[ 111.259089][ T39] audit: type=1400 audit(1580249618.440:41): avc: denied { map } for pid=8650 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:33035' (ECDSA) to the list of known hosts. [ 114.816872][ T39] audit: type=1400 audit(1580249622.000:42): avc: denied { map } for pid=8662 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/28 22:13:42 fuzzer started 2020/01/28 22:13:44 dialing manager at 10.0.2.10:44629 2020/01/28 22:13:44 syscalls: 2935 2020/01/28 22:13:44 code coverage: enabled 2020/01/28 22:13:44 comparison tracing: enabled 2020/01/28 22:13:44 extra coverage: enabled 2020/01/28 22:13:44 setuid sandbox: enabled 2020/01/28 22:13:44 namespace sandbox: enabled 2020/01/28 22:13:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/28 22:13:44 fault injection: enabled 2020/01/28 22:13:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/28 22:13:44 net packet injection: enabled 2020/01/28 22:13:44 net device setup: enabled 2020/01/28 22:13:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/28 22:13:44 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 116.987197][ T39] audit: type=1400 audit(1580249624.170:43): avc: denied { integrity } for pid=8682 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 22:14:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) [ 157.806416][ T39] audit: type=1400 audit(1580249664.980:44): avc: denied { map } for pid=8685 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2081 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 22:14:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 22:14:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 158.228502][ T8686] IPVS: ftp: loaded support on port[0] = 21 [ 158.228529][ T8688] IPVS: ftp: loaded support on port[0] = 21 [ 158.373687][ T8690] IPVS: ftp: loaded support on port[0] = 21 22:14:25 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 158.553105][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 158.569697][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 158.640280][ T8694] IPVS: ftp: loaded support on port[0] = 21 [ 158.724303][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.735440][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.747969][ T8688] device bridge_slave_0 entered promiscuous mode [ 158.762979][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.771985][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.782185][ T8688] device bridge_slave_1 entered promiscuous mode [ 158.829215][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.843004][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.853656][ T8686] device bridge_slave_0 entered promiscuous mode [ 158.864266][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.873418][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.883352][ T8686] device bridge_slave_1 entered promiscuous mode [ 158.897916][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.913146][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.944434][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 158.971822][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.989499][ T8688] team0: Port device team_slave_0 added [ 159.001965][ T8688] team0: Port device team_slave_1 added [ 159.012724][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.045338][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.053956][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.087121][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.124661][ T8686] team0: Port device team_slave_0 added [ 159.148432][ T8686] team0: Port device team_slave_1 added [ 159.169283][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.182681][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.234529][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.256179][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.271657][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.285155][ T8690] device bridge_slave_0 entered promiscuous mode [ 159.313685][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.327248][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.373978][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.393132][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.408137][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.420240][ T8690] device bridge_slave_1 entered promiscuous mode [ 159.445518][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.459500][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.507784][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.620427][ T8688] device hsr_slave_0 entered promiscuous mode [ 159.688210][ T8688] device hsr_slave_1 entered promiscuous mode [ 159.772749][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.800241][ T8694] chnl_net:caif_netlink_parms(): no params data found [ 159.860597][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.039098][ T8686] device hsr_slave_0 entered promiscuous mode [ 160.135408][ T8686] device hsr_slave_1 entered promiscuous mode [ 160.205326][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.221447][ T8686] Cannot create hsr debugfs directory [ 160.244273][ T8690] team0: Port device team_slave_0 added [ 160.270101][ T8690] team0: Port device team_slave_1 added [ 160.309568][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.322467][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.344659][ T8694] device bridge_slave_0 entered promiscuous mode [ 160.383282][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.403500][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.425399][ T8694] device bridge_slave_1 entered promiscuous mode [ 160.441536][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.461086][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.522597][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.576124][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.590459][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.650087][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.683740][ T8694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.703124][ T8694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.759344][ T8694] team0: Port device team_slave_0 added [ 160.786013][ T8694] team0: Port device team_slave_1 added [ 160.878817][ T8690] device hsr_slave_0 entered promiscuous mode [ 160.965322][ T8690] device hsr_slave_1 entered promiscuous mode [ 161.045224][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.060715][ T8690] Cannot create hsr debugfs directory [ 161.082697][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.096291][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.146086][ T8694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.172295][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.184664][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.231919][ T8694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.348182][ T8694] device hsr_slave_0 entered promiscuous mode [ 161.426260][ T8694] device hsr_slave_1 entered promiscuous mode [ 161.485096][ T8694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.495005][ T8694] Cannot create hsr debugfs directory [ 161.557762][ T39] audit: type=1400 audit(1580249668.740:45): avc: denied { create } for pid=8688 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.574966][ T8688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.614437][ T39] audit: type=1400 audit(1580249668.740:46): avc: denied { write } for pid=8688 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.674637][ T39] audit: type=1400 audit(1580249668.740:47): avc: denied { read } for pid=8688 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.806624][ T8688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.917405][ T8688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.002632][ T8688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.129515][ T8686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.247392][ T8686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.328913][ T8686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.461436][ T8686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.601032][ T8690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.678254][ T8690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.750875][ T8690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.835131][ T8690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.913161][ T8694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.967755][ T8694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.048319][ T8694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.108812][ T8694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.312606][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.345285][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.370777][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.382669][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.401388][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.429599][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.441356][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.454772][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.467391][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.479708][ T3249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.491461][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.501466][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.521866][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.533540][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.556060][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.565669][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.579851][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.591627][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.601017][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.622518][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.632018][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.642283][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.653363][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.669942][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.679459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.692903][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.711303][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.723338][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.737279][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.749699][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.766389][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.781103][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.790663][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.806018][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.823346][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.841981][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.854365][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.870850][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.889191][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.908827][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.934358][ T8694] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.964742][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.990974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.013204][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.030929][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.048787][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.068695][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.089137][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.107842][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.127781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.145793][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.163496][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.180014][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.195419][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.208763][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.221410][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.231978][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.244116][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.270732][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.290789][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.308777][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.324445][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.339169][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.354297][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.368847][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.388648][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.403827][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.414717][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.433583][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.447502][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.467835][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.492597][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.506278][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.520398][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.532431][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.557267][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.570180][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.582133][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.593690][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.608476][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.625858][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.649555][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.674718][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.701894][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.726373][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.747401][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.771689][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.819648][ T8690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.851756][ T8690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.890037][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.910252][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.933157][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.954334][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.975795][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.993454][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.010868][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.042002][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.058235][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.075699][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.094046][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.120493][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.138384][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.149710][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.162234][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.185972][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.215324][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.226257][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.236713][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.248127][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.263788][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.279098][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.297229][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.311305][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.330742][ T8694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.353986][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.366286][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.393219][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.409114][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.435835][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.452627][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.469877][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.481966][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.491547][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.502805][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.516038][ T8688] device veth0_vlan entered promiscuous mode [ 165.545168][ T8688] device veth1_vlan entered promiscuous mode [ 165.564691][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.581823][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.596100][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.611852][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.623846][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.645431][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.656317][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.667280][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.681380][ T8690] device veth0_vlan entered promiscuous mode [ 165.706547][ T8690] device veth1_vlan entered promiscuous mode [ 165.716390][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.727544][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.739018][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.755420][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.765351][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.774775][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.785703][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.795989][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.805800][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.815863][ T8686] device veth0_vlan entered promiscuous mode [ 165.828150][ T8694] device veth0_vlan entered promiscuous mode [ 165.844427][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.856182][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.877065][ T8688] device veth0_macvtap entered promiscuous mode [ 165.891037][ T8694] device veth1_vlan entered promiscuous mode [ 165.900129][ T8686] device veth1_vlan entered promiscuous mode [ 165.913786][ T8688] device veth1_macvtap entered promiscuous mode [ 165.949787][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.962302][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.979820][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.000313][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.012367][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.024127][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.035871][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.047324][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.058258][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.069649][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.090893][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.106959][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.118454][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.129694][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.142723][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.161966][ T8690] device veth0_macvtap entered promiscuous mode [ 166.185994][ T8690] device veth1_macvtap entered promiscuous mode [ 166.212418][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.217887][ T39] audit: type=1400 audit(1580249673.400:48): avc: denied { associate } for pid=8688 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 166.230117][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.292422][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.309451][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.328073][ T8694] device veth0_macvtap entered promiscuous mode [ 166.342538][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.353585][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.371194][ T8686] device veth0_macvtap entered promiscuous mode [ 166.386192][ T8694] device veth1_macvtap entered promiscuous mode [ 166.409315][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.437595][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.469565][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.472831][ T39] audit: type=1400 audit(1580249673.650:49): avc: denied { open } for pid=8704 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 166.493773][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.535765][ T39] audit: type=1400 audit(1580249673.650:50): avc: denied { kernel } for pid=8704 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 166.561011][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.599120][ T39] audit: type=1400 audit(1580249673.650:51): avc: denied { confidentiality } for pid=8704 comm="syz-executor.1" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 166.667214][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.693935][ T8686] device veth1_macvtap entered promiscuous mode [ 166.729101][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.757864][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.780592][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.810263][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.837101][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.858212][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.908914][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.927353][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.942592][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.962427][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.980969][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.998359][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.016199][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 22:14:34 executing program 1: [ 167.040466][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:14:34 executing program 1: [ 167.057312][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.073331][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:14:34 executing program 1: [ 167.089269][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:14:34 executing program 1: [ 167.104464][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.125958][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.143651][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.155476][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.181645][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.191234][ T8718] usb usb7: usbfs: process 8718 (syz-executor.2) did not claim interface 0 before use [ 167.200643][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.233715][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.251095][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.380965][ C0] hrtimer: interrupt took 39286 ns [ 167.673623][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.685342][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.701051][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.712568][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.726331][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.741179][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.755120][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.769200][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.781398][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.794492][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.809147][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.823632][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.835558][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:14:35 executing program 1: 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) 22:14:35 executing program 1: 22:14:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 168.056271][ T8732] usb usb7: usbfs: process 8732 (syz-executor.2) did not claim interface 0 before use 22:14:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) [ 168.159255][ T8751] usb usb7: usbfs: process 8751 (syz-executor.2) did not claim interface 0 before use 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 168.263937][ T8769] usb usb7: usbfs: process 8769 (syz-executor.2) did not claim interface 0 before use 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) [ 168.483966][ T8807] usb usb7: usbfs: process 8807 (syz-executor.2) did not claim interface 0 before use 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:35 executing program 0: 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:35 executing program 0: 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 0: 22:14:35 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:35 executing program 0: 22:14:35 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 22:14:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 0: 22:14:36 executing program 1: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 1: semget$private(0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 0: 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 0: 22:14:36 executing program 3: semget$private(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 3: semget$private(0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 0: 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 0: 22:14:36 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 0: 22:14:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) dup2(r0, 