syzkaller login: [ 293.087930][ T39] audit: type=1400 audit(1600170512.919:41): avc: denied { map } for pid=10364 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:50137' (ECDSA) to the list of known hosts. [ 298.390169][ T39] audit: type=1400 audit(1600170518.209:42): avc: denied { map } for pid=10376 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/09/15 11:48:38 fuzzer started 2020/09/15 11:48:40 dialing manager at 10.0.2.10:46359 2020/09/15 11:48:40 syscalls: 3347 2020/09/15 11:48:40 code coverage: enabled 2020/09/15 11:48:40 comparison tracing: enabled 2020/09/15 11:48:40 extra coverage: enabled 2020/09/15 11:48:40 setuid sandbox: enabled 2020/09/15 11:48:40 namespace sandbox: enabled 2020/09/15 11:48:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/15 11:48:40 fault injection: enabled 2020/09/15 11:48:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/15 11:48:40 net packet injection: enabled 2020/09/15 11:48:40 net device setup: enabled 2020/09/15 11:48:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/15 11:48:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/15 11:48:40 USB emulation: enabled 2020/09/15 11:48:40 hci packet injection: enabled [ 300.714122][ T39] audit: type=1400 audit(1600170520.539:43): avc: denied { integrity } for pid=10393 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 11:50:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8953, &(0x7f0000002580)={'ip_vti0\x00', 0x0}) [ 390.810645][ T39] audit: type=1400 audit(1600170610.629:44): avc: denied { map } for pid=10396 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 11:50:11 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 11:50:12 executing program 2: r0 = socket(0x2, 0x2, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 11:50:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) [ 394.691947][T10400] IPVS: ftp: loaded support on port[0] = 21 [ 394.693295][T10398] IPVS: ftp: loaded support on port[0] = 21 [ 395.278481][T10403] IPVS: ftp: loaded support on port[0] = 21 [ 395.631539][T10400] chnl_net:caif_netlink_parms(): no params data found [ 395.719232][T10398] chnl_net:caif_netlink_parms(): no params data found [ 395.992986][T10409] IPVS: ftp: loaded support on port[0] = 21 [ 396.011083][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.075044][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.121002][T10398] device bridge_slave_0 entered promiscuous mode [ 396.177445][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.230448][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.244581][T10411] Bluetooth: hci1: command 0x0409 tx timeout [ 396.295590][T10423] Bluetooth: hci0: command 0x0409 tx timeout [ 396.337096][T10400] device bridge_slave_0 entered promiscuous mode [ 396.447715][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.504254][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.581156][T10398] device bridge_slave_1 entered promiscuous mode [ 396.621522][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.662313][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.696418][T10400] device bridge_slave_1 entered promiscuous mode [ 396.810844][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.872962][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.970505][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.045540][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.112992][ T61] Bluetooth: hci2: command 0x0409 tx timeout [ 397.117770][T10403] chnl_net:caif_netlink_parms(): no params data found [ 397.166062][T10400] team0: Port device team_slave_0 added [ 397.191414][T10400] team0: Port device team_slave_1 added [ 397.225694][T10398] team0: Port device team_slave_0 added [ 397.253919][T10398] team0: Port device team_slave_1 added [ 397.317168][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.351613][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.451688][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.514907][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.535141][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.645097][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.698138][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.733170][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.895972][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.950303][T10411] Bluetooth: hci3: command 0x0409 tx timeout [ 397.978406][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.018699][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.123723][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.244953][T10400] device hsr_slave_0 entered promiscuous mode [ 398.270440][T10400] device hsr_slave_1 entered promiscuous mode [ 398.322382][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.353606][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.378061][T10403] device bridge_slave_0 entered promiscuous mode [ 398.402103][ T1239] Bluetooth: hci1: command 0x041b tx timeout [ 398.403208][ T61] Bluetooth: hci0: command 0x041b tx timeout [ 398.481246][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.521507][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.548391][T10403] device bridge_slave_1 entered promiscuous mode [ 398.584656][T10398] device hsr_slave_0 entered promiscuous mode [ 398.607976][T10398] device hsr_slave_1 entered promiscuous mode [ 398.634594][T10398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.656044][T10398] Cannot create hsr debugfs directory [ 398.758706][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.830487][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.987371][T10409] chnl_net:caif_netlink_parms(): no params data found [ 399.037880][T10403] team0: Port device team_slave_0 added [ 399.166112][T10403] team0: Port device team_slave_1 added [ 399.193453][ T61] Bluetooth: hci2: command 0x041b tx timeout [ 399.469304][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.532282][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.777900][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.881853][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.938927][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.994077][ T1239] Bluetooth: hci3: command 0x041b tx timeout [ 400.157214][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.322666][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.364925][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.416068][T10409] device bridge_slave_0 entered promiscuous mode [ 400.483753][T10411] Bluetooth: hci1: command 0x040f tx timeout [ 400.564194][T10411] Bluetooth: hci0: command 0x040f tx timeout [ 400.574369][ T39] audit: type=1400 audit(1600170620.399:45): avc: denied { create } for pid=10400 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 400.862048][T10403] device hsr_slave_0 entered promiscuous mode [ 400.871386][ T39] audit: type=1400 audit(1600170620.409:46): avc: