Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. [ 39.261859] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/21 09:14:27 fuzzer started [ 39.465986] audit: type=1400 audit(1555838067.471:36): avc: denied { map } for pid=6892 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.286734] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/21 09:14:30 dialing manager at 10.128.0.105:43303 2019/04/21 09:14:30 syscalls: 2434 2019/04/21 09:14:30 code coverage: enabled 2019/04/21 09:14:30 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/21 09:14:30 extra coverage: extra coverage is not supported by the kernel 2019/04/21 09:14:30 setuid sandbox: enabled 2019/04/21 09:14:30 namespace sandbox: enabled 2019/04/21 09:14:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/21 09:14:30 fault injection: enabled 2019/04/21 09:14:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/21 09:14:30 net packet injection: enabled 2019/04/21 09:14:30 net device setup: enabled [ 43.533253] random: crng init done 09:16:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000007f) 09:16:35 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r1, 0x701}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/219, 0xdb}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/42, 0x2a}, {&(0x7f0000001840)=""/114, 0x72}, {&(0x7f00000018c0)=""/250, 0xfa}], 0x5}, 0x4}, {{&(0x7f0000001a40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)}], 0x1, &(0x7f0000001b40)=""/59, 0x3b}, 0x8c2d}, {{&(0x7f0000001b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/49, 0x31}, {&(0x7f0000001d40)=""/252, 0xfc}, {&(0x7f0000001e40)=""/48, 0x30}], 0x4, &(0x7f0000001ec0)=""/104, 0x68}, 0x1ff}, {{&(0x7f0000001f40)=@nl, 0x80, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/1, 0x1}, {&(0x7f0000002000)=""/252, 0xfc}], 0x2, &(0x7f0000002140)=""/235, 0xeb}, 0x80000001}, {{&(0x7f0000002240)=@nl=@unspec, 0x80, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/136, 0x88}, {&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/86, 0x56}, {&(0x7f0000002500)=""/45, 0x2d}], 0x4, &(0x7f0000002580)=""/4096, 0x1000}, 0xb55}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000003580)}, {&(0x7f00000035c0)=""/154, 0x9a}, {&(0x7f0000003680)=""/83, 0x53}, {&(0x7f0000003700)=""/7, 0x7}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/190, 0xbe}, {&(0x7f0000004800)=""/237, 0xed}, {&(0x7f0000004900)=""/38, 0x26}], 0x8, &(0x7f00000049c0)=""/127, 0x7f}, 0x80}], 0x6, 0x100, &(0x7f0000004bc0)) 09:16:35 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x13012, r0, 0x0) 09:16:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 09:16:35 executing program 4: socket(0x400000000010, 0x3, 0x0) r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 167.740591] audit: type=1400 audit(1555838195.751:37): avc: denied { map } for pid=6892 comm="syz-fuzzer" path="/root/syzkaller-shm491761068" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 167.784308] audit: type=1400 audit(1555838195.771:38): avc: denied { map } for pid=6909 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=29 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 168.580286] IPVS: ftp: loaded support on port[0] = 21 [ 168.927341] chnl_net:caif_netlink_parms(): no params data found [ 168.936194] IPVS: ftp: loaded support on port[0] = 21 [ 168.989968] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.998936] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.010870] device bridge_slave_0 entered promiscuous mode [ 169.020134] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.027972] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.036951] device bridge_slave_1 entered promiscuous mode [ 169.061978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.071567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.081819] IPVS: ftp: loaded support on port[0] = 21 [ 169.102513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.110818] team0: Port device team_slave_0 added [ 169.119446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.127454] team0: Port device team_slave_1 added [ 169.139068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.152843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.252161] device hsr_slave_0 entered promiscuous mode [ 169.300487] device hsr_slave_1 entered promiscuous mode [ 169.372811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 169.384455] chnl_net:caif_netlink_parms(): no params data found [ 169.393298] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 169.438385] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.445933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.464030] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.471321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.481990] IPVS: ftp: loaded support on port[0] = 21 [ 169.526661] chnl_net:caif_netlink_parms(): no params data found [ 169.565017] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.572171] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.580912] device bridge_slave_0 entered promiscuous mode [ 169.592129] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.599436] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.606967] device bridge_slave_1 entered promiscuous mode [ 169.646136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.667149] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.695431] IPVS: ftp: loaded support on port[0] = 21 [ 169.715778] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.723848] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.732902] device bridge_slave_0 entered promiscuous mode [ 169.786493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.795065] team0: Port device team_slave_0 added [ 169.800977] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.808928] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.817168] device bridge_slave_1 entered promiscuous mode [ 169.841802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.854270] team0: Port device team_slave_1 added [ 169.868802] chnl_net:caif_netlink_parms(): no params data found [ 169.884709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.894009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.903183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.918500] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.939886] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 169.952762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.022313] device hsr_slave_0 entered promiscuous mode [ 170.060511] device hsr_slave_1 entered promiscuous mode [ 170.116514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.125273] team0: Port device team_slave_0 added [ 170.133954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.141418] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.149484] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.158465] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 170.169978] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.177799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.185685] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.194390] team0: Port device team_slave_1 added [ 170.201463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.209232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.236305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.270980] IPVS: ftp: loaded support on port[0] = 21 [ 170.302391] device hsr_slave_0 entered promiscuous mode [ 170.351210] device hsr_slave_1 entered promiscuous mode [ 170.400465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.407967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.419139] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.427088] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.434117] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.441110] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.449982] device bridge_slave_0 entered promiscuous mode [ 170.468944] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.475690] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.484909] device bridge_slave_1 entered promiscuous mode [ 