0xffffffffffffffff) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 2: 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e}) 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 2: 22:14:36 executing program 0: 22:14:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x0, 0x2e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe}) 22:14:36 executing program 0: 22:14:36 executing program 2: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe}) 22:14:37 executing program 0: 22:14:37 executing program 2: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe}) 22:14:37 executing program 0: 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 0: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x0, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 22:14:37 executing program 1: 22:14:37 executing program 0: 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) 22:14:37 executing program 0: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e, 0x0, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) 22:14:37 executing program 0: 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 0: 22:14:37 executing program 1: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) dup2(r0, 0xffffffffffffffff) 22:14:37 executing program 2: 22:14:37 executing program 0: 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 0: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) dup2(r0, 0xffffffffffffffff) 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 0: 22:14:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffe, 0x2e}) dup2(r0, 0xffffffffffffffff) 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 0: 22:14:37 executing program 3: 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 3: 22:14:37 executing program 0: 22:14:37 executing program 1: 22:14:37 executing program 3: 22:14:37 executing program 2: 22:14:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 22:14:37 executing program 3: 22:14:37 executing program 1: 22:14:37 executing program 2: 22:14:37 executing program 1: 22:14:37 executing program 2: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x25, 0x0, 0x0, 0x0, @binary="8f90b69043bbf4ce12e4f72a70401ef072ca6d363a6439f85e4dd72a4dd1b7c3e9"}]}]}, 0x48}}, 0x0) 22:14:37 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 22:14:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x262) 22:14:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 22:14:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) 22:14:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 22:14:37 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000633277fbac141411e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:14:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x5}, 0x14}}, 0x0) [ 170.825753][ T39] audit: type=1400 audit(1580249677.990:52): avc: denied { prog_load } for pid=9178 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 22:14:38 executing program 1: clone(0x120000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x300, 0x3, 0x2b8, 0x0, 0x140, 0x140, 0x140, 0x0, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x440}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) bpf$MAP_CREATE(0x0, 0x0, 0x0) 22:14:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 170.930717][ T39] audit: type=1400 audit(1580249678.000:53): avc: denied { create } for pid=9180 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 171.025773][ T39] audit: type=1400 audit(1580249678.010:54): avc: denied { write } for pid=9180 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 171.035132][ T9190] xt_addrtype: ipv6 BLACKHOLE matching not supported 22:14:38 executing program 1: ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r1, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) [ 171.127991][ T9193] usb usb7: usbfs: process 9193 (syz-executor.2) did not claim interface 0 before use [ 171.246628][ T9197] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 22:14:38 executing program 1: ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r1, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) [ 171.400247][ T9200] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 171.697897][ T39] audit: type=1400 audit(1580249678.880:55): avc: denied { prog_run } for pid=9178 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 189.267218][ T0] NOHZ: local_softirq_pending 08 [ 190.556651][ T13] kasan: CONFIG_KASAN_INLINE enabled [ 190.572191][ T13] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 190.593970][ T13] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 190.602745][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.5.0-syzkaller #0 [ 190.602745][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 190.602745][ T13] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 190.602745][ T13] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 190.602745][ T13] Code: c3 e8 42 b1 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 190.602745][ T13] RSP: 0018:ffffc9000040f9e0 EFLAGS: 00010206 [ 190.602745][ T13] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399df75 [ 190.602745][ T13] RDX: 0000000000000003 RSI: ffffffff835853bd RDI: 0000000000000018 [ 190.602745][ T13] RBP: ffffc9000040f9e8 R08: ffff88802c5f4340 R09: fffffbfff165a976 [ 190.602745][ T13] R10: fffffbfff165a975 R11: ffffffff8b2d4baf R12: dffffc0000000000 [ 190.602745][ T13] R13: ffffc9000040fb10 R14: ffffc9000040fb10 R15: 000000000000001d [ 190.602745][ T13] FS: 0000000000000000(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 190.602745][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.602745][ T13] CR2: 00007ffe0bf92b98 CR3: 000000001de85000 CR4: 0000000000340ef0 [ 190.602745][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.602745][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.602745][ T13] Call Trace: [ 190.602745][ T13] security_socket_sendmsg+0x77/0xc0 [ 190.602745][ T13] sock_sendmsg+0x45/0x130 [ 190.602745][ T13] kernel_sendmsg+0x44/0x50 [ 190.602745][ T13] rxrpc_send_keepalive+0x1ff/0x940 [ 190.602745][ T13] ? rxrpc_reject_packets+0xab0/0xab0 [ 190.602745][ T13] ? _raw_spin_unlock_bh+0x2c/0x30 [ 190.602745][ T13] ? __local_bh_enable_ip+0x15a/0x270 [ 190.602745][ T13] ? lockdep_hardirqs_on+0x421/0x5e0 [ 190.602745][ T13] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 190.602745][ T13] ? __local_bh_enable_ip+0x15a/0x270 [ 190.602745][ T13] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 190.602745][ T13] ? rxrpc_peer_add_rtt+0x650/0x650 [ 190.602745][ T13] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 190.602745][ T13] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 190.602745][ T13] ? trace_hardirqs_on+0x67/0x240 [ 190.602745][ T13] process_one_work+0xa05/0x17a0 [ 190.602745][ T13] ? mark_held_locks+0xf0/0xf0 [ 190.602745][ T13] ? pwq_dec_nr_in_flight+0x320/0x320 [ 190.602745][ T13] ? lock_acquire+0x190/0x410 [ 190.602745][ T13] worker_thread+0x98/0xe40 [ 190.602745][ T13] ? trace_hardirqs_on+0x67/0x240 [ 190.602745][ T13] kthread+0x361/0x430 [ 190.602745][ T13] ? process_one_work+0x17a0/0x17a0 [ 190.602745][ T13] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 190.602745][ T13] ret_from_fork+0x24/0x30 [ 190.602745][ T13] Modules linked in: [ 191.135281][ T13] ---[ end trace 8b3b1b1375053277 ]--- [ 191.147573][ T13] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 191.163308][ T13] Code: c3 e8 42 b1 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 191.225964][ T13] RSP: 0018:ffffc9000040f9e0 EFLAGS: 00010206 [ 191.242860][ T13] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399df75 [ 191.270967][ T13] RDX: 0000000000000003 RSI: ffffffff835853bd RDI: 0000000000000018 [ 191.284196][ T13] RBP: ffffc9000040f9e8 R08: ffff88802c5f4340 R09: fffffbfff165a976 [ 191.300040][ T13] R10: fffffbfff165a975 R11: ffffffff8b2d4baf R12: dffffc0000000000 [ 191.314229][ T13] R13: ffffc9000040fb10 R14: ffffc9000040fb10 R15: 000000000000001d [ 191.332471][ T13] FS: 0000000000000000(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 191.358115][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.376764][ T13] CR2: 00007facf7c46360 CR3: 000000000986d000 CR4: 0000000000340ef0 [ 191.395175][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.413888][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.429249][ T13] Kernel panic - not syncing: Fatal exception [ 191.438029][ T13] Kernel Offset: disabled [ 191.438029][ T13] Rebooting in 86400 seconds..