denied { write } for pid=10400 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 401.106456][T10403] device hsr_slave_1 entered promiscuous mode [ 401.120998][ T39] audit: type=1400 audit(1600170620.409:47): avc: denied { read } for pid=10400 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 401.360022][ T1239] Bluetooth: hci2: command 0x040f tx timeout [ 401.417625][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.495002][T10403] Cannot create hsr debugfs directory [ 401.553952][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.622014][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.697417][T10409] device bridge_slave_1 entered promiscuous mode [ 401.766679][T10400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.929672][T10400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.086492][T10400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.151562][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.211258][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.233824][ T1239] Bluetooth: hci3: command 0x040f tx timeout [ 402.274352][T10398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.391402][T10400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.530948][T10398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.606266][T10411] Bluetooth: hci1: command 0x0419 tx timeout [ 402.717994][ T1239] Bluetooth: hci0: command 0x0419 tx timeout [ 402.746559][T10409] team0: Port device team_slave_0 added [ 402.830977][T10398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.914540][T10398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.006158][T10409] team0: Port device team_slave_1 added [ 403.167034][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.250816][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.562624][ T1239] Bluetooth: hci2: command 0x0419 tx timeout [ 403.641859][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.798117][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.865589][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.124746][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.380652][T10409] device hsr_slave_0 entered promiscuous mode [ 404.413879][ T1239] Bluetooth: hci3: command 0x0419 tx timeout [ 404.460048][T10409] device hsr_slave_1 entered promiscuous mode [ 404.503267][T10409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.550920][T10409] Cannot create hsr debugfs directory [ 404.609421][T10403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.668756][T10403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.748418][T10403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.798807][T10403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.007334][T10409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.068985][T10409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.146027][T10409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.217928][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.261043][T10409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.325304][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.379387][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.421155][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.500547][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.595460][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.651132][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.718029][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.783360][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.860373][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.039286][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.128892][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.217603][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.284374][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.360741][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.425250][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.506731][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.585674][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.682061][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.776914][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.855450][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.946948][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.018462][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.099248][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.182381][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.260250][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.327083][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.398849][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.480691][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.529009][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.575904][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.607796][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.631419][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.653899][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.668159][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.683850][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.708440][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.738268][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.771204][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.797757][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.826265][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.866531][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.886980][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.914063][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.927194][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.950255][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.986664][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.010672][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.036562][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.083798][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.108299][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.120991][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.134465][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.158033][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.176144][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.188538][T10435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.209373][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.229823][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.245107][T10435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.270485][T10398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.301561][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.340173][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.362078][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.381770][