170.498615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.507144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.517267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.541881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.551636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.559608] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.566642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.586229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.597990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.606861] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.628398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.637846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.646075] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.653297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.661344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.672894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.684836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.709410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.719920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.735742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.760108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.768199] team0: Port device team_slave_0 added [ 170.779203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.788596] team0: Port device team_slave_1 added [ 170.797937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.806308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.815756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.832816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.864632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.875409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.896421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.906088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.915316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.927555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 170.937573] chnl_net:caif_netlink_parms(): no params data found [ 171.004243] device hsr_slave_0 entered promiscuous mode [ 171.060559] device hsr_slave_1 entered promiscuous mode [ 171.130901] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.138542] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 171.150648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.159412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.173050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 171.187278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.204383] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 171.212558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.224194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.233344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.296203] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.305014] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.315340] device bridge_slave_0 entered promiscuous mode [ 171.325666] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.335175] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.343750] device bridge_slave_1 entered promiscuous mode [ 171.354673] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 171.399544] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.417366] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.447532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.458743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.468519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.481116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.490643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 171.508916] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 171.531052] chnl_net:caif_netlink_parms(): no params data found [ 171.545086] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 171.552614] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.561312] team0: Port device team_slave_0 added [ 171.579094] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 171.589613] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 171.598486] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.606046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.614646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.624232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.632892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.645255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 171.653190] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.661083] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.669454] team0: Port device team_slave_1 added [ 171.683883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.699329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.708695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.718781] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.725579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.734456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 09:16:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() syz_execute_func(&(0x7f00000000c0)="410f01f964ff0941c3c4a2c997583e46d8731266420fe2e346dc64c0e83e0f1110c442019dcc6f") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207, 0x28b}], 0x1) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) write$P9_RLOPEN(r1, 0x0, 0x0) tkill(r2, 0x1000000000015) [ 171.759123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.771294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.787058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.799258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.807993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.818695] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.825326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.837683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.845998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 09:16:39 executing program 5: perf_event_open(&(0x7f0000000ac0)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000) [ 171.854719] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.863604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.872187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.881318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.897947] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.918584] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.927562] device bridge_slave_0 entered promiscuous mode [ 171.936542] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.943663] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.951871] device bridge_slave_1 entered promiscuous mode [ 171.964103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.998332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.008767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 09:16:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001}, 0x98) [ 172.017973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.027734] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.034940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.042591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.103181] device hsr_slave_0 entered promiscuous mode [ 172.130581] device hsr_slave_1 entered promiscuous mode [ 172.188094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.204869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.224079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.233603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.242932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.254506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.263796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.275045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.292110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.301037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.309067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.320726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.329602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.345680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.356776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.367283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.380255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 