[ 31.505579] kauditd_printk_skb: 9 callbacks suppressed [ 31.505586] audit: type=1800 audit(1568914960.861:33): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 31.532654] audit: type=1800 audit(1568914960.861:34): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.734858] random: sshd: uninitialized urandom read (32 bytes read) [ 49.047986] audit: type=1400 audit(1568914978.401:35): avc: denied { map } for pid=6996 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 49.095881] random: sshd: uninitialized urandom read (32 bytes read) [ 49.699989] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.28' (ECDSA) to the list of known hosts. [ 55.776169] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/19 17:43:05 fuzzer started [ 55.984945] audit: type=1400 audit(1568914985.341:36): avc: denied { map } for pid=7005 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 56.799287] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/19 17:43:07 dialing manager at 10.128.0.105:36039 2019/09/19 17:43:07 syscalls: 2471 2019/09/19 17:43:07 code coverage: enabled 2019/09/19 17:43:07 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/19 17:43:07 extra coverage: extra coverage is not supported by the kernel 2019/09/19 17:43:07 setuid sandbox: enabled 2019/09/19 17:43:07 namespace sandbox: enabled 2019/09/19 17:43:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/19 17:43:07 fault injection: enabled 2019/09/19 17:43:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/19 17:43:07 net packet injection: enabled 2019/09/19 17:43:07 net device setup: enabled [ 59.463701] random: crng init done 17:44:37 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) socket$inet(0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r4, 0x0, 0x80000003) 17:44:37 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) 17:44:37 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:44:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) 17:44:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 147.922752] audit: type=1400 audit(1568915077.281:37): avc: denied { map } for pid=7023 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1085 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 148.221771] IPVS: ftp: loaded support on port[0] = 21 [ 148.892387] IPVS: ftp: loaded support on port[0] = 21 [ 148.899350] chnl_net:caif_netlink_parms(): no params data found [ 148.955020] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.963153] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.970812] device bridge_slave_0 entered promiscuous mode [ 148.983372] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.989843] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.999339] device bridge_slave_1 entered promiscuous mode [ 149.021883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.032720] IPVS: ftp: loaded support on port[0] = 21 [ 149.043209] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.074326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.082085] team0: Port device team_slave_0 added [ 149.089229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.096782] team0: Port device team_slave_1 added [ 149.115975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.123642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.158272] chnl_net:caif_netlink_parms(): no params data found [ 149.212531] device hsr_slave_0 entered promiscuous mode [ 149.280479] device hsr_slave_1 entered promiscuous mode [ 149.342968] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 149.358390] IPVS: ftp: loaded support on port[0] = 21 [ 149.365424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.407852] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.414638] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.422527] device bridge_slave_0 entered promiscuous mode [ 149.429691] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.436678] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.444318] device bridge_slave_1 entered promiscuous mode [ 149.464761] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.471581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.478472] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.484896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.506635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.516159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.555714] chnl_net:caif_netlink_parms(): no params data found [ 149.564576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.572681] team0: Port device team_slave_0 added [ 149.580748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.587911] team0: Port device team_slave_1 added [ 149.598154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.607659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.713116] device hsr_slave_0 entered promiscuous mode [ 149.770449] device hsr_slave_1 entered promiscuous mode [ 149.842687] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 149.850559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.883998] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.891947] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.900334] device bridge_slave_0 entered promiscuous mode [ 149.923402] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.932095] IPVS: ftp: loaded support on port[0] = 21 [ 149.942233] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.955199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 149.966399] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.973579] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.980992] device bridge_slave_1 entered promiscuous mode [ 150.014218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.062318] chnl_net:caif_netlink_parms(): no params data found [ 150.078152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.118846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.129265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.137592] team0: Port device team_slave_0 added [ 150.144418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.152161] team0: Port device team_slave_1 added [ 150.171899] IPVS: ftp: loaded support on port[0] = 21 [ 150.179180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.205189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.214421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.224106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.241694] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.248162] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.255398] device bridge_slave_0 entered promiscuous mode [ 150.267062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.275819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.285304] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.291842] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.301743] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.308123] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.317130] device bridge_slave_1 entered promiscuous mode [ 150.402367] device hsr_slave_0 entered promiscuous mode [ 150.440482] device hsr_slave_1 entered promiscuous mode [ 150.481413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.489038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.554757] chnl_net:caif_netlink_parms(): no params data found [ 