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.406621][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.429273][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.468227][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.509495][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.539468][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.580637][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.614125][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.667717][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.716672][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.770279][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.801645][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.830731][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.854399][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.901531][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.942590][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.978679][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.016962][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.109517][T10403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.206075][T10403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.356655][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.457026][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.556414][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.670234][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.786325][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.862140][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.954355][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.055297][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.152451][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.245053][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.326449][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.407309][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.488578][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.552657][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.634432][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.708296][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.804765][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.870499][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.936510][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.008235][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.073832][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.123508][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.205693][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.285003][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.341360][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.385676][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.454294][T10400] device veth0_vlan entered promiscuous mode [ 411.499842][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.544478][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.600245][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.657164][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.726729][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.782459][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.831850][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.896117][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.969501][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.065311][T10400] device veth1_vlan entered promiscuous mode [ 412.137613][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.212342][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.285869][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.380330][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.447475][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.551975][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.619178][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.711036][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.804406][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.885424][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.976610][T10398] device veth0_vlan entered promiscuous mode [ 413.086010][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.164668][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.241877][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.331750][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.427754][T10398] device veth1_vlan entered promiscuous mode [ 413.521576][T10400] device veth0_macvtap entered promiscuous mode [ 413.611886][T10400] device veth1_macvtap entered promiscuous mode [ 413.735357][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.806794][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.874009][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.929049][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.977048][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.041315][T10403] device veth0_vlan entered promiscuous mode [ 414.094194][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.137048][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.181444][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.218168][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.258950][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.315699][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.371837][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.451052][T10400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.509637][T10400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.553455][T10400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.597356][T10400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.692626][T10403] device veth1_vlan entered promiscuous mode [ 415.093047][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.196507][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.287714][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.360069][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.421077][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.489207][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.712239][T10398] device veth0_macvtap entered promiscuous mode [ 415.992569][T10409] device veth0_vlan entered promiscuous mode [ 416.049406][ T39] audit: type=1400 audit(1600170635.869:48): avc: denied { associate } for pid=10400 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 416.122075][T10398] device veth1_macvtap entered promiscuous mode [ 416.364851][T10409] device veth1_vlan entered promiscuous mode [ 416.484857][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 416.581392][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.677372][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.770439][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 416.780973][T10400] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 