09:16:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x9c00, 0xe30f5ca7]}}, 0x20) [ 172.389087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.397910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.414303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.422856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.433138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 09:16:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x9c00, 0xe30f5ca7]}}, 0x20) [ 172.442287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.451782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.463128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.484501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.500957] team0: Port device team_slave_0 added [ 172.508295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.518562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.528941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.540975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 09:16:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local, @dev}, 0xc) [ 172.549312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.563891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.573416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.585701] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.598737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.608194] team0: Port device team_slave_1 added [ 172.614984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.624933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.635300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.651378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.659012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.667085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.675766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.685988] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 172.694092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.705041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.721442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.728627] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.741996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 09:16:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) [ 172.753439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.812934] device hsr_slave_0 entered promiscuous mode [ 172.870589] device hsr_slave_1 entered promiscuous mode [ 172.912920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.923954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.934506] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.945784] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.962456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.972791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.986478] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.994008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.002065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.011496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.017761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.046345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.063428] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.073368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.084498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.094664] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.101849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.109937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.123505] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.139737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.162961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.170239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.181064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.195922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.206586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.215638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.227228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.237605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.251853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.263563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.277728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.294201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.306517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.324802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.333226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.342435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.358421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.374885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.386471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.396024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.409750] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.416763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.448810] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.462446] audit: type=1400 audit(1555838201.471:39): avc: denied { create } for pid=6999 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:16:41 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 173.473786] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 173.495938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.526307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:16:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x108) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) [ 173.547763] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.566334] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 173.568722] audit: type=1400 audit(1555838201.521:40): avc: denied { write } for pid=6999 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 173.591368] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.610510] audit: type=1400 audit(1555838201.521:41): avc: denied { read } for pid=6999 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 173.645371] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.668610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.680215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.698814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.706045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.716046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.727421] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.735466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.735651] IPVS: ftp: loaded support on port[0] = 21 [ 173.744487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.770918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.779138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.790421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.802468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.812648] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.819987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.834382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.843716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.851349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.861456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.869290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.894347] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.901405] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.909075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.929997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.942225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.953252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.963782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.972652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.980947] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.988004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.996576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.004884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.013398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.020983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.033039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.043395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.056077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.066639] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.073577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.085625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.105303] audit: type=1400 audit(1555838202.111:42): avc: denied { map } for pid=7024 comm="syz-executor.1" path="socket:[25593]" dev="sockfs" ino=25593 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 [ 174.136209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.147902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.156651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.169749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.182165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.195067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.203776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.212631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.222917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.232536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 09:16:42 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1000000000401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000003140)) [ 174.256985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.265082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.274520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.300482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.309375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.332765] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.338982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.349351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.356714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.364493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.372421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.389118] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.398236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.407933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.415769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.433437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.444320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.452431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.463622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.478182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.489412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.504389] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.518244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.349538] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.373850] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.380333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.421198] hrtimer: interrupt took 24793 ns 09:16:43 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x3, [], 0x0}) [ 175.442751] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.451685] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.458129] bridge0: port 1(bridge_slave_0) entered forwarding state 09:16:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0xcdac) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 09:16:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:43 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000010001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 09:16:43 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 09:16:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) msgget$private(0x0, 0x603) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="a41a7adcb5673ce22310338fd43ce2b338a9eaf1976a63652d244f685702740e613e59736af2032aa9", 0x29, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000200)=0xee75) msgget(0xffffffffffffffff, 0x202) get_mempolicy(&(0x7f00000000c0), &(0x7f00000001c0), 0x200, &(0x7f0000ffb000/0x2000)=nil, 0x2) msgctl$IPC_STAT(0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x10000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00, 0xe30f5ca7]}}, 0xfef5) 09:16:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 175.582458] audit: type=1400 audit(1555838203.591:43): avc: denied { create } for pid=7058 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 175.591608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.625976] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 175.701690] audit: type=1400 audit(1555838203.601:44): avc: denied { write } for pid=7058 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 175.724665] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0xcd, 0x2000) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000600)=0x80000001) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000280)="41e97af564108f0fe83a059ff3e866ce6310358c224d84cc49381459cba193930487ee6e8013fbc5607995b637a7b82190b0526b85d7eb5a86831714ee3d2c9a8f59e1402194ef6f5b7ad008d9f57908dc175fb58012ca0376387a9e1ef2411f9484145327f005bc775086ff646047fc6616a3a2d170eea4406c0cea8b4c8cc133769313348085b3a23955c008"}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0x3e, &(0x7f00000001c0)="3d67d4150def67ceceafadd4160c80da91229a2d9cb24be75ee8aa03f6baff322a0531e26bb285421b371a4c491c88f1c768c2decc5d15d9016ebef4643a"}) chdir(&(0x7f0000000000)='./bus\x00') r7 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) [ 175.752933] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x9, 0x4) 09:16:43 executing program 3: socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x5}]}, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 09:16:43 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 176.106582] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:44 executing program 2: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000002740)={[{@resize='resize'}]}) 09:16:44 executing program 4: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x40000}]}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 09:16:44 executing program 1: socket(0x400000000010, 0x3, 0x0) r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:16:44 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x600f, 0x1) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) [ 176.476476] JFS: Cannot determine volume size [ 176.489822] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 176.567528] JFS: Cannot determine volume size [ 176.653278] audit: type=1804 audit(1555838204.661:45): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/10/bus" dev="sda1" ino=16542 res=1 [ 176.700155] audit: type=1804 audit(1555838204.691:46): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/10/bus" dev="sda1" ino=16542 res=1 09:16:44 executing program 5: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') 09:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0//ile0\x00', 0x0) 09:16:44 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) mkdir(0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:44 executing program 3: syz_execute_func(&(0x7f0000000140)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110d4b842419dcccc") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x1502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:16:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 176.729109] audit: type=1804 audit(1555838204.721:47): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/10/bus" dev="sda1" ino=16542 res=1 09:16:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r1, r3, 0x0, 0xffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40) 09:16:44 executing program 0: syz_open_dev$cec(0x0, 0x3, 0x2) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 176.816487] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1, 0x100}], 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 176.880386] protocol 88fb is buggy, dev hsr_slave_0 [ 176.885643] protocol 88fb is buggy, dev hsr_slave_1 09:16:45 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 176.950254] protocol 88fb is buggy, dev hsr_slave_0 [ 176.955409] protocol 88fb is buggy, dev hsr_slave_1 [ 176.985065] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 