Warning: Permanently added '[localhost]:44979' (ECDSA) to the list of known hosts. [ 235.056007][ T42] audit: type=1400 audit(1599338062.393:42): avc: denied { map } for pid=10559 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/09/05 20:34:22 fuzzer started 2020/09/05 20:34:23 dialing manager at 10.0.2.10:42083 [ 236.316765][ T42] audit: type=1400 audit(1599338063.653:43): avc: denied { integrity } for pid=10578 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 2020/09/05 20:34:23 syscalls: 3346 2020/09/05 20:34:23 code coverage: enabled 2020/09/05 20:34:23 comparison tracing: enabled 2020/09/05 20:34:23 extra coverage: enabled 2020/09/05 20:34:23 setuid sandbox: enabled 2020/09/05 20:34:23 namespace sandbox: enabled 2020/09/05 20:34:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/05 20:34:23 fault injection: enabled 2020/09/05 20:34:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/05 20:34:23 net packet injection: enabled 2020/09/05 20:34:23 net device setup: enabled 2020/09/05 20:34:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/05 20:34:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/05 20:34:23 USB emulation: enabled 2020/09/05 20:34:23 hci packet injection: enabled 20:35:24 executing program 0: 20:35:24 executing program 1: [ 297.833956][ T42] audit: type=1400 audit(1599338125.163:44): avc: denied { map } for pid=10580 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 20:35:25 executing program 2: 20:35:26 executing program 3: [ 299.769260][T10582] IPVS: ftp: loaded support on port[0] = 21 [ 299.769279][T10583] IPVS: ftp: loaded support on port[0] = 21 [ 300.188904][T10582] chnl_net:caif_netlink_parms(): no params data found [ 300.190500][T10586] IPVS: ftp: loaded support on port[0] = 21 [ 300.208161][T10583] chnl_net:caif_netlink_parms(): no params data found [ 300.383809][T10587] IPVS: ftp: loaded support on port[0] = 21 [ 300.448048][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.463080][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.485738][T10583] device bridge_slave_0 entered promiscuous mode [ 300.519534][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.531585][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.544295][T10583] device bridge_slave_1 entered promiscuous mode [ 300.563270][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.578257][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.590226][T10582] device bridge_slave_0 entered promiscuous mode [ 300.626076][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.641992][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.654923][T10582] device bridge_slave_1 entered promiscuous mode [ 300.677759][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.724336][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.747511][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.765156][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.836093][T10583] team0: Port device team_slave_0 added [ 300.850950][T10582] team0: Port device team_slave_0 added [ 300.864473][T10582] team0: Port device team_slave_1 added [ 300.877165][T10583] team0: Port device team_slave_1 added [ 300.915380][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.924941][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.960485][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.987722][T10586] chnl_net:caif_netlink_parms(): no params data found [ 301.012511][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.022972][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.067840][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.095528][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.109512][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.163440][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.195077][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.207918][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.255789][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.384272][T10582] device hsr_slave_0 entered promiscuous mode [ 301.452935][T10582] device hsr_slave_1 entered promiscuous mode [ 301.624468][T10583] device hsr_slave_0 entered promiscuous mode [ 301.652102][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 301.652123][ T3141] Bluetooth: hci1: command 0x0409 tx timeout [ 301.701968][T10583] device hsr_slave_1 entered promiscuous mode [ 301.761656][T10583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.788038][T10583] Cannot create hsr debugfs directory [ 301.805342][T10587] chnl_net:caif_netlink_parms(): no params data found [ 301.918993][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.937810][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.957945][T10586] device bridge_slave_0 entered promiscuous mode [ 301.989868][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.000617][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.019690][T10586] device bridge_slave_1 entered promiscuous mode [ 302.131543][ T3141] Bluetooth: hci2: command 0x0409 tx timeout [ 302.138752][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.182313][T10587] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.195010][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.208029][T10587] device bridge_slave_0 entered promiscuous mode [ 302.223847][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.262013][T10587] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.275617][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.289425][T10587] device bridge_slave_1 entered promiscuous mode [ 302.291529][ T28] Bluetooth: hci3: command 0x0409 tx timeout [ 302.318423][T10586] team0: Port device team_slave_0 added [ 302.332984][T10586] team0: Port device team_slave_1 added [ 302.405131][T10587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.420299][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.432838][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.477281][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.499480][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.511752][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.561906][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.600249][T10587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.655363][T10587] team0: Port device team_slave_0 added [ 302.679072][T10587] team0: Port device team_slave_1 added [ 302.706289][ T42] audit: type=1400 audit(1599338130.043:45): avc: denied { create } for pid=10582 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 302.780755][ T42] audit: type=1400 audit(1599338130.053:46): avc: denied { write } for pid=10582 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 302.858329][ T42] audit: type=1400 audit(1599338130.053:47): avc: denied { read } for pid=10582 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 302.945291][T10586] device hsr_slave_0 entered promiscuous mode [ 303.052120][T10586] device hsr_slave_1 entered promiscuous mode [ 303.121678][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.142051][T10586] Cannot create hsr debugfs directory [ 303.175343][T10582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.256035][T10582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.380876][T10587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.398299][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.440476][T10587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.474674][T10582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.568556][T10582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.656433][T10587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.667924][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.732090][ T2874] Bluetooth: hci1: command 0x041b tx timeout [ 303.732194][T10587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.732259][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 303.789511][T10583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.853035][T10583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.916019][T10583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.997685][T10583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.153634][T10587] device hsr_slave_0 entered promiscuous mode [ 304.211437][ T3141] Bluetooth: hci2: command 0x041b tx timeout [ 304.231722][T10587] device hsr_slave_1 entered promiscuous mode [ 304.291543][T10587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.306101][T10587] Cannot create hsr debugfs directory [ 304.371737][ T2874] Bluetooth: hci3: command 0x041b tx timeout [ 304.462527][T10586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.534925][T10586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.624420][T10586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.756076][T10586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.879720][T10587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.958652][T10587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.088210][T10587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.223897][T10587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.331708][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.355566][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.386863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.399103][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.415188][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.427299][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.439574][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.460645][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.480992][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.494758][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.507275][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.517568][ T3252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.539371][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.559674][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.577157][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.596188][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.614429][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.637257][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.655073][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.672487][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.682538][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.697173][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.723584][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.737925][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.751975][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.764272][ T3252] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.776611][ T3252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.796601][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.812304][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.824854][ T36] Bluetooth: hci1: command 0x040f tx timeout [ 305.837557][ T36] Bluetooth: hci0: command 0x040f tx timeout [ 305.838540][T10587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.878734][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.903925][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.918707][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.944889][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.969566][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.008262][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.034103][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.048085][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.067665][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.086686][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.107530][T10587] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.125019][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.137476][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.150486][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.163548][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.178203][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.194365][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.210688][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.224193][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.247819][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.259208][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.271123][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.284924][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.299655][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.311936][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.324655][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.334766][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.346515][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.360509][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.382391][T10583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.383922][T10618] Bluetooth: hci2: command 0x040f tx timeout [ 306.402824][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.421167][T10582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.440418][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.454218][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.461945][ T2874] Bluetooth: hci3: command 0x040f tx timeout [ 