416.867839][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.090822][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.161556][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.266727][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.367935][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.437335][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.669247][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.758149][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.865614][T10398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.944344][T10398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.018636][T10398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.101786][T10398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.189893][T10403] device veth0_macvtap entered promiscuous mode [ 418.256727][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 11:50:38 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) [ 418.377952][T10403] device veth1_macvtap entered promiscuous mode [ 418.486827][T10409] device veth0_macvtap entered promiscuous mode [ 418.501934][T10445] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 418.577470][T10439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.626843][T10439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:50:38 executing program 1: socket$packet(0x11, 0x2, 0x300) [ 418.681022][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.724999][T10409] device veth1_macvtap entered promiscuous mode [ 418.786289][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 418.836788][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.883674][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 418.942095][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:50:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 418.994293][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 11:50:38 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 419.048000][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.088157][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.122190][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.158306][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.195823][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.233318][T10403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.275135][T10403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.317792][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.345398][T10403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 11:50:39 executing program 0: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/97, 0x61}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x14}, 0x14}}, 0x0) 11:50:39 executing program 1: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 419.381115][T10403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.430053][T10403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.488097][T10403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.580431][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.642560][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.726778][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.815631][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.882430][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.945204][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.029298][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 420.148356][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.272007][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.376782][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.481256][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.644041][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 420.777743][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.948799][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.109193][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.275840][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.425771][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.572563][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.700877][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.819686][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.926992][T10409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.038700][T10409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.136340][T10409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.215851][T10409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 11:50:42 executing program 1: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 11:50:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:50:42 executing program 0: bpf$MAP_UPDATE_ELEM(0x8, 0x0, 0x0) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:42 executing program 2: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) 11:50:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @raw_data="b4c9cf8d66960b0951b56581157a76a9c1234a770605a2c8d38b6742fbf58b5434fbd5502891b71dd769438e8c8b4e98c33e36110f00f1e81902fc54d8844c2e0c312f494c050f41811353887e234e569798d6bdc55c9ddb3d70dd2dec80c325500c2741a58404a10652e91fcb6fa247b28fe647f974ab6db461481c2ded307a05d1e7e86ca2850fef52457b5cd613c0b227f390137e598d4f66c490a76211b4d10c457c47c4ce208a0d6fdb2653ee17b93ad46c0d2d566f615913a3b0f5249fbcc36ccc93707f43"}) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) [ 422.708063][ T39] audit: type=1400 audit(1600170642.539:49): avc: denied { map_create } for pid=10482 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:50:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setgroups(0x5, &(0x7f0000000240)=[0xee00, 0x0, 0x0, 0x0, 0x0]) 11:50:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x72, 0x0, 0x0) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setgroups(0x5, &(0x7f0000000240)=[0xee00, 0x0, 0x0, 0x0, 0x0]) 11:50:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 3: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000140)) 11:50:43 executing program 3: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 2: r0 = socket(0x1d, 0x2, 0x7) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x6b, 0x4, 0x0, 0x300) 11:50:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 3: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:50:43 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 11:50:43 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:43 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 11:50:43 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:43 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:43 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 11:50:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 2: shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 11:50:44 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 11:50:44 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 11:50:44 