177.103730] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:45 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) recvfrom$packet(r1, &(0x7f0000000180)=""/60, 0x3c, 0x2, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:45 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(r1, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) 09:16:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = creat(&(0x7f0000001e00)='./bus\x00', 0x80004) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001bc0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001cc0)=0xe8) recvmsg(0xffffffffffffffff, 0x0, 0x2) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000180)=0x10001, 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) sched_getattr(r2, &(0x7f00000001c0), 0x30, 0x0) 09:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190005000f00030600fb120003000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 09:16:45 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 177.404495] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 177.494270] input: syz1 as /devices/virtual/input/input5 [ 177.501752] IPVS: ftp: loaded support on port[0] = 21 [ 177.518669] vim2m vim2m.0: Fourcc format (0x56595559) invalid. 09:16:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x70) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4}, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 09:16:45 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x60) recvmsg(0xffffffffffffffff, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x6c2f547d6d60cfba, 0x2) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:45 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) read(r1, 0x0, 0x0) write(r1, &(0x7f0000000180)="b63db85e1e8d0200000003eaff3df0011dcc606aed53d2bcc2feff04000000ffffe22c9b160096aa1fae", 0x2a) [ 177.710452] audit: type=1400 audit(1555838205.711:48): avc: denied { map } for pid=7212 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26938 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 09:16:45 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:45 executing program 3: r0 = creat(&(0x7f0000001180)='./bus\x00', 0x0) write$9p(r0, &(0x7f0000000400)="d4", 0x1) 09:16:45 executing program 2: [ 177.763946] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 177.951458] input: syz1 as /devices/virtual/input/input6 [ 178.660252] IPVS: ftp: loaded support on port[0] = 21 09:16:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(r1, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) 09:16:46 executing program 3: 09:16:46 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:46 executing program 1: 09:16:46 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000648000/0x2000)=nil, 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x40) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x1) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 09:16:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, 0x0, 0x3) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x9, 0x4) 09:16:46 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:47 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xc96, 0x1000002) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) 09:16:47 executing program 3: 09:16:47 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:47 executing program 3: [ 179.049191] audit: type=1400 audit(1555838207.051:49): avc: denied { relabelto } for pid=7248 comm="syz-executor.2" name="file0" dev="sda1" ino=16542 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=dir permissive=1 09:16:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(r1, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) 09:16:47 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:47 executing program 2: 09:16:47 executing program 3: 09:16:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, 0x0, 0x3) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x9, 0x4) 09:16:47 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:16:47 executing program 3: 09:16:47 executing program 2: 09:16:50 executing program 1: 09:16:50 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:16:50 executing program 3: 09:16:50 executing program 2: 09:16:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, 0x0, 0x3) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x9, 0x4) 09:16:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(r1, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) 09:16:50 executing program 3: 09:16:50 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:16:50 executing program 2: 09:16:50 executing program 1: 09:16:50 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:50 executing program 2: 09:16:50 executing program 3: 09:16:50 executing program 1: 09:16:50 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:50 executing program 0: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:50 executing program 5: 09:16:50 executing program 4: 09:16:50 executing program 3: 09:16:50 executing program 1: 09:16:50 executing program 2: 09:16:50 executing program 0: 09:16:50 executing program 5: 09:16:50 executing program 3: 09:16:50 executing program 0: 09:16:50 executing program 2: 09:16:50 executing program 5: 09:16:50 executing program 1: 09:16:50 executing program 4: 09:16:50 executing program 0: 09:16:50 executing program 2: 09:16:51 executing program 1: 09:16:51 executing program 5: 09:16:51 executing program 0: 09:16:51 executing program 3: 09:16:51 executing program 2: 09:16:51 executing program 1: 09:16:51 executing program 4: 09:16:51 executing program 0: 09:16:51 executing program 5: 09:16:51 executing program 3: 09:16:51 executing program 2: 09:16:51 executing program 4: 09:16:51 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="634d81be6623", @empty=[0x2], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff32, 0x0, @ipv4={[0x207835], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 09:16:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) perf_event_open(&(0x7f00000069c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x4, 0x2) 09:16:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x1000000010027fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:16:51 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 09:16:51 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000dffffffe) 09:16:51 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x5400, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) 09:16:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:16:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000390000)={0x2, 0x0, @local}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10004) fcntl$getown(0xffffffffffffffff, 0x9) sendfile(r0, r1, 0x0, 0x72439a6b) 09:16:51 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000dffffffe) 09:16:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0xc}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 09:16:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:51 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 183.607522] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 183.640618] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 09:16:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") move_pages(0x0, 0x3, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 09:16:51 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="ffff9298a29272fd4af1246f86dd60c22df700102c00fe8000f8f67193aec1d8d30000000000fe8000000000000000000000000000aa2c000000040190780000"], 0x0) 09:16:51 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000219ff0)={0x77359400}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) 09:16:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) read(r0, &(0x7f00000002c0)=""/208, 0xd0) 09:16:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x108) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) msgget$private(0x0, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x6bc, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000740)=""/207, 0x497) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) 09:16:51 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000002002c000000000000000700c01a07625b6be038b66304474f24304a51ef64e4ddabbc4852b95e73ebd0c067"], 