150.563422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.571388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.579220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.587209] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.593825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.607106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.616629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.641412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.650958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.673970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.682605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.690554] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.697163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.709946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.717333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.725683] team0: Port device team_slave_0 added [ 150.735045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.743332] team0: Port device team_slave_1 added [ 150.751356] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.772848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.782568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.793717] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.816438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.825453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.833585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.840635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.848529] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.855500] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.863046] device bridge_slave_0 entered promiscuous mode [ 150.869829] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.876783] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.884241] device bridge_slave_1 entered promiscuous mode [ 150.908857] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.923344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.933420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.983868] device hsr_slave_0 entered promiscuous mode [ 151.020555] device hsr_slave_1 entered promiscuous mode [ 151.071396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.079209] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 151.086803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.095568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.103827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.112155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.121217] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.127307] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.137187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.146716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 151.159882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.170306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.178229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.188416] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.194907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.202685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.210538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.218883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.235627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.243611] team0: Port device team_slave_0 added [ 151.249419] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.258129] team0: Port device team_slave_1 added [ 151.263791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.271869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.281602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.291140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.310134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.317374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.325622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.334027] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.340491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.347326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.355731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.363465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.374485] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.394689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.405446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.462628] device hsr_slave_0 entered promiscuous mode [ 151.500630] device hsr_slave_1 entered promiscuous mode [ 151.541419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.554029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.562309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.570269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.577900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.585713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.593637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.606870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.615166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 151.624164] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.631770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.664862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.675538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.686720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.695258] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 151.717815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.725994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.736253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.746448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.757160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.763632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.781867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.789780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.804121] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.825885] chnl_net:caif_netlink_parms(): no params data found [ 151.845844] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.854254] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.865167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.913359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.923950] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.932280] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.938740] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.946829] device bridge_slave_0 entered promiscuous mode [ 151.965304] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.973803] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.981894] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.988896] device bridge_slave_1 entered promiscuous mode [ 152.003243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.009770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.017165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.029194] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.036857] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.056816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.071980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.087577] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.121602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.129703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.141542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.149759] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.156734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.166722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 152.182200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.189588] team0: Port device team_slave_0 added [ 152.205112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.219600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.231717] audit: type=1400 audit(1568915081.591:38): avc: denied { map } for pid=7066 comm="syz-executor.2" path="socket:[25038]" dev="sockfs" ino=25038 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 [ 