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x14) 11:50:44 executing program 2: shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 11:50:44 executing program 2: shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 11:50:44 executing program 2: shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(0x0, 0x0) 11:50:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) 11:50:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 11:50:45 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:45 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x4000) 11:50:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) 11:50:45 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000130001a2dfeb35ffdc72f4fc26e8fcd158"], 0x54}}, 0x0) 11:50:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x4000) [ 425.325558][T10709] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 11:50:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) 11:50:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) 11:50:45 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004140)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x4000) 11:50:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x4000) 11:50:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x1, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 11:50:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(0x0, 0x4, 0x4000) [ 425.685210][ T39] audit: type=1400 audit(1600170645.519:50): avc: denied { prog_load } for pid=10740 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:50:45 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) [ 425.806230][ T39] audit: type=1400 audit(1600170645.519:51): avc: denied { bpf } for pid=10740 comm="syz-executor.3" capability=39 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 425.935767][ T39] audit: type=1400 audit(1600170645.729:52): avc: denied { perfmon } for pid=10740 comm="syz-executor.3" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 11:50:45 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004140)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 11:50:45 executing program 1: syz_open_dev$video(0x0, 0x4, 0x4000) 11:50:45 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) [ 426.088460][ T39] audit: type=1400 audit(1600170645.919:53): avc: denied { prog_run } for pid=10740 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:50:45 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x1, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 11:50:46 executing program 1: syz_open_dev$video(0x0, 0x4, 0x4000) 11:50:46 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004140)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x4000) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x4000) 11:50:46 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004140)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x4000) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x0) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x0) 11:50:46 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000004140)='/dev/input/mice\x00', 0x0) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp1\x00', 0x0, 0x0) 11:50:46 executing program 3: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 1: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x0) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:50:46 executing program 3: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 3: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:50:46 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) 11:50:46 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) 11:50:46 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLERROR(r0, 0x0, 0xc) write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xffffffffffffffff}}, 0xa0) 11:50:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) 11:50:46 executing program 1: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) 11:50:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0, 0xaa}, 0x8) 11:50:46 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 11:50:46 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0, 0xaa}, 0x8) [ 426.890663][ T39] audit: type=1400 audit(1600170646.719:54): avc: denied { map_read map_write } for pid=10865 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 11:50:46 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 11:50:46 executing program 1: r0 = socket(0xa, 0x5, 0x0) bind$xdp(r0, &(0x7f0000000140), 0x10) 11:50:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x34, r2, 0x1, 0x0, 0x0, {{}, {0xa000000}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) 11:50:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x3ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0205649, &(0x7f0000000100)={0x8000000, @sliced}) 11:50:47 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 427.093785][ T39] audit: type=1400 audit(1600170646.919:55): avc: denied { ioctl } for pid=10882 comm="syz-executor.2" path="socket:[39185]" dev="sockfs" ino=39185 ioctlcmd=0x89f0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 427.100644][T10884] tipc: Enabling of bearer rejected, failed to enable media 11:50:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:47 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 11:50:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) [ 427.282482][T10895] tipc: Enabling of bearer rejected, failed to enable media 11:50:47 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:47 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 11:50:47 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:47 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:47 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 11:50:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:47 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)) 11:50:50 executing program 1: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 11:50:50 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:50 executing program 1: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 11:50:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)) 11:50:50 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000002780)) 11:50:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:53 executing program 1: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 11:50:53 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:53 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:53 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:53 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07", 0x45}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x9, r0, 0x0, 0x0) 11:50:56 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:56 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x107, 0x8, 0x0, 0x0) 11:50:56 executing program 3: syz_mount_image$hfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x1, 