[ 37.837934][ T26] audit: type=1800 audit(1550732720.532:27): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.859642][ T26] audit: type=1800 audit(1550732720.542:28): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.540653][ T26] audit: type=1800 audit(1550732721.302:29): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 38.560842][ T26] audit: type=1800 audit(1550732721.312:30): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. 2019/02/21 07:05:32 fuzzer started 2019/02/21 07:05:34 dialing manager at 10.128.0.26:33245 2019/02/21 07:05:35 syscalls: 1 2019/02/21 07:05:35 code coverage: enabled 2019/02/21 07:05:35 comparison tracing: enabled 2019/02/21 07:05:35 extra coverage: extra coverage is not supported by the kernel 2019/02/21 07:05:35 setuid sandbox: enabled 2019/02/21 07:05:35 namespace sandbox: enabled 2019/02/21 07:05:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/21 07:05:35 fault injection: enabled 2019/02/21 07:05:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/21 07:05:35 net packet injection: enabled 2019/02/21 07:05:35 net device setup: enabled 07:08:30 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x401, 0x1, 0xffffffff, 0x8, 0xfc0f, 0x6}) ioctl(r0, 0xfffffffffffff800, &(0x7f00000000c0)="663a2e4d707bb624b907d35f19f0a47adafb9207ad1c6925e6cfddab98a41e19ebff7a36f188bc0a1810a62422289743c6aa4d9c21823a5affbd55569e0d54839b99f356530fe848f2002cb5ac6f33a26211f00a1f61ce2fb974e97077f9cfe4a2a87a94692498bbac0dff4965d8884116df165c26f2f38bd5fe64b00b0934787c228a76b41f6aaa667654979142b3e1ac8e39846a3cf17d06ab943e63481826a46f1c61eb85b762a698734cadc32c25764a9108e6bfdacab2c461aa2e0c8ca1101c9b1b68fb0a7932f64a5c7fdff595c1bf313ebcc1bcadecbfad1239120bd7f9c9eb41e1c783233cc543c01b014d24478f64187dd618dc4658686a2b23175942dd22b0fed9f0e1b2b9d0d9b26f29965fad6a068b69a16969d8c6465ec0566d3ba15fd5b20d77514bbb4124dc4e6ca26c65b1972da3f1471043f0e85bc663539f34708a3c8d244edd4333de583140c98814443384c3951565aebf21787d66a994ae03bf9fa63bb74b698710fa194c5010088ab15e5d47607dffe7701a71eb1d312d01da566cbb34aa0ae95e8560ed6c0cfd0418c91c2eb3c598fb2ce11045451bebb05628af71a09c12d5f6370f6c66cee3f7303cf65b42ed41d37c3c102d96c1614dd5dc7b844dc076161525531349da986542c33d6e199b5dd33905b75a3da8b723c7e6add26e0245b12105512c49c5e1602529f7356f01a306fe77276a384c61e9c13aaedc44216d7341b08529f5724e6cb4f698d93011184d762fb092d8875f457dcf62e890f1ed4a40bb2b6a9aee019fb0666497d8a301c46b5267464d72346f75423f68695c9773a8cfcd9d98a9c290d6d803da05de353a2c4204a8a604b761b4ae3ae74f1d380ed8121df740a526b5b1db08cc2286291420b4183338508b3f7b3a1a675f7023230a98b1b5b1c77fca225d91c6bbf10061886bdae4890600535827b26520b4f14da79c14b3a8570bf5cfb7f7df2b1585834cef06f40f0f48776054d5b1074fec8a3854c5514376d8be74c7cf06594c2526211e59cb906b640e1a622de7d590eff5657cb89906cbe13b8e04d72ad919978414691e78d1b9e2434babe05adb0875f0b4c1a34ce082de6ad08015788f088218a24e3c2639110d69d5b000120b265b74cd5524455498b89d013e8b0fd4509fff8452c6036364da438078e988d39ee6c2df6d9f8c8ddcd64dec4b5a1caec2c4019fcbe727e075cb738eafc8e58cbfaf0eec9c6b9b08546fbeed1d50a45028e37f6c99698b32e105fc68bf525a17ddc74ef06e21baa09d02236c1f2c6178a3610b7fd1fc0554e6380906b081dfa3fe25deb9b9aba46d9