152.264679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:44:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.274365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.290436] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.297030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.311583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 152.318943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.328149] team0: Port device team_slave_1 added [ 152.337523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.352459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.361603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 17:44:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.369162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.376734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.391262] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.397476] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.425200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.441645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.454962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.467181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 17:44:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.490450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.498502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.509718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.517650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.529741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:44:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8949, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 152.537738] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.544167] bridge0: port 1(bridge_slave_0) entered forwarding state 17:44:41 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.596246] audit: type=1400 audit(1568915081.951:39): avc: denied { create } for pid=7087 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 152.627727] device hsr_slave_0 entered promiscuous mode 17:44:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.638664] audit: type=1400 audit(1568915081.981:40): avc: denied { ioctl } for pid=7087 comm="syz-executor.0" path="socket:[26117]" dev="sockfs" ino=26117 ioctlcmd=0x8949 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:44:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.691002] device hsr_slave_1 entered promiscuous mode 17:44:42 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 152.743132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.759362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.768672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.776133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.784032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.793370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.807895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 152.826433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.838563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 152.860471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.868373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.879137] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.885575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.895303] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 152.905437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.914393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.923686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.938708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.946806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.955236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.964800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.979600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 152.988585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.997485] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.004313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.011941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.018904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.026780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.036289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.046005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.053731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.062165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.069810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.078051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.086233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.094975] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.102078] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.111139] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.117219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.130695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.145352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.152968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.161263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.168886] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.175620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.182796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.190885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.199756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.209338] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.218730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.226226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.233748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.241815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.249385] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.255878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.263219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.271084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.284484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.299965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.308686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.329112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.341079] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.347382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.356268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.367995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.377990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.391621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.400981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.409041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.417367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.425523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.435432] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.448662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.458615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.471869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.479622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.489301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.501621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.508719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.518655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.530313] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.536693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.548723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.559647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.572328] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.584230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.593237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.596947] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 [ 153.611632] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.617745] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.634730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.643773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.656581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.664756] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.671245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.681421] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.690064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.698500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.705868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.714325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.722072] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.728445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.737980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.748118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.756894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.765832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.777112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.789463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.797675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.806204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.815463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.829541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.838570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.851422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.861788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.881725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.899745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.907986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.918902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.927864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.943085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.949145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.965119] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.976895] 8021q: adding VLAN 0 to HW filter on device batadv0 17:44:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:44:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x1) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:44 executing program 1: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x6800) 17:44:44 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000480)) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) 17:44:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 155.108927] usb usb5: usbfs: process 7157 (syz-executor.0) did not claim interface 0 before use [ 155.130744] hrtimer: interrupt took 36555 ns [ 155.144232] bond0: Releasing backup interface bond_slave_1 17:44:44 executing program 5: setpriority(0x2, 0x0, 0x1ff) 17:44:44 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x8e, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) 17:44:44 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 17:44:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0xac01, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) 17:44:44 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = dup2(r0, r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 17:44:44 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='%', 0x1, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x7ff) 17:44:44 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='%', 0x1, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x7ff) 17:44:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:45 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000480)) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2802}}, 0x14}}, 0x0) 17:44:45 executing program 3: r0 = userfaultfd(0x0) r1 = dup2(r0, r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 17:44:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) 17:44:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:45 executing program 3: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) clone(0x808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) [ 155.780231] audit: type=1400 audit(1568915085.131:41): avc: denied { create } for pid=7203 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 17:44:45 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='%', 0x1, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 17:44:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}], 0x1, 0x0) [ 155.837809] audit: type=1400 audit(1568915085.181:42): avc: denied { write } for pid=7203 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 155.851473] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:44:45 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = dup2(r0, r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 17:44:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:45 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getpriority(0x2, 0x0) 17:44:45 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:45 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f000000b000/0x1000)=nil) shmget(0x3, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 17:44:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00\x00\x00\t\xf6\x00', 0x3bc) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x15f, 0x0, 0x0, 0x98c60aa9aa64a816) close(0xffffffffffffffff) 17:44:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 17:44:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 156.346048] audit: type=1400 audit(1568915085.701:43): avc: denied { read } for pid=7236 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 17:44:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:44:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:44:45 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:45 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 17:44:46 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f000000b000/0x1000)=nil) shmat(r0, &(0x7f000000a000/0x4000)=nil, 0x6000) r1 = shmget(0x3, 0x4000, 0x20, &(0x7f000000b000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r4}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 17:44:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xfffffffffffffeef}) 17:44:46 executing program 5: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:46 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:46 executing program 4: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:46 executing program 3: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:46 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:46 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 17:44:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) close(r0) 17:44:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="51dca50d5e0bcfe47bf070") shmctl$SHM_INFO(0x0, 0xe, 0x0) 17:44:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:47 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x616, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x43, 0x0, &(0x7f0000000000)=""/67, 0x7, 0x0, 0x15, 0x50, &(0x7f00000002c0)="67748627f7431e8f2b9701dcaa49dc53d12c3ded55", &(0x7f0000000300)="8082c7d9114b9305a481896bfd4fa4f6f53a0c0a8b0a28c6bb8e6ebefa3c750cf9ebdc419de20e36ddd193119b3209d2f706432724cc063184dd601c69df5103d51ccfbdee260b428928e9ecb97e0bd2"}, 0x40) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0xfffffd55) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x15, 0x6, 0x5, 0xc000000, 0x1, 0x1, 0x8, [], 0x0, r1, 0x4, 0x4}, 0x3c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) 