0x30}}, 0x0) 09:16:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ipv6_route\x00') sendfile(r1, r3, &(0x7f0000000180)=0xdfffffc, 0xd) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000006000000"], 0x1}}, 0x8004) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:16:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:51 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @raw_data="858955aa2cdc8ee7df371293da96253f51746020535e5ae7cf39c016159e452286d301c16128700ab0a052775de540e51ee06641f33274afec5d4ea427a707dd7a9d392d9729019f6e9a06dfc223bed7ea3dee8ec41fc7c3b27fdb731bd18f11eb58f395abe2e606ee697ffde1f3de02760cb967ee5443b849e1b901ad61512f35440a36004cd9d54951aa53ccc3cf5092a808b6362a066745d6552617f546119d9255b52a06538830759565fdc87c7f6cdae405bd23afdee854bd3697789a50c0ec48e13eb4b22f"}) 09:16:51 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:52 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) link(0x0, 0x0) io_setup(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000dffffffe) 09:16:52 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x154, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x104, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x375}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f0000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x4004, 0x84003ff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x70b5) fallocate(r0, 0x3, 0x0, 0x100000000) 09:16:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setns(r1, 0x0) 09:16:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) [ 184.711845] IPVS: ftp: loaded support on port[0] = 21 09:16:52 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 09:16:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00\x00']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaaafe, 0x0, 0x0, 0xffffffffffffffdd) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x30001, 0x0, [0x1ff, 0x100000000, 0x4, 0xf3, 0x0, 0x0, 0x38, 0x3]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:16:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:52 executing program 2: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 09:16:52 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00!\xa2\x8e\x9a\x82\xa3S\xd4YE\x1bP\xea\xca\xd0\xab\xe5\xd3\xe9r\x93Xh\x9f\x92\x8d\f\xb7\xf3\x8a\xa4-\xde\xb0\xb5\xeb\x97t\xb7M\x85\xee\x92\xe3a\xc3&\xd5\x8d\x05\xc7\xcd\xe6r\xd4M\xa2\xbe=\x9242\x93[\xee\xd0j\xa0\xa2\x1e?\\0\x88\xca\x89N\xe7\x10\xc2\xc2\x8c<\xe3\xf2/\x1d7%\x82\xe9\x05\xbb\xb1\xf4>+\b\xd5\xbb\x99\xb00\xda\xfcI\xaf\x93\xf8\x89\xd8\xaaM\xe2>\xb0\xee\x86:\xd9\xa4\x03\x95\xda\x15\xeb\xfd\xb3\x1dIc\x8a;=\xe6\xc5J\x95\xed\x0e\xa3\x15\x11\xa0\xb2\x86\xc1\x80pQ\xb1$O', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x8) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$setsig(r1, 0xa, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="b4e25632f3df1cd3d2b79b04d0a025cd6725144b26dac478313be97dea746688f262922b17531b10be1e897f85aa97c582993bef3100"/63, 0x3f, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x9, 0xffffffff}, 0x14) shutdown(r3, 0x1) 09:16:52 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0xc}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 09:16:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) [ 184.824758] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 09:16:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:52 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) [ 184.858361] audit: type=1804 audit(1555838212.851:50): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir172345084/syzkaller.254aia/24/bus" dev="sda1" ino=16599 res=1 09:16:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x354daf895057b821) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001}, 0x98) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:16:52 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000dffffffe) 09:16:52 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x30001, 0x0, [0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x38, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 185.055852] audit: type=1804 audit(1555838212.911:51): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir172345084/syzkaller.254aia/24/bus" dev="sda1" ino=16599 res=1 09:16:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 09:16:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0605345, &(0x7f0000000000)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 09:16:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x30001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:16:53 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:16:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x19, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000019"], 0x0, 0x0, 0x0}) 09:16:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 185.346203] audit: type=1400 audit(1555838213.351:52): avc: denied { map } for pid=7596 comm="syz-executor.4" path="/dev/binder0" dev="devtmpfs" ino=361 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 185.361786] binder: undelivered TRANSACTION_COMPLETE [ 185.388919] binder_alloc: 7596: binder_alloc_buf, no vma 09:16:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x9a, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 185.401367] binder: BINDER_SET_CONTEXT_MGR already set 09:16:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) [ 185.427942] binder: 7596:7608 transaction failed 29189/-3, size 0-0 line 2917 [ 185.444693] binder: 7596:7603 ioctl 40046207 0 returned -16 [ 185.467495] binder: undelivered transaction 2, process died. 09:16:53 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="88825505d6ddc1ace10a8ad39d4ed4432cce1e2fadffed7480cc9a2f056c3000bbcd047bf7880df3813bfd36f6e99b2b712a0ae660eaac96d9edb5dd970989c60ffec343d88251dd47dd3a96b78700a24e9914eaafc286b5969cbc4fee3a84bd", 0x60, 0xfffffffffffffff9) [ 185.476478] audit: type=1400 audit(1555838213.351:53): avc: denied { set_context_mgr } for pid=7596 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 185.513349] binder: undelivered TRANSACTION_ERROR: 29189 09:16:53 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000300), 0x8) listen(r0, 0x0) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f0000001340), 0xa) 09:16:53 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x4, 0x4002011, r2, 0x0) [ 185.535159] audit: type=1400 audit(1555838213.351:54): avc: denied { call } for pid=7596 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 09:16:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) [ 185.576702] Bluetooth: hci0 sending frame failed (-49) [ 185.675417] audit: type=1804 audit(1555838213.671:55): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/29/file0/bus" dev="ramfs" ino=28047 res=1 [ 185.736804] audit: type=1804 audit(1555838213.731:56): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/29/file0/bus" dev="ramfs" ino=28047 res=1 [ 185.855809] audit: type=1400 audit(1555838213.731:57): avc: denied { map } for pid=7631 comm="syz-executor.3" path="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/29/file0/bus" dev="ramfs" ino=28047 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 185.912999] audit: type=1804 audit(1555838213.731:58): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/29/file0/bus" dev="ramfs" ino=28047 res=1 09:16:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000496000/0x1000)=nil, 0x1000, 0x7ffffe, 0x4002011, r0, 0x0) 09:16:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:16:54 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:16:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffffffffffffffc}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0xd}) [ 186.275585] Bluetooth: hci1: Frame reassembly failed (-84) [ 187.590844] Bluetooth: hci0 command 0x1003 tx timeout [ 187.597043] Bluetooth: hci0 sending frame failed (-49) [ 188.310572] Bluetooth: hci1 command 0x1003 tx timeout [ 188.316265] Bluetooth: hci1 sending frame failed (-49) [ 189.670388] Bluetooth: hci0 command 0x1001 tx timeout [ 189.675701] Bluetooth: hci0 sending frame failed (-49) [ 190.390185] Bluetooth: hci1 command 0x1001 tx