e4b33d81bbdc8cacf7312c52502be47565bca9475f2ae2b959c957d663b5704179afad5be9b352e06375ca5aa40e3837177b214e18203b1643583ac820cc6d88d6f7cd83690e1ac6d8b1bd676c1feb4f17c37643e7578c6ebee8dbb23d68546b4b0127f410622471ddbf12cc4ee3a0e42d0b3464b046339051f973ef5628601d176502c121f1aad69fa957a84b061ed0cbb8083ae11f9121a01c005d57f10c845c4006c78ad588a76a4e43906d7d7d9efc698889b289f3d1c3606b124f4dc992ee180692689f9f6a50c253e9c2e43226799ec8d4f06e0963d73243b9803047a3480b562cd562bfe19a132a058b46e2dd40c7765ac8795be0f1609db4c6e94ae17760fe10a8b86bed9385220be6252a92400ffe213020de503dd4c25e31c42646e0c0ca69d41143455a9bc4a969974a790561534f025fba5512a42f55760f1ab023b9a0fa5a83ef5b1c5bdee866696ccd8e1c7a38a9bb1959dba33b8eb2a6956c0e64bef5b1ea18d4b6e3b7cc117e6958e2c116654f30e7134a81446f21632b0e600457b16525eaf5e2c40b598c1f3f165e090b25afaf4aa9c5e6011331db62dcf484a845bd8ea13a99e1529234d50c9aa8810ab4cd28960ff6659a6dc53b75ab75a96199d13b7a8bf34d854ee4b2eeda798b6306a38951f521ad97b63e183dbdb049a2b195edb30353df777029b67685478012e4c5529c9e4db809f40e4424b0321f9c3bfc936578310b5d5c3744e0a7a8b05bfaaf018456ee724ee8b596aa618e3ed1d32b75335c9834ae58e6e4f24696b74ccf8f859f2fca39a2b6c513911a9b3c33560529d9e065da913f25db4d8e40c424a90854c3c1a8f7f779a2ad334170cb9e36153668009b08059baaa71c0b18b7bc1e1094a362ae1eca2b8181cfd2f8902cf028a2115a9914dbf86d599a427991427fe1a04c2e4e2d8c2c25e9a8161e1b8c7433ba66236b835d6d331d2a7a906ac88fad39fd602375a3900a993057abd0852b26e1aa73cf1931d951761fa2b6ba0e21e004dbdc75672cdb7744c0064f7c5c95085e6fe1ae7945e2bc4cf8f975c88493c1370f631f642ccf61264ac2d55e479dba4e0a06ec915877718bd31129ba994eb5f06528d89c2dacaa00d7debfbf52c48a3e6bd529426c11dcf7cd14005703c24124e91a8edbee2e992e884a51ecd412224f672932f44f2e0da7e0e1e21186fbdf610adb51039f682860ccc4ff3ee4dd5174425746db03dd9ecd3f83417eecce56e38695e55d56375fd0ee0ccbe311903f63e9fe0e72c823c2cc0ac5445bdf3f5fe30733feb87a51f78819ce0c2a8bacf3c10b587a2d15e29582b726229854363f5d1441d6a7020003d88928ef5f508a69c61eb453db41c51e63f22328b235d45c0e04e4f50378633c8c748fa71e6b7357caface9080c0a8faa66b1e0f5aa1fc3442f825d7af9c87ce2f29ed7e1e0e32226261a954720661a47dc0e353d00304c6505e007c770f1db2e73758ba9b547a8a307c58666deb125f88db415a22c5f65ddc339d82b1089a3a0aa58d6db308a9b004384ce9f64c17e51fb3dfca74d1a974ceddb4e14cf84d72226812f18e4d838f34d93be6ae5fc6ad190865854b2983ded5cb30d995b3b974393ecdb2235218439a302eda83b64d2c522774b418a2a125ce83a437a1398d3763e6a60177b1d45939d37d1e9fe7902d35065a8230c39401b792b4506196b89fd8d437f1b0ce696c975daf59dc32bcb72fd391d09b7d711f0d38bcd31df6c356de46fab355b26e767d589e09d0fbd5ccd6cefe10f98e5d1393e948ec2cbcf69292bc79398bded5b6aa7663b9250cdf94e899ca5846adbb7c1fc2851f080200fad4d56cb3d90b29f660c42d19be405093c289fe02c8bd347f660cf1cf933952671f8f2acda6b7ce44bdcdd216d893c4e723042b45e246d9d0cf7757a106c5bd3e2fd2892e02028bf78ed5ba5639c469c9554381dd9add0373f45db1d8044af9c784e7c824d80fb3c24abaf47335b780a1314d4f14c5f5a34d2ca4cefac8b25f6ba49c7961983ad4e09cf7c6a876df37352845d8c78873814564052470be080ff0ea09f589670e2518441ed98f544f2585cf5c25a6de8f254cf33d42fcb013929d952caf74f23bace5090b373f9b41c99f51a38b56928502517da157467422f35dd6a4db18ac96821e2efc6365f20f428949c8df018dc20e22caec4d0acb3510a81e018929a8c107718