306.478773][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.507542][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.519161][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.534141][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.568135][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.586646][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.605361][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.619269][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.631039][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.643401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.656998][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.667889][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.682191][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.705640][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.721806][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.736249][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.748514][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.777140][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.789460][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.800669][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.812816][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.827198][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.848966][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.870150][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.892294][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.904459][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.917223][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.937225][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.957253][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.972340][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.987465][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.005193][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.020243][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.037081][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.052838][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.072350][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.083726][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.117860][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.130504][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.144675][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.156523][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.180457][T10586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.198184][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.209162][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.223196][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.243682][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.255754][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.268056][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.279316][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.290178][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.302355][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.316858][T10583] device veth0_vlan entered promiscuous mode [ 307.343071][T10583] device veth1_vlan entered promiscuous mode [ 307.354688][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.364491][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.375562][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.389528][T10587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.413275][T10582] device veth0_vlan entered promiscuous mode [ 307.422712][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.432836][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.444144][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.454596][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.472001][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.484171][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.495857][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.514307][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.530016][T10582] device veth1_vlan entered promiscuous mode [ 307.553986][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.563658][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.575077][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.585093][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.600618][T10583] device veth0_macvtap entered promiscuous mode [ 307.609132][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.618618][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.629381][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.655880][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.667134][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.678525][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.688938][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.700080][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.710180][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.731193][T10583] device veth1_macvtap entered promiscuous mode [ 307.745584][T10587] device veth0_vlan entered promiscuous mode [ 307.766029][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.778624][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.792106][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.805838][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.818506][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.832263][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.844303][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.858927][T10582] device veth0_macvtap entered promiscuous mode [ 307.874155][T10582] device veth1_macvtap entered promiscuous mode [ 307.892362][ T3141] Bluetooth: hci0: command 0x0419 tx timeout [ 307.892368][ T2874] Bluetooth: hci1: command 0x0419 tx timeout [ 307.895926][T10586] device veth0_vlan entered promiscuous mode [ 307.940324][T10587] device veth1_vlan entered promiscuous mode [ 307.958183][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.977474][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.007128][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.054698][T10586] device veth1_vlan entered promiscuous mode [ 308.098422][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.148162][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.188385][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.206298][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 308.234129][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.270217][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.299676][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 