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/41, 0x29) 11:50:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:56 executing program 0: socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:56 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0x6d}}) 11:50:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:56 executing program 0: socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 11:50:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0xec0, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 11:50:56 executing program 3: syz_mount_image$hfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x11, 0x1, 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/41, 0x29) 11:50:56 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) [ 436.731669][ T39] audit: type=1400 audit(1600170656.559:56): avc: denied { watch_mount watch_reads } for pid=11006 comm="syz-executor.3" path="/syzkaller-testdir171320465/syzkaller.2o3R0g/51/file0" dev="sda1" ino=16618 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=dir permissive=1 11:50:56 executing program 0: socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 11:50:57 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 11:50:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 11:50:57 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x40, 0x0) 11:50:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 11:50:57 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x828f, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 11:50:57 executing program 3: r0 = socket(0x1e, 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000140)=""/75, 0x4b, 0x0, 0x0, 0x0) 11:50:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 11:50:57 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:57 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:57 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000100)={0x0, [0x7, 0xb1, 0x2], [{0xffffffff}], 0x8}) 11:50:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 11:50:57 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r0, 0x0, 0x0, 0x0) 11:50:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40049409, 0x0) 11:50:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000100)={0x0, [0x7, 0xb1, 0x2], [{0xffffffff}], 0x8}) 11:50:58 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 11:50:58 executing program 1: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 2: socket$can_bcm(0x1d, 0x2, 0x7) 11:50:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:58 executing program 1: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 0: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/97) 11:50:58 executing program 1: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x78) 11:50:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x4, 0x125}]}, 0x18}}, 0x0) 11:50:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) [ 438.861003][T11094] syz-executor.3 (11094) used greatest stack depth: 22640 bytes left 11:50:58 executing program 2: keyctl$join(0x19, &(0x7f0000000000)={'syz', 0x3}) 11:50:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\b\x00'/20, @ANYRES32=r1, @ANYBLOB="0900000000000000280012000c000100764e7468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000024001d0f00"/20, @ANYRES32=r1, @ANYBLOB="000000000000ffff00000000000100000000000000020003000000fe000000ab01000000000000000000005900a5fb0016f7931d00000046a61f10d59400000000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) 11:50:58 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:58 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 11:50:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[]}) 11:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 11:50:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 11:50:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[]}) 11:50:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10140) 11:50:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 11:50:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000740)={'batadv_slave_0\x00', @ifru_map}) 11:50:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f0000000240)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f1a63810"}, 0x0, 0x0, @planes=0x0}) 11:50:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 11:50:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:50:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "2e4a5f19e3e84c43b439f9957d614e899f990cc0b7f96ac579b8a56fbaf50eda"}) 11:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 11:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:50:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:50:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:50:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:50:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0xe0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:50:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 0: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) 11:51:00 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 0: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) 11:51:00 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:00 executing program 1: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:00 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 1: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:00 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:00 executing program 1: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:00 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:00 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:00 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:51:00 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:01 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:51:01 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:01 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:01 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:01 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 11:51:01 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 11:51:01 executing program 0: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:01 executing program 1: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:01 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:51:01 executing program 1: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:01 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:51:01 executing program 0: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:01 executing program 1: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)) 11:51:01 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 11:51:01 executing program 0: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 11:51:01 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x0) 11:51:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) [ 441.915862][ T18] Bluetooth: hci0: command 0x080f tx