connect(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast1}, 0x3, 0x4, 0x3, 0x1}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@ll={0x11, 0x5, r6, 0x1, 0x82, 0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:58:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000480), 0xb}, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x803, 0xa0) connect(r3, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r7, 0x0, 0x0) fallocate(r7, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 11:58:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1, 0x0) 11:58:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf9c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4b3a4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) 11:58:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf9c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4b3a4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) 11:58:02 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') fadvise64(r0, 0x0, 0x0, 0xb47411f325223345) 11:58:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf9c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4b3a4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) 11:58:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000480), 0xb}, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x803, 0xa0) connect(r3, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r7, 0x0, 0x0) fallocate(r7, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 11:58:02 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaddff644cffff08004c371bda6e62270c8c4d33052095dd0444ffdf1400a30000000032c510499c4c1e6be0000001110055e4040000006399f91939abed6b3d5bdcd0d0166bcad79224154da149ffb28ece6ccbd184d138a7df1982631db88dc681679c9099080559785f9a304fb9def1a4c6264e0424dad23c975d6c53b4435238161d8a3befedfc33b5a9211ffdd35265204a00ebf153f574f7470b5f8c2d1b52a91758bf04e555e8e1fffe7a7a2167f88b54e51238d81579aa99c606f24bbcdd3f13e4b7951ada2973ecc0ca53d5d600ba58ff5288ebcf071a24bc69f388f1fefe743d7a47b1f13caaca45ee0168439fc74394e86603b758cceb62f55b8b3d345b38c413978903aa58288ebefe99819cf0526c0cea55ba2d0ebf736613a39b9bb300000000007721c2da6b8d27ab11f8a94c4c8bcd0d23f9cb70216757ccc1b74530b6cd5237590550c3e7b233d522a2bbc953f13c5e614c29b3211f2c153a801a6916c260b56e816e3c7f1768157b6c1b7635b6298b13b0b6f93a5822f90ec586959a3a060b32bbca653cdf243fff0a699c6b8d80f405a069e258f9aee80f346c4859e0c4fecf46a1b80df932a8a954a6cf2d2c73e710cffa7e04986eed4a9ca120123c391ec0ffa58ea61d6e6639b8cc9da7aa1973ec5b18e96cae435b5ca4fe02b1089511d79ea0a791"], 0x0) 11:58:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca43", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:58:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) [ 163.997561][ T39] audit: type=1400 audit(1580126282.799:51): avc: denied { prog_load } for pid=9133 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 164.054405][ C0] hrtimer: interrupt took 39939 ns 11:58:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') 11:58:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') [ 164.196098][ T39] audit: type=1400 audit(1580126282.909:52): avc: denied { prog_run } for pid=9133 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:58:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') [ 184.689478][ T0] NOHZ: local_softirq_pending 08 [ 185.967500][ T0] NOHZ: local_softirq_pending 08 [ 186.605362][ T0] NOHZ: local_softirq_pending 08 [ 205.166470][ T0] NOHZ: local_softirq_pending 08 11:58:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') 11:58:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') 11:58:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000480), 0xb}, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x803, 0xa0) connect(r3, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x66, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xc}, 0x11000, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmdt(0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x417) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r7, 0x0, 0x0) fallocate(r7, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 11:58:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf9c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4b3a4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) [ 