308.330572][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.360103][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.380004][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.393635][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.409865][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.433010][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.451481][ T3141] Bluetooth: hci2: command 0x0419 tx timeout [ 308.481116][T10586] device veth0_macvtap entered promiscuous mode [ 308.523900][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.531935][ T2874] Bluetooth: hci3: command 0x0419 tx timeout [ 308.545194][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.608418][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.741215][T10586] device veth1_macvtap entered promiscuous mode [ 308.817250][T10587] device veth0_macvtap entered promiscuous mode [ 308.843204][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.875114][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.906437][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.939929][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.183881][ T42] audit: type=1400 audit(1599338136.523:48): avc: denied { associate } for pid=10582 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 309.310597][T10587] device veth1_macvtap entered promiscuous mode [ 309.445869][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 309.478158][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.514912][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 309.552227][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.586249][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.619013][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 309.624987][T10582] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 309.660991][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.740869][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 309.804440][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:35:37 executing program 0: [ 309.884535][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 20:35:37 executing program 0: [ 309.916351][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 20:35:37 executing program 0: [ 309.951034][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 20:35:37 executing program 0: [ 310.030679][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 20:35:37 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) [ 310.075031][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:35:37 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000000c0)) [ 310.242040][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.296094][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.333096][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.358817][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.395723][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 310.422907][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.451882][T10587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.545597][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.570209][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.610381][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.633264][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.655241][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.682788][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.711670][T10587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 310.736155][T10587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.757988][T10587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.770952][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.792995][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x7b08a6eb34d2548e) 20:35:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000009c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 20:35:38 executing program 0: mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x0, &(0x7f0000001000/0x1000)=nil) 20:35:38 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000040)=ANY=[]}) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x7b08a6eb34d2548e) 20:35:38 executing program 0: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4c011) 20:35:38 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x80108906, 0x0) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x7b08a6eb34d2548e) 20:35:38 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) keyctl$KEYCTL_CAPABILITIES(0xe, 0x0, 0x0) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x7b08a6eb34d2548e) 20:35:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x502) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x20000049) 20:35:38 executing program 3: r0 = socket(0x18, 0x0, 0x2) connect$rds(r0, 0x0, 0x0) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x0, 0x7b08a6eb34d2548e) 20:35:38 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 20:35:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0xfffffffd, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x0, 0x7b08a6eb34d2548e) [ 311.438883][ T42] audit: type=1400 audit(1599338138.773:49): avc: denied { ioctl } for pid=10673 comm="syz-executor.0" path="socket:[38776]" dev="sockfs" ino=38776 ioctlcmd=0x89f0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x0, 0x7b08a6eb34d2548e) [ 311.577329][T10687] tipc: Enabling of bearer rejected, failed to enable media 20:35:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="43be"], 0x8) 20:35:38 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) [ 311.629400][T10693] tipc: Enabling of bearer rejected, failed to enable media 20:35:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) 20:35:39 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) keyctl$KEYCTL_CAPABILITIES(0x10, &(0x7f0000000280)=""/242, 0xf2) 20:35:39 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 20:35:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r3 = socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000016dc0)) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_RATE={0x6, 0x5, {0x14, 0x2}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x6c}}, 0x0) 20:35:39 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 20:35:39 executing program 0: ioprio_set$uid(0x0, 0xffffffffffffffff, 0x786727e7eb0704f6) 20:35:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000080)={'gre0\x00', 0x0}) 20:35:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 20:35:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) getcwd(&(0x7f0000000080)=""/243, 0xf3) 20:35:39 executing program 2: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000000080)={'caif0\x00', @ifru_hwaddr=@broadcast}) 20:35:39 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) 20:35:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000040)='/dev/fd#\x00', 0x0, 0x3) ioctl$FLOPPY_FDRAWCMD(r0, 0xc0101282, 0x0) 20:35:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 20:35:39 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40186f40, 0x0) 20:35:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$vhost_msg(r0, &(0x7f0000000140)={0x30, {0x0, 0x0, 0x0}}, 0x48) read$hidraw(r0, 0x0, 0x0) 20:35:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x1d, &(0x7f0000000500), 0x4) 20:35:39 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x7}, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) [ 312.092566][T10755] syz-executor.3 (10755): /proc/10752/oom_adj is deprecated, please use /proc/10752/oom_score_adj instead. 