timeout [ 190.395587] Bluetooth: hci1 sending frame failed (-49) [ 191.750184] Bluetooth: hci0 command 0x1009 tx timeout [ 192.470506] Bluetooth: hci1 command 0x1009 tx timeout [ 193.176316] audit: type=1400 audit(1555838221.181:59): avc: denied { map } for pid=7670 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 09:17:04 executing program 1: 09:17:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:17:04 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r0, 0x208200) write$9p(r0, &(0x7f0000000400)="d4", 0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) 09:17:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:17:04 executing program 2: 09:17:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 09:17:04 executing program 2: 09:17:04 executing program 1: [ 196.355954] audit: type=1804 audit(1555838224.361:60): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/31/bus" dev="sda1" ino=16629 res=1 09:17:04 executing program 1: 09:17:04 executing program 2: 09:17:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:04 executing program 4: 09:17:04 executing program 1: 09:17:04 executing program 2: [ 196.513634] audit: type=1804 audit(1555838224.451:61): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/31/bus" dev="sda1" ino=16629 res=1 [ 196.598681] audit: type=1804 audit(1555838224.461:62): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/31/bus" dev="sda1" ino=16629 res=1 09:17:04 executing program 3: 09:17:04 executing program 4: 09:17:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:04 executing program 5: 09:17:04 executing program 1: 09:17:04 executing program 2: [ 196.643783] audit: type=1804 audit(1555838224.461:63): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/31/bus" dev="sda1" ino=16629 res=1 09:17:04 executing program 5: 09:17:04 executing program 2: 09:17:04 executing program 4: 09:17:04 executing program 1: 09:17:04 executing program 3: 09:17:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="5c8074161ff9135e52474252885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:04 executing program 5: 09:17:04 executing program 3: 09:17:04 executing program 4: 09:17:04 executing program 2: 09:17:04 executing program 1: 09:17:04 executing program 0: 09:17:04 executing program 5: 09:17:04 executing program 1: 09:17:04 executing program 2: 09:17:04 executing program 4: 09:17:05 executing program 3: 09:17:05 executing program 0: 09:17:05 executing program 5: 09:17:05 executing program 3: 09:17:05 executing program 0: 09:17:05 executing program 4: 09:17:05 executing program 1: 09:17:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040), 0x1031c) 09:17:05 executing program 5: 09:17:05 executing program 4: 09:17:05 executing program 0: 09:17:05 executing program 1: 09:17:05 executing program 3: 09:17:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) read(r0, &(0x7f0000000200)=""/100, 0x64) 09:17:05 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x5, {0x0, 0x0, 0xfffffffffffffffe}}) 09:17:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 09:17:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr\x00', 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev}, 0x10) 09:17:05 executing program 3: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x34) socket$bt_cmtp(0x1f, 0x3, 0x5) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x100000001, 0x800) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000001c0)) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 09:17:05 executing program 1: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 09:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x800448d3, &(0x7f0000000080)=@buf={0x1000000}) 09:17:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x34b) 09:17:05 executing program 0: socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x40000000000a, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:17:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 197.315490] audit: type=1400 audit(1555838225.321:64): avc: denied { ioctl } for pid=7783 comm="syz-executor.3" path="socket:[28378]" dev="sockfs" ino=28378 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 09:17:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') 09:17:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 197.378467] bond0: Releasing backup interface bond_slave_1 [ 197.438422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.476455] bond0: Releasing backup interface bond_slave_1 09:17:06 executing program 2: r0 = socket$inet(0x2, 0x4000000400000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x7, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) 09:17:06 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1100}], 0x1, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 09:17:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f323c123f319bd070") mkdir(0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_getneigh={0x20, 0x1e, 0xa03}, 0x20}}, 0x0) 09:17:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000021c0)=""/56, 0xf}, {&(0x7f0000002300)=""/4096, 0x11e014b5}], 0x2}}], 0x2, 0x0, 0x0) 09:17:06 executing program 3: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x806}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 09:17:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:06 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x0, "731dd73b49a672c8004a318629dde12e339de4ddfdeaa7eaa069ae665f755918"}) 09:17:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1078}}, 0x0) 09:17:06 executing program 0: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x806}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:17:06 executing program 4: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100)='security.ima\x00', 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) chmod(&(0x7f0000000140)='./file0\x00', 0x40) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 09:17:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0xc8, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 09:17:06 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0245628, &(0x7f0000000140)={0x1}) 09:17:06 executing program 4: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:06 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setns(r0, 0x0) 09:17:06 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x4800000c0045009, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000640)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) 09:17:06 executing program 5: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) 09:17:07 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) 09:17:07 executing program 4: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:07 executing program 1: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 198.983310] audit: type=1804 audit(1555838226.991:65): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/43/bus" dev="sda1" ino=16641 res=1 [ 199.075107] audit: type=1804 audit(1555838227.021:66): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/43/bus" dev="sda1" ino=16641 res=1 09:17:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0xc8, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 09:17:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r0, 0x208200) write$9p(r0, &(0x7f0000000400)="d4", 0x1) [ 199.105830] audit: type=1804 audit(1555838227.021:67): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/43/bus" dev="sda1" ino=16641 res=1 09:17:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 09:17:07 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='commit=0x']) 09:17:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001bc0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001cc0)=0xe8) sched_setscheduler(0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 199.245090] audit: type=1804 audit(1555838227.021:68): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir020778824/syzkaller.BYBuP3/43/bus" dev="sda1" ino=16641 res=1 [ 199.312321] ================================================================== [ 199.319904] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 199.319916] Read of size 8 at addr ffffffff8677b558 by task syz-executor.3/7917 [ 