17:44:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000100000a000000", @ANYRES32=r2, @ANYBLOB="08000880000000001400020000000000000000ff7f000003000000011400010000f70000af0000000000ffffac1e0001140006000000000009f77f6569cd3e02eaa15791"], 0x5c}}, 0x0) 17:44:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000340)={0x1bb5, "0bc7336352f4f7eca0e55b8e726721d746ca73482ff932e6027271e437321897"}) 17:44:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:47 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x100000000, 0x80000000, 0xbb]}) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:44:47 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000040)) 17:44:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev\x00', 0x551702, 0x0) 17:44:47 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:47 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 17:44:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000040)=0x68) 17:44:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) getpgid(0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) r0 = open(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@mcast2}}}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) mq_notify(0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 17:44:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 17:44:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:48 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) 17:44:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 158.922434] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:44:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:48 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 17:44:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:48 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 159.126258] bond0: Releasing backup interface bond_slave_1 [ 159.257095] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:44:48 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bcsf0\x00') socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='bcsf0\x00\x00\x00\x89\xa1\x00h\x11\x00') 17:44:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 17:44:48 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, r0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:48 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 17:44:48 executing program 0: 17:44:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 17:44:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) [ 159.677776] bond0: Releasing backup interface bond_slave_1 17:44:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 159.750449] protocol 88fb is buggy, dev hsr_slave_0 [ 159.755777] protocol 88fb is buggy, dev hsr_slave_1 [ 159.756222] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:44:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 17:44:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 17:44:49 executing program 5: creat(0x0, 0xffffffffffdffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:49 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:49 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) 17:44:49 executing program 3: prctl$PR_SET_THP_DISABLE(0x29, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 17:44:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 17:44:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@id, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) poll(&(0x7f0000000100)=[{r1}, {r2}, {r0}], 0x3, 0x0) 17:44:49 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:49 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:49 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 17:44:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xd, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000240)=0x98) 17:44:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0x0) 17:44:49 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:50 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, 0x0) 17:44:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x1) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:50 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r0) 17:44:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:44:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 17:44:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 160.977571] bond0: Releasing backup interface bond_slave_1 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr, 0x0, 0x0, '6J\x00\x00 \x00\x00\x00\xe1\xff\xff\xff\x00'}, 0x2c) 17:44:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:50 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x1) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 161.306313] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:44:50 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:44:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) [ 161.435621] audit: type=1326 audit(1568915090.791:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7657 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 17:44:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 17:44:51 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x1) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x03\n', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:44:51 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0xf, r0) 17:44:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) [ 161.629044] IPVS: Scheduler module ip_vs_6J not found [ 161.637536] IPVS: Scheduler module ip_vs_6J not found 17:44:51 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) [ 161.717206] bond0: Releasing backup interface bond_slave_1 17:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000000)=0x54) 17:44:51 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 17:44:51 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80005520, 0x0) 17:44:51 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x40000000000000a, 0x0, 0xa, 0x2}, 0x10}}, 0x0) 17:44:51 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) [ 162.287159] audit: type=1326 audit(1568915091.641:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 17:44:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) 17:44:51 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17:44:51 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:51 executing program 0: write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:51 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:52 executing program 1: seccomp(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:52 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) [ 162.695121] audit: type=1326 audit(1568915092.051:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7745 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 17:44:52 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:52 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x20000100000000a, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8000008800, &(0x7f0000000000)={0xa, 0x200000000004e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:44:52 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 17:44:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088ca1fff", 0x0, 0x100}, 0x28) 17:44:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 17:44:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) [ 163.145179] audit: type=1326 audit(1568915092.501:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7768 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 17:44:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e039d2693783115f1c9c3aeec798da797f8efe208d4ddca332", 0x19}, {&(0x7f0000000180)="126ab81935d0f9352bb375685aeaf3e3bde2e4c56dd8a0625d36ba9438878d8643bf244c6d4fd55b25c701bbf0cd9b756c7b2a0182a7e0e6c79adf9fd0e1a3afd3a60c70cb01d566fdc9699c238e6bfe451ad1930c9e8db21a02abdd4b120f7f53fe57ec95ba95", 