20:35:39 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2e, &(0x7f0000001480), 0x10) 20:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) eventfd(0x0) 20:35:39 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r0, 0x0, 0x0) 20:35:39 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) bind(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) 20:35:39 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r0, 0x0, 0x0) 20:35:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 20:35:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) 20:35:39 executing program 0: r0 = socket(0x23, 0x5, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) 20:35:39 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x5414, 0x0) 20:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_open_procfs(0x0, 0x0) r1 = gettid() syz_open_procfs(r1, 0x0) 20:35:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0x1c) 20:35:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000740)={@dev={0xac, 0x4}, @private}, 0x3) 20:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 20:35:39 executing program 1: syz_mount_image$ocfs2(&(0x7f0000001ec0)='ocfs2\x00', &(0x7f0000001f00)='./file0\x00', 0x0, 0x0, 0x0, 0x80d880, &(0x7f0000003f80)='\\(\x00') [ 312.458278][ T42] audit: type=1400 audit(1599338139.793:50): avc: denied { create } for pid=10810 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 312.518720][ T42] audit: type=1400 audit(1599338139.793:51): avc: denied { write } for pid=10810 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 20:35:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x6364, 0x0) 20:35:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:39 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @ipv4}}) 20:35:39 executing program 3: r0 = socket$inet(0x2, 0x2000000000003, 0x43) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x29, 0x0, 0x0) 20:35:39 executing program 1: r0 = socket$inet(0x2, 0x2000000000003, 0x43) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x7, 0x2}, 0xc) 20:35:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x6, 0x8, &(0x7f0000000280)=0x4000, 0x4) 20:35:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='@[!\x00', 0x0, 0x0) 20:35:40 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x88, 0x2, 0x0, 0x4) 20:35:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000200)=ANY=[]) 20:35:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 20:35:40 executing program 1: r0 = socket(0x15, 0x5, 0x0) connect$can_j1939(r0, 0x0, 0x0) 20:35:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001600a901"], 0x48}}, 0x0) recvmmsg(r1, &(0x7f0000022900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:35:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_snmp6\x00') 20:35:40 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x333e004, &(0x7f0000001180)) 20:35:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8929, &(0x7f0000000000)={'vxcan0\x00'}) 20:35:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000200)=ANY=[]) 20:35:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 2: r0 = socket(0x2, 0x2, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x20) 20:35:41 executing program 1: r0 = socket(0xa, 0x6, 0x0) recvmsg$kcm(r0, &(0x7f0000003300)={0x0, 0x0, 0x0}, 0x40010041) 20:35:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x10fcc1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x109202, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 20:35:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) syz_mount_image$afs(&(0x7f0000000140)='afs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x40000, &(0x7f0000000640)) 20:35:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 20:35:41 executing program 0: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 20:35:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x65, 0x0, 0x0) 20:35:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') fchmod(r0, 0x0) 20:35:41 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x38) 20:35:41 executing program 3: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$vhost_msg(r0, 0x0, 0x0) 20:35:41 executing program 3: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'xcbc-aes-neon\x00'}}, 0x0, 0x0) 20:35:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 20:35:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x5}, 0x14}}, 0x0) 20:35:41 executing program 3: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) [ 314.521492][ T42] audit: type=1400 audit(1599338141.843:52): avc: denied { create } for pid=10921 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 20:35:41 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket(0x6, 0x0, 0x0) [ 314.542920][ T3141] Bluetooth: hci3: command 0x0405 tx timeout 20:35:41 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r0, 0x10d, 0x0, 0x0, 0x4) 20:35:41 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 314.603809][ T42] audit: type=1400 audit(1599338141.873:53): avc: denied { write } for pid=10921 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 20:35:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x30, &(0x7f0000000040)={0x0, 0x10, [], [@generic={0x0, 0x83, "d57728f82ccb3f10861e929855a04c7401182e68e90122478ac63b4814a6637a6a87b7a60e4470ed38b38cd03cdab4ee1b5b85d702683256490e03c149e56f4d0e581ebb6e6417c6e7d6ca1854d4299a7fce536091089625dc21cbd2113a89ac35f7e2cc1701ae1c697a1df36cb541106408c67d6ad230cda08a66ba2244ab2599d73f"}]}, 0x90) 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 20:35:42 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0385720, &(0x7f00000000c0)) [ 314.736009][ T42] audit: type=1400 audit(1599338142.073:54): avc: denied { read } for pid=10946 comm="syz-executor.2" path="socket:[41625]" dev="sockfs" ino=41625 