199.319919] [ 199.319938] CPU: 1 PID: 7917 Comm: syz-executor.3 Not tainted 4.14.113 #3 [ 199.333910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.333915] Call Trace: [ 199.333937] dump_stack+0x138/0x19c [ 199.333949] ? strscpy+0x20e/0x2c0 [ 199.333964] print_address_description.cold+0x5/0x1dc [ 199.333975] ? strscpy+0x20e/0x2c0 [ 199.335734] audit: type=1804 audit(1555838227.081:69): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir762041274/syzkaller.cUNnJ8/41/bus" dev="sda1" ino=16652 res=1 [ 199.342524] kasan_report.cold+0xaf/0x2b5 [ 199.342538] __asan_report_load8_noabort+0x14/0x20 [ 199.342548] strscpy+0x20e/0x2c0 [ 199.342562] prepare_error_buf+0x94/0x1aa0 [ 199.342572] ? save_trace+0x290/0x290 [ 199.342583] ? __lock_acquire+0x5f9/0x45e0 [ 199.342594] ? scnprintf_le_key+0x600/0x600 [ 199.342609] ? _parse_integer+0xe8/0x140 [ 199.342624] __reiserfs_warning+0x9f/0xb0 [ 199.361725] ? reiserfs_printk+0xd0/0xd0 [ 199.361737] ? ip6_string+0x3b0/0x3b0 [ 199.361764] reiserfs_parse_options+0x13cd/0x1820 [ 199.367113] input: syz1 as /devices/virtual/input/input7 [ 199.370488] ? reiserfs_sync_fs+0xe0/0xe0 [ 199.370502] ? trace_hardirqs_on+0x10/0x10 [ 199.370574] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 199.370587] ? lockdep_init_map+0x9/0x10 [ 199.370597] ? debug_mutex_init+0x2d/0x5a [ 199.370612] reiserfs_fill_super+0x461/0x2b20 [ 199.370629] ? finish_unfinished+0x1010/0x1010 [ 199.370648] ? snprintf+0xa5/0xd0 [ 199.370664] ? set_blocksize+0x270/0x300 [ 199.370675] ? ns_test_super+0x50/0x50 [ 199.370694] mount_bdev+0x2c1/0x370 [ 199.370703] ? finish_unfinished+0x1010/0x1010 [ 199.370715] get_super_block+0x35/0x40 [ 199.370726] mount_fs+0x9d/0x2a7 [ 199.370742] vfs_kern_mount.part.0+0x5e/0x3d0 [ 199.370756] do_mount+0x417/0x27d0 [ 199.370766] ? copy_mount_options+0x5c/0x2f0 [ 199.370784] ? rcu_read_lock_sched_held+0x110/0x130 [ 199.403190] kobject: 'event4' (ffff888067e4ed78): kobject_add_internal: parent: 'input7', set: 'devices' [ 199.406737] ? copy_mount_string+0x40/0x40 [ 199.406754] ? copy_mount_options+0x1fe/0x2f0 [ 199.406767] SyS_mount+0xab/0x120 [ 199.406779] ? copy_mnt_ns+0x8c0/0x8c0 [ 199.406792] do_syscall_64+0x1eb/0x630 [ 199.416919] kobject: 'event4' (ffff888067e4ed78): kobject_uevent_env [ 199.418242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.418262] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.418271] RIP: 0033:0x45b69a [ 199.418282] RSP: 002b:00007f53cf40da88 EFLAGS: 00000206 [ 199.425062] kobject: 'event4' (ffff888067e4ed78): fill_kobj_path: path = '/devices/virtual/input/input7/event4' [ 199.426796] ORIG_RAX: 00000000000000a5 [ 199.426804] RAX: ffffffffffffffda RBX: 00007f53cf40db40 RCX: 000000000045b69a [ 199.426810] RDX: 00007f53cf40dae0 RSI: 00000000200000c0 RDI: 00007f53cf40db00 [ 199.426817] RBP: 0000000000000000 R08: 00007f53cf40db40 R09: 00007f53cf40dae0 [ 199.426823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 199.426829] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 199.426846] [ 199.426849] The buggy address belongs to the variable: [ 199.443828] kobject: 'event4' (ffff888067e4ed78): kobject_uevent_env [ 199.447713] __func__.31266+0xc38/0x3a60 [ 199.447717] [ 199.447720] Memory state around the buggy address: [ 199.447729] ffffffff8677b400: 00 03 fa fa fa fa fa fa 00 00 00 00 fa fa fa fa [ 199.447736] ffffffff8677b480: 05 fa fa fa fa fa fa fa 00 00 00 03 fa fa fa fa [ 199.447744] >ffffffff8677b500: 00 03 fa fa fa fa fa fa 00 00 00 03 fa fa fa fa [ 199.447749] ^ [ 199.455319] kobject: 'event4' (ffff888067e4ed78): fill_kobj_path: path = '/devices/virtual/input/input7/event4' [ 199.457479] ffffffff8677b580: 00 03 fa fa fa fa fa fa 00 00 00 00 00 fa fa fa [ 199.457487] ffffffff8677b600: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00 [ 199.457491] ================================================================== [ 199.457495] Disabling lock debugging due to kernel taint [ 199.457654] Kernel panic - not syncing: panic_on_warn set ... [ 199.457654] [ 199.464678] kobject: '(null)' (ffff888067e4f1a8): kobject_cleanup, parent ffff888067e4ed78 [ 199.466737] CPU: 1 PID: 7917 Comm: syz-executor.3 Tainted: G B 4.14.113 #3 [ 199.466742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.466748] Call Trace: [ 199.473217] kobject: '(null)' (ffff888067e4f1a8): calling ktype release [ 199.474954] dump_stack+0x138/0x19c [ 199.474964] ? strscpy+0x20e/0x2c0 [ 199.474975] panic+0x1f2/0x438 [ 199.546399] kobject: 'loop1' (ffff8880a49860e0): kobject_uevent_env [ 199.547692] ? add_taint.cold+0x16/0x16 [ 199.547710] kasan_end_report+0x47/0x4f [ 199.547719] kasan_report.cold+0x136/0x2b5 [ 199.552826] kobject: 'loop1' (ffff8880a49860e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.555128] __asan_report_load8_noabort+0x14/0x20 [ 199.555138] strscpy+0x20e/0x2c0 [ 199.555150] prepare_error_buf+0x94/0x1aa0 [ 199.819724] ? save_trace+0x290/0x290 [ 199.824056] ? __lock_acquire+0x5f9/0x45e0 [ 199.828582] ? scnprintf_le_key+0x600/0x600 [ 199.829727] kobject: 'loop0' (ffff888064cd69a0): kobject_uevent_env [ 199.832897] ? _parse_integer+0xe8/0x140 [ 199.832908] __reiserfs_warning+0x9f/0xb0 [ 199.832916] ? reiserfs_printk+0xd0/0xd0 [ 199.832925] ? ip6_string+0x3b0/0x3b0 [ 199.832938] reiserfs_parse_options+0x13cd/0x1820 [ 199.832949] ? reiserfs_sync_fs+0xe0/0xe0 09:17:07 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 09:17:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) 09:17:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 09:17:07 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="5c8074161ff9135e59555956885dda47242f9c6509afa3c164c2447421fd1be3d540cc2f77228205f05e005612717c29d33afd57615f191c989f4b47fbdb6408b8191992425c01d5aaf848d42cef130d3f3b293b12adb56ab58e7ce23de32911ef9181c556a6377044c5073d600ec786d4e8cb4133460e3ae7066aa8e587c13475b1a440a7b4fd30abfda7bd27b035cd53d8ce77259e6a8ba3fe08e379d433f644b4cca4d5569423c12d27e560ccac3520d4f7c6ef58f985c2821e1a37f1606961c0c53827b19f43"}) [ 199.832959] ? trace_hardirqs_on+0x10/0x10 [ 199.833005] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 199.833015] ? lockdep_init_map+0x9/0x10 [ 199.833023] ? debug_mutex_init+0x2d/0x5a [ 199.833032] reiserfs_fill_super+0x461/0x2b20 [ 199.833043] ? finish_unfinished+0x1010/0x1010 [ 199.833056] ? snprintf+0xa5/0xd0 [ 199.846975] kobject: 'loop0' (ffff888064cd69a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 199.847906] ? set_blocksize+0x270/0x300 [ 199.893915] kobject: 'loop4' (ffff8880a4a4cae0): kobject_uevent_env 09:17:07 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) [ 199.894877] ? ns_test_super+0x50/0x50 [ 199.894890] mount_bdev+0x2c1/0x370 [ 199.909621] kobject: 'loop4' (ffff8880a4a4cae0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 199.914853] ? finish_unfinished+0x1010/0x1010 [ 199.914863] get_super_block+0x35/0x40 [ 199.914874] mount_fs+0x9d/0x2a7 [ 199.914887] vfs_kern_mount.part.0+0x5e/0x3d0 [ 199.914897] do_mount+0x417/0x27d0 [ 199.914905] ? copy_mount_options+0x5c/0x2f0 [ 199.914918] ? rcu_read_lock_sched_held+0x110/0x130 [ 199.951536] kobject: 'loop0' (ffff888064cd69a0): kobject_uevent_env [ 199.952214] ? copy_mount_string+0x40/0x40 [ 199.952225] ? copy_mount_options+0x1fe/0x2f0 [ 199.970919] kobject: 'loop0' (ffff888064cd69a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 199.971876] SyS_mount+0xab/0x120 [ 199.971886] ? copy_mnt_ns+0x8c0/0x8c0 [ 199.971900] do_syscall_64+0x1eb/0x630 [ 200.001969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.006873] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.012149] RIP: 0033:0x45b69a [ 200.015453] RSP: 002b:00007f53cf40da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 200.020772] kobject: 'loop1' (ffff8880a49860e0): kobject_uevent_env [ 200.023331] RAX: ffffffffffffffda RBX: 00007f53cf40db40 RCX: 000000000045b69a [ 200.023337] RDX: 00007f53cf40dae0 RSI: 00000000200000c0 RDI: 00007f53cf40db00 [ 200.023342] RBP: 0000000000000000 R08: 00007f53cf40db40 R09: 00007f53cf40dae0 [ 200.023348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 200.023353] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 200.031155] Kernel Offset: disabled [ 200.072953] Rebooting in 86400 seconds..