225.648103][ T0] NOHZ: local_softirq_pending 08 [ 230.846709][ T18] kasan: CONFIG_KASAN_INLINE enabled [ 230.860428][ T18] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 230.893575][ T18] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 230.894467][ T18] CPU: 1 PID: 18 Comm: kworker/1:0 Not tainted 5.5.0-syzkaller #0 [ 230.894467][ T18] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 230.894467][ T18] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 230.894467][ T18] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 230.894467][ T18] Code: c3 e8 22 b0 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 b3 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 230.894467][ T18] RSP: 0018:ffffc900004cf9f0 EFLAGS: 00010206 [ 230.894467][ T18] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83998cb5 [ 230.894467][ T18] RDX: 0000000000000003 RSI: ffffffff83580bad RDI: 0000000000000018 [ 230.894467][ T18] RBP: ffffc900004cf9f8 R08: ffff88802c6a45c0 R09: fffffbfff165e5ae [ 230.894467][ T18] R10: fffffbfff165e5ad R11: ffffffff8b2f2d6f R12: dffffc0000000000 [ 230.894467][ T18] R13: ffffc900004cfb20 R14: ffffc900004cfb20 R15: 000000000000001d [ 230.894467][ T18] FS: 0000000000000000(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 230.894467][ T18] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.894467][ T18] CR2: ffffffffff600400 CR3: 000000001fcb9000 CR4: 0000000000340ee0 [ 230.894467][ T18] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.894467][ T18] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.894467][ T18] Call Trace: [ 230.894467][ T18] security_socket_sendmsg+0x77/0xc0 [ 230.894467][ T18] sock_sendmsg+0x45/0x130 [ 230.894467][ T18] kernel_sendmsg+0x44/0x50 [ 230.894467][ T18] rxrpc_send_keepalive+0x1ff/0x940 [ 230.894467][ T18] ? rxrpc_reject_packets+0xab0/0xab0 [ 230.894467][ T18] ? _raw_spin_unlock_bh+0x2c/0x30 [ 230.894467][ T18] ? __local_bh_enable_ip+0x15a/0x270 [ 230.894467][ T18] ? lockdep_hardirqs_on+0x421/0x5e0 [ 230.894467][ T18] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 230.894467][ T18] ? __local_bh_enable_ip+0x15a/0x270 [ 230.894467][ T18] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 230.894467][ T18] ? rxrpc_peer_add_rtt+0x650/0x650 [ 230.894467][ T18] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 230.894467][ T18] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 230.894467][ T18] ? trace_hardirqs_on+0x67/0x240 [ 230.894467][ T18] process_one_work+0x9af/0x1740 [ 230.894467][ T18] ? pwq_dec_nr_in_flight+0x320/0x320 [ 230.894467][ T18] ? lock_acquire+0x190/0x410 [ 230.894467][ T18] worker_thread+0x98/0xe40 [ 230.894467][ T18] kthread+0x361/0x430 [ 230.894467][ T18] ? process_one_work+0x1740/0x1740 [ 230.894467][ T18] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 230.894467][ T18] ret_from_fork+0x24/0x30 [ 230.894467][ T18] Modules linked in: [ 231.705856][ T18] ---[ end trace a183a3c3015bcbb3 ]--- [ 231.726901][ T18] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 231.747095][ T18] Code: c3 e8 22 b0 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 b3 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 231.823637][ T18] RSP: 0018:ffffc900004cf9f0 EFLAGS: 00010206 [ 231.850828][ T18] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83998cb5 [ 231.883969][ T18] RDX: 0000000000000003 RSI: ffffffff83580bad RDI: 0000000000000018 [ 231.915413][ T18] RBP: ffffc900004cf9f8 R08: ffff88802c6a45c0 R09: fffffbfff165e5ae [ 231.948628][ T18] R10: fffffbfff165e5ad R11: ffffffff8b2f2d6f R12: dffffc0000000000 [ 231.985917][ T18] R13: ffffc900004cfb20 R14: ffffc900004cfb20 R15: 000000000000001d [ 232.023875][ T18] FS: 0000000000000000(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 232.053090][ T18] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.072716][ T18] CR2: ffffffffff600400 CR3: 000000001fcb9000 CR4: 0000000000340ee0 [ 232.094633][ T18] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.116903][ T18] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.137965][ T18] Kernel panic - not syncing: Fatal exception [ 232.147813][ T18] Kernel Offset: disabled [ 232.147813][ T18] Rebooting in 86400 seconds..