timeout 11:51:01 executing program 0: r0 = socket(0x0, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:01 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x0) 11:51:01 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 11:51:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x0) 11:51:02 executing program 0: r0 = socket(0x0, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 0: r0 = socket(0x0, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) [ 442.090548][ T39] audit: type=1400 audit(1600170661.919:57): avc: denied { create } for pid=11365 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 11:51:02 executing program 1: migrate_pages(0xffffffffffffffff, 0x81, 0x0, 0x0) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 11:51:02 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, 0x0) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:02 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:51:02 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 11:51:02 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:02 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 11:51:02 executing program 2: r0 = socket(0xa, 0x5, 0x0) accept$inet(r0, 0x0, 0x0) [ 442.937388][ T39] audit: type=1400 audit(1600170662.769:58): avc: denied { open } for pid=11432 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 11:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:03 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0x0, "56b03f37e64b848c8e42f8de676d7ae508fe18b039ad8778a030241a8e119457b4"}}) 11:51:03 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 11:51:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x8, 0x101}, 0x14}}, 0x0) 11:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000011c0)='k', 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 443.300175][ T39] audit: type=1400 audit(1600170662.859:59): avc: denied { kernel } for pid=11432 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 11:51:03 executing program 0: socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:03 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000001900)={0x2}, 0xf) 11:51:03 executing program 0: socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 443.730654][ T39] audit: type=1400 audit(1600170662.859:60): avc: denied { confidentiality } for pid=11432 comm="syz-executor.1" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 444.054648][T11457] i801_smbus 0000:00:1f.3: Timeout waiting for interrupt! [ 444.159864][T11457] i801_smbus 0000:00:1f.3: Transaction timeout [ 444.277231][T11457] i801_smbus 0000:00:1f.3: Failed terminating the transaction 11:51:04 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0x0, "56b03f37e64b848c8e42f8de676d7ae508fe18b039ad8778a030241a8e119457b4"}}) 11:51:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306878bba01000000df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf47e0be6a6e01dd478cec7214ed54314f78838a8b8cdfa"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a8003f0800638877fbac141421e9", 0x0, 0x100}, 0x28) 11:51:04 executing program 0: socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:51:04 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, 0x0) [ 444.289962][ T39] audit: type=1400 audit(1600170663.489:61): avc: denied { create } for pid=11455 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.csmbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected send start condition in state 2 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected write in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 smbus: error: Unexpected recv start condition in state -1 1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:51:04 executing program 0: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, 0x0) [ 444.586297][T11491] i801_smbus 0000:00:1f.3: Transaction failed 11:51:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000001740)}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 444.836533][ C3] ================================================================== [ 444.923810][ C3] BUG: KASAN: vmalloc-out-of-bounds in i801_isr+0xb2d/0xbf0 [ 444.923810][ C3] Write of size 1 at addr ffffc900044d7dc4 by task kauditd/39 [ 444.923810][ C3] [ 444.923810][ C3] CPU: 3 PID: 39 Comm: kauditd Not tainted 5.9.0-rc5-syzkaller #0 [ 444.923810][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 444.923810][ C3] Call Trace: [ 444.923810][ C3] [ 444.923810][ C3] dump_stack+0x198/0x1fd [ 444.923810][ C3] ? i801_isr+0xb2d/0xbf0 [ 444.923810][ C3] ? i801_isr+0xb2d/0xbf0 [ 444.923810][ C3] print_address_description.constprop.0.cold+0x5/0x497 [ 444.923810][ C3] ? pci_bus_read_config_word+0x128/0x190 [ 445.747192][ C3] ? vprintk_func+0x97/0x1a6 [ 445.806562][ C3] ? i801_isr+0xb2d/0xbf0 [ 445.854643][ C3] ? i801_isr+0xb2d/0xbf0 [ 445.906997][ C3] kasan_report.cold+0x1f/0x37 [ 445.955667][ C3] ? i801_isr+0xb2d/0xbf0 [ 445.999458][ C3] i801_isr+0xb2d/0xbf0 [ 446.053409][ C3] ? check_acpi_smo88xx_device+0x1e0/0x1e0 [ 446.113101][ C3] ? handle_irq_event+0xed/0x285 [ 446.155676][ C3] ? lock_is_held_type+0xbb/0xf0 [ 446.213130][ C3] ? check_acpi_smo88xx_device+0x1e0/0x1e0 [ 446.276161][ C3] __handle_irq_event_percpu+0x223/0xaa0 [ 446.330337][ C3] handle_irq_event+0x102/0x285 [ 446.367174][ C3] ? do_raw_spin_lock+0x120/0x2b0 [ 446.413445][ C3] ? handle_irq_event_percpu+0x160/0x160 [ 446.466934][ C3] ? rwlock_bug.part.0+0x90/0x90 [ 446.506783][ C3] handle_fasteoi_irq+0x22f/0x9f0 [ 446.547561][ C3] ? handle_level_irq+0x6e0/0x6e0 [ 446.593283][ C3] common_interrupt+0x96/0x1f0 [ 446.634397][ C3] asm_common_interrupt+0x1e/0x40 [ 446.673155][ C3] RIP: 0010:__do_softirq+0x1ba/0xa91 [ 446.727057][ C3] Code: c7 c0 58 3c b6 89 48 c1 e8 03 42 80 3c 30 00 0f 85 ea 07 00 00 48 83 3d ab 3a 96 01 00 0f 84 b7 06 00 00 fb 66 0f 1f 44 00 00 <48> c7 44 24 08 c0 90 a0 89 b8 ff ff ff ff 0f bc 04 24 83 c0 01 89 [ 446.973590][ C3] RSP: 0018:ffffc90000598f70 EFLAGS: 00000286 [ 447.037105][ C3] RAX: 1ffffffff136c78b RBX: ffff88802beb8b00 RCX: 1ffffffff1564571 [ 447.116370][ C3] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 [ 447.186145][ C3] RBP: ffffc90000667ac0 R08: 0000000000000001 R09: 0000000000000001 [ 447.270155][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.336247][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 447.413026][ C3] asm_call_on_stack+0xf/0x20 [ 447.455452][ C3] [ 447.477611][ C3] do_softirq_own_stack+0x9d/0xd0 [ 447.520969][ C3] irq_exit_rcu+0x235/0x280 [ 447.554948][ C3] sysvec_apic_timer_interrupt+0x51/0xf0 [ 447.609480][ C3] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 447.667888][ C3] RIP: 0010:console_unlock+0xabc/0xe60 [ 447.733221][ C3] Code: ff df 48 c1 e8 03 80 3c 10 00 0f 85 60 03 00 00 48 83 3d ce f8 58 08 00 0f 84 81 02 00 00 e8 5b 0a 17 00 48 8b 7c 24 30 57 9d <0f> 1f 44 00 00 e9 cb fe ff ff e8 45 0a 17 00 44 89 ea 48 c7 c6 a0 [ 447.966569][ C3] RSP: 0018:ffffc90000667bc0 