0x67}], 0x2}], 0x1, 0x0) 17:44:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, 0x0) 17:44:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) [ 163.470661] audit: type=1326 audit(1568915092.831:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7745 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 17:44:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x40000000000000a, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 17:44:53 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:53 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 17:44:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200000000000000007a5b00"], 0x10}}, 0x0) 17:44:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='memory.events\x00\x12\xed)\xaf\xf9\x1e=8\xcd\x04\xacI\x8c\xc1o\xd8<\xd3\xd2\v\x9a\xf5\x1b13\xb7N\xa2\xa6@\x856u{G\xeewq\x16\x14\xf0^\xa2\xd6\xd4N_1*\x85\x13\x956\xbbs^Uc\xdb\x84\xd8\xd8\b,eC\xcc8\a\x89\xdc\x12\x84\xbaw\xb2q\x13o\xe02R\xf5J\x84\xc3U\xd1U\xbf\xa6\xff\x17\x8c\\!D\xd1A\x9a,\vJ\x82\xe3\x1c\xc5\xa6\x9c1\xba\xf2\'\xa7\x95\r\rL\x9e\xf0;\x16b_\xb6\xddK\x05/\xa8_2\xeb4\xbb\xba\xb6e\xf7\xec\a\x10\xf4*\xa1\xce\xa6\xbf\x01\xdb0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x402c542d, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:44:53 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") timer_create(0x9, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {r1}}, &(0x7f0000000140)) [ 164.277904] audit: type=1400 audit(1568915093.631:50): avc: denied { wake_alarm } for pid=7844 comm="syz-executor.5" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 17:44:54 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x100006}]}) 17:44:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:44:54 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:54 executing program 4: migrate_pages(0x0, 0x8, 0x0, 0x0) 17:44:54 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='configfs\x00\x1a\x92\xc8\xb1\x8a\x02\x9d\xb5x\x15\xa8\xfe$\aZ\xa5;\xa4[\xc2:XD\x01\xa7s6aX\xca\x0e\xb8xM\xf3\x9e\tXoQ\xef\x92r#\x7f;\xde\xdb\xe6\x00S\x13\xd4\xe0\x01\xb8\xa4\x1a\x06I\xa4\xec4r\x93C\xe5\xbf:k\xaf\xec\f\x89\x84\x8b\xa5\x92\xce\xdd=L\xafG\xf1|\x96V\xc7g\x87\x0e\x00\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) 17:44:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000009500000000800002519b2d86e51836cdfb87b8331a5d15a89331511ce5c53800"/55], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x268, 0x10, 0x0}, 0x70) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) socketpair(0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xe37a2d01de312a6a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) socket(0x1e, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@local, @in=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000180)=0xe8) r1 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001300)={r1, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002700)={{{@in6=@initdev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000e00)=0xffffffffffffff1c) r4 = getgid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000018c0)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000700000001040000020000003c37000008000000008000000000000000000000060000000400000000000000628d000006000000ff070000090000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000038006f776e657200"/461, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x8) r5 = accept4(0xffffffffffffffff, &(0x7f0000001840)=@xdp, &(0x7f0000000100)=0xfffffffffffffddc, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) getgid() getgid() r6 = socket$inet(0x10, 0x3, 0x0) read(r6, &(0x7f0000001300)=""/4096, 0x1000) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r7, 0x0, 0x0) gettid() socket(0x2, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r8, &(0x7f0000000040)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0xaa, 0x0, 0x0) epoll_wait(r9, &(0x7f0000000340)=[{}], 0x1, 0x80000000) r10 = epoll_create1(0x0) epoll_pwait(r10, &(0x7f0000000140)=[{}], 0x1, 0xaa, 0x0, 0x0) socket(0xa, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x0, 0x0, 0xfffffffffffffe3d) 17:44:54 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 17:44:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 164.919225] kasan: CONFIG_KASAN_INLINE enabled [ 164.931094] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 164.955047] audit: type=1326 audit(1568915094.311:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7858 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0 [ 164.983250] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 164.989533] Modules linked in: [ 164.992753] CPU: 0 PID: 7861 Comm: syz-executor.4 Not tainted 4.14.145 #0 [ 164.999697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.009358] task: ffff8880a9fd4740 task.stack: ffff88805e628000 [ 165.015589] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 165.020766] RSP: 0018:ffff88805e62faa8 EFLAGS: 00010206 [ 165.026146] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc9000b669000 [ 165.033544] RDX: 000000000000009d RSI: ffffffff85240e44 RDI: 0000000000000090 [ 165.040825] RBP: ffff88805e62fc40 R08: 0000000000000001 R09: ffff8880a9fd4fe0 [ 165.048245] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 165.055514] R13: ffff88809c372300 R14: ffff88805e62fd60 R15: ffff88806794e000 [ 165.062777] FS: 00007fe28717d700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 165.071191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.077079] CR2: 000000000075c000 CR3: 0000000098ec1000 CR4: 00000000001406f0 [ 165.084398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.091674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.099098] Call Trace: [ 165.101701] ? lock_sock_nested+0x9e/0x110 [ 165.105942] ? find_held_lock+0x35/0x130 [ 165.110002] ? tcp_sendpage+0x60/0x60 [ 165.113792] ? trace_hardirqs_on_caller+0x400/0x590 [ 165.118959] ? trace_hardirqs_on+0xd/0x10 [ 165.123118] tcp_sendmsg+0x30/0x50 [ 165.126653] inet_sendmsg+0x122/0x500 [ 165.130918] ? inet_recvmsg+0x500/0x500 [ 165.134897] sock_sendmsg+0xce/0x110 [ 165.138783] SYSC_sendto+0x206/0x310 [ 165.142522] ? SYSC_connect+0x2d0/0x2d0 [ 165.146525] ? kasan_check_read+0x11/0x20 [ 165.150667] ? _copy_to_user+0x87/0xd0 [ 165.154563] ? put_timespec64+0xb4/0x100 [ 165.158615] ? nsecs_to_jiffies+0x30/0x30 [ 165.162755] ? SyS_clock_gettime+0xf8/0x180 [ 165.167075] SyS_sendto+0x40/0x50 [ 165.170523] ? SyS_getpeername+0x30/0x30 [ 165.174578] do_syscall_64+0x1e8/0x640 [ 165.178463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.183307] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 165.188691] RIP: 0033:0x4598e9 [ 165.191871] RSP: 002b:00007fe28717cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 165.199622] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 165.208866] RDX: 1192aca8268c9077 RSI: 0000000020000240 RDI: 0000000000000003 [ 165.216151] RBP: 000000000075bf20 R08: 0000000000000000 R09: ffffffffffffff06 [ 165.223415] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe28717d6d4 [ 165.230809] R13: 00000000004c7874 R14: 00000000004dd2a8 R15: 00000000ffffffff [ 165.238853] Code: d4 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 165.258193] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff88805e62faa8 [ 165.283063] kobject: 'kvm' (ffff888219ffe550): kobject_uevent_env [ 165.287303] kobject: 'loop3' (ffff8880a49e80e0): kobject_uevent_env [ 165.289695] ---[ end trace e2c01ae0cac6f32e ]--- [ 165.289705] Kernel panic - not syncing: Fatal exception [ 165.291744] Kernel Offset: disabled [ 165.312721] Rebooting in 86400 seconds..