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'wg0\x00', @ifru_data=&(0x7f0000000200)="2500000000000000140000000000eff1ffffffffffff7eb30000e3ffffff00"}) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x8) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890d, 0x0) 20:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000d80)=0xfc) 20:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:42 executing program 0: bpf$BPF_LSM_PROG_LOAD(0x15, 0x0, 0x0) 20:35:42 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:42 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:42 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 20:35:43 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:43 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x40000000}) 20:35:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 20:35:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 20:35:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 20:35:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) 20:35:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 20:35:43 executing program 0: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8901, &(0x7f0000000040)=@req={0xfdfdffff}) 20:35:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)) 20:35:44 executing program 1: socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) [ 316.693118][T11061] [drm:drm_calc_timestamping_constants] *ERROR* crtc 33: Can't calculate constants, dotclock = 0! [ 316.725874][ C2] ------------[ cut here ]------------ 20:35:44 executing program 1: socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e80)={0x10, 0x13, 0x9b6aaf6543050e23}, 0x10}], 0x1}, 0x0) [ 316.729623][ C2] WARNING: CPU: 2 PID: 11061 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x31e/0x3b0 [ 316.729623][ C2] Kernel panic - not syncing: panic_on_warn set ... [ 316.729623][ C2] CPU: 2 PID: 11061 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 316.780845][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 316.781400][ C2] Call Trace: [ 316.781400][ C2] [ 316.813211][ C2] dump_stack+0x18f/0x20d [ 316.813741][ C2] panic+0x2e3/0x75c [ 316.813741][ C2] ? __warn_printk+0xf3/0xf3 [ 316.813741][ C2] ? printk+0xba/0xed [ 316.835978][ C2] ? log_store.cold+0x16/0x16 [ 316.841463][ C2] ? __warn.cold+0x5/0x45 [ 316.841463][ C2] ? __warn+0xd6/0x1f2 [ 316.841463][ C2] ? vkms_vblank_simulate+0x31e/0x3b0 [ 316.841463][ C2] __warn.cold+0x20/0x45 [ 316.872661][ C2] ? vkms_vblank_simulate+0x31e/0x3b0 [ 316.872661][ C2] report_bug+0x1bd/0x210 [ 316.872661][ C2] handle_bug+0x38/0x90 [ 316.872661][ C2] ? find_held_lock+0x2d/0x110 [ 316.872661][ C2] exc_invalid_op+0x14/0x40 [ 316.872661][ C2] asm_exc_invalid_op+0x12/0x20 [ 316.921524][ C2] RIP: 0010:vkms_vblank_simulate+0x31e/0x3b0 [ 316.921524][ C2] Code: 85 9e 00 00 00 48 8b 95 48 02 00 00 4c 89 e1 bf 02 00 00 00 48 c7 c6 e0 6c b3 88 e8 fc 41 ad ff e9 e5 fe ff ff e8 02 56 11 fd <0f> 0b e9 88 fd ff ff e8 26 dd 50 fd e9 11 fe ff ff 4c 89 ef e8 19 [ 316.921524][ C2] RSP: 0018:ffffc90000540da8 EFLAGS: 00010046 [ 316.921524][ C2] RAX: 0000000000010001 RBX: ffff888078d25888 RCX: ffffffff8462c453 [ 316.921524][ C2] RDX: ffff88805b8dcdc0 RSI: ffffffff8462c6ce RDI: 0000000000000007 [ 316.921524][ C2] RBP: 0000000000068ffb R08: 0000000000000001 R09: ffff88805b8dd688 [ 316.921524][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888078d24d38 [ 316.921524][ C2] R13: 0000000000000000 R14: ffff888078d25888 R15: dffffc0000000000 [ 316.921524][ C2] ? vkms_vblank_simulate+0xa3/0x3b0 [ 316.921524][ C2] ? vkms_vblank_simulate+0x31e/0x3b0 [ 316.921524][ C2] ? vkms_vblank_simulate+0x31e/0x3b0 [ 316.921524][ C2] __hrtimer_run_queues+0x6a9/0xfc0 [ 316.921524][ C2] ? vkms_disable_vblank+0x20/0x20 [ 316.921524][ C2] ? lockdep_hardirqs_on+0x81/0xf0 [ 316.921524][ C2] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 316.921524][ C2] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 316.921524][ C2] hrtimer_interrupt+0x32a/0x930 [ 316.921524][ C2] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 316.921524][ C2] asm_call_on_stack+0xf/0x20 [ 316.921524][ C2] [ 316.921524][ C2] sysvec_apic_timer_interrupt+0xb2/0xf0 [ 316.921524][ C2] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 316.921524][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x8c/0xe0 [ 316.921524][ C2] Code: 48 c7 c0 08 fb b4 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 37 48 83 3d 63 c7 c9 01 00 74 22 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 45 66 64 f9 65 8b 05 fe ca 16 78 [ 316.921524][ C2] RSP: 0018:ffffc90004eafb08 EFLAGS: 00000282 [ 316.921524][ C2] RAX: 1ffffffff1369f61 RBX: 0000000000000282 RCX: 1ffffffff155e989 [ 316.921524][ C2] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 317.195562][ C2] RBP: ffff888078d24390 R08: 0000000000000001 R09: 0000000000000001 [ 317.195562][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.195562][ C2] R13: 0000000000000282 R14: ffff888078d24390 R15: ffff8880287e8950 [ 317.195562][ C2] drm_vblank_get+0x147/0x1d0 [ 317.195562][ C2] drm_wait_vblank_ioctl+0x3bd/0x1980 [ 317.251561][ C2] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 317.251561][ C2] ? lock_downgrade+0x830/0x830 [ 317.251561][ C2] ? find_held_lock+0x2d/0x110 [ 317.251561][ C2] ? __might_fault+0x11f/0x1d0 [ 317.251561][ C2] drm_ioctl_kernel+0x220/0x2e0 [ 317.251561][ C2] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 317.251561][ C2] ? drm_setversion+0x8a0/0x8a0 [ 317.251561][ C2] ? __might_fault+0x190/0x1d0 [ 317.251561][ C2] drm_ioctl+0x4d2/0x96f [ 317.251561][ C2] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 317.251561][ C2] ? drm_version+0x3d0/0x3d0 [ 317.251561][ C2] ? __might_fault+0x190/0x1d0 [ 317.251561][ C2] ? _copy_to_user+0x126/0x160 [ 317.251561][ C2] ? __fget_files+0x294/0x400 [ 317.251561][ C2] ? drm_version+0x3d0/0x3d0 [ 317.251561][ C2] ksys_ioctl+0x11a/0x180 [ 317.251561][ C2] __x64_sys_ioctl+0x6f/0xb0 [ 317.251561][ C2] do_syscall_64+0x2d/0x70 [ 317.251561][ C2] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 317.251561][ C2] RIP: 0033:0x45d469 [ 317.251561][ C2] Code: 9d af fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b af fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.251561][ C2] RSP: 002b:00007f09efe8fc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.251561][ C2] RAX: ffffffffffffffda RBX: 00000000006fd0c0 RCX: 000000000045d469 [ 317.251561][ C2] RDX: 0000000020000040 RSI: 00000000c018643a RDI: 0000000000000003 [ 317.251561][ C2] RBP: 00000000004aa3e7 R08: 0000000000000000 R09: 0000000000000000 [ 317.251561][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075cf00 [ 317.251561][ C2] R13: 00007fff638d0f9f R14: 00007f09efe70000 R15: 0000000000000003 [ 317.251561][ C2] Kernel Offset: disabled [ 317.251561][ C2] Rebooting in 86400 seconds..