EFLAGS: 00000293 [ 448.029547][ C3] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff1564571 [ 448.133599][ C3] RDX: ffff88802beb8b00 RSI: ffffffff815d4385 RDI: 0000000000000293 [ 448.216301][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 448.333481][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff84c2a060 [ 448.448028][ C3] R13: 000000000000011b R14: ffffffff8a3cb4b0 R15: dffffc0000000000 [ 448.553462][ C3] ? netconsole_netdev_event+0x2b0/0x2b0 [ 448.639627][ C3] ? console_unlock+0xab5/0xe60 [ 448.695708][ C3] vprintk_emit+0x2ff/0x740 [ 448.746701][ C3] vprintk_func+0x8f/0x1a6 [ 448.798445][ C3] printk+0xba/0xed [ 448.833234][ C3] ? log_store.cold+0x16/0x16 [ 448.833234][ C3] ? lockdep_hardirqs_on+0x53/0x100 [ 449.074010][ C3] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 449.127762][ C3] ? ___ratelimit+0x59/0x53e [ 449.165477][ C3] ? kauditd_hold_skb+0x13a/0x180 [ 449.221085][ C3] kauditd_hold_skb.cold+0x41/0x50 [ 449.265938][ C3] ? auditd_pid_vnr+0x230/0x230 [ 449.305378][ C3] kauditd_send_queue+0x19d/0x210 [ 449.345104][ C3] ? audit_log_lost+0x180/0x180 [ 449.346190][ C3] kauditd_thread+0x7e7/0xb70 [ 449.346190][ C3] ? auditd_reset+0x170/0x170 [ 449.346190][ C3] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 449.553253][ C3] ? __kthread_parkme+0x4c/0x1e0 [ 449.607855][ C3] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 449.676071][ C3] ? add_wait_queue_exclusive+0x180/0x180 [ 449.747088][ C3] ? lockdep_hardirqs_on+0x53/0x100 [ 449.821033][ C3] ? __kthread_parkme+0x13f/0x1e0 [ 449.879330][ C3] ? auditd_reset+0x170/0x170 [ 449.935496][ C3] kthread+0x3b5/0x4a0 [ 449.990905][ C3] ? __kthread_bind_mask+0xc0/0xc0 [ 449.990905][ C3] ret_from_fork+0x1f/0x30 [ 449.990905][ C3] [ 450.135001][ C3] [ 450.149465][ C3] Memory state around the buggy address: [ 450.246543][ C3] ffffc900044d7c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 450.337547][ C3] ffffc900044d7d00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 450.435616][ C3] >ffffc900044d7d80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 450.528974][ C3] ^ [ 450.583670][ C3] ffffc900044d7e00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 450.672041][ C3] ffffc900044d7e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 450.778823][ C3] ================================================================== [ 450.857770][ C3] Disabling lock debugging due to kernel taint [ 450.927154][ C3] Kernel panic - not syncing: panic_on_warn set ... [ 450.995154][ C3] CPU: 3 PID: 39 Comm: kauditd Tainted: G B 5.9.0-rc5-syzkaller #0 [ 451.095775][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 451.226889][ C3] Call Trace: [ 451.263312][ C3] [ 451.293691][ C3] dump_stack+0x198/0x1fd [ 451.344663][ C3] ? i801_isr+0xa50/0xbf0 [ 451.394076][ C3] panic+0x347/0x7c0 [ 451.433846][ C3] ? __warn_printk+0xf3/0xf3 [ 451.474164][ C3] ? i801_isr+0xb2d/0xbf0 [ 451.503745][ C3] ? i801_isr+0xb2d/0xbf0 [ 451.547035][ C3] end_report+0x4d/0x53 [ 451.594374][ C3] kasan_report.cold+0xd/0x37 [ 451.633818][ C3] ? i801_isr+0xb2d/0xbf0 [ 451.666399][ C3] i801_isr+0xb2d/0xbf0 [ 451.698384][ C3] ? check_acpi_smo88xx_device+0x1e0/0x1e0 [ 451.743714][ C3] ? handle_irq_event+0xed/0x285 [ 451.774083][ C3] ? lock_is_held_type+0xbb/0xf0 [ 451.816866][ C3] ? check_acpi_smo88xx_device+0x1e0/0x1e0 [ 451.864071][ C3] __handle_irq_event_percpu+0x223/0xaa0 [ 451.919235][ C3] handle_irq_event+0x102/0x285 [ 451.953738][ C3] ? do_raw_spin_lock+0x120/0x2b0 [ 451.983700][ C3] ? handle_irq_event_percpu+0x160/0x160 [ 452.026342][ C3] ? rwlock_bug.part.0+0x90/0x90 [ 452.058429][ C3] handle_fasteoi_irq+0x22f/0x9f0 [ 452.091106][ C3] ? handle_level_irq+0x6e0/0x6e0 [ 452.135776][ C3] common_interrupt+0x96/0x1f0 [ 452.167703][ C3] asm_common_interrupt+0x1e/0x40 [ 452.203707][ C3] RIP: 0010:__do_softirq+0x1ba/0xa91 [ 452.232553][ C3] Code: c7 c0 58 3c b6 89 48 c1 e8 03 42 80 3c 30 00 0f 85 ea 07 00 00 48 83 3d ab 3a 96 01 00 0f 84 b7 06 00 00 fb 66 0f 1f 44 00 00 <48> c7 44 24 08 c0 90 a0 89 b8 ff ff ff ff 0f bc 04 24 83 c0 01 89 [ 452.394760][ C3] RSP: 0018:ffffc90000598f70 EFLAGS: 00000286 [ 452.426451][ C3] RAX: 1ffffffff136c78b RBX: ffff88802beb8b00 RCX: 1ffffffff1564571 [ 452.483853][ C3] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 [ 452.544893][ C3] RBP: ffffc90000667ac0 R08: 0000000000000001 R09: 0000000000000001 [ 452.610130][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 452.673844][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 452.734123][ C3] asm_call_on_stack+0xf/0x20 [ 452.774105][ C3] [ 452.795364][ C3] do_softirq_own_stack+0x9d/0xd0 [ 452.849347][ C3] irq_exit_rcu+0x235/0x280 [ 452.895206][ C3] sysvec_apic_timer_interrupt+0x51/0xf0 [ 452.974816][ C3] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 453.028618][ C3] RIP: 0010:console_unlock+0xabc/0xe60 [ 453.083817][ C3] Code: ff df 48 c1 e8 03 80 3c 10 00 0f 85 60 03 00 00 48 83 3d ce f8 58 08 00 0f 84 81 02 00 00 e8 5b 0a 17 00 48 8b 7c 24 30 57 9d <0f> 1f 44 00 00 e9 cb fe ff ff e8 45 0a 17 00 44 89 ea 48 c7 c6 a0 [ 453.189008][ C3] RSP: 0018:ffffc90000667bc0 EFLAGS: 00000293 [ 453.303189][ C3] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff1564571 [ 453.391356][ C3] RDX: ffff88802beb8b00 RSI: ffffffff815d4385 RDI: 0000000000000293 [ 453.456636][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 453.523233][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff84c2a060 [ 453.597774][ C3] R13: 000000000000011b R14: ffffffff8a3cb4b0 R15: dffffc0000000000 [ 453.663907][ C3] ? netconsole_netdev_event+0x2b0/0x2b0 [ 453.703089][ C3] ? console_unlock+0xab5/0xe60 [ 453.727098][ C3] vprintk_emit+0x2ff/0x740 [ 453.754176][ C3] vprintk_func+0x8f/0x1a6 [ 453.783482][ C3] printk+0xba/0xed [ 453.826479][ C3] ? log_store.cold+0x16/0x16 [ 453.873358][ C3] ? lockdep_hardirqs_on+0x53/0x100 [ 453.909117][ C3] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 453.944107][ C3] ? ___ratelimit+0x59/0x53e [ 453.986235][ C3] ? kauditd_hold_skb+0x13a/0x180 [ 454.017542][ C3] kauditd_hold_skb.cold+0x41/0x50 [ 454.053267][ C3] ? auditd_pid_vnr+0x230/0x230 [ 454.094190][ C3] kauditd_send_queue+0x19d/0x210 [ 454.136582][ C3] ? audit_log_lost+0x180/0x180 [ 454.173798][ C3] kauditd_thread+0x7e7/0xb70 [ 454.224893][ C3] ? auditd_reset+0x170/0x170 [ 454.278680][ C3] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 454.333609][ C3] ? __kthread_parkme+0x4c/0x1e0 [ 454.388364][ C3] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 454.433213][ C3] ? add_wait_queue_exclusive+0x180/0x180 [ 454.478073][ C3] ? lockdep_hardirqs_on+0x53/0x100 [ 454.523656][ C3] ? __kthread_parkme+0x13f/0x1e0 [ 454.554128][ C3] ? auditd_reset+0x170/0x170 [ 454.593210][ C3] kthread+0x3b5/0x4a0 [ 454.627132][ C3] ? __kthread_bind_mask+0xc0/0xc0 [ 454.673402][ C3] ret_from_fork+0x1f/0x30 [ 454.713683][ C3] Kernel Offset: disabled [ 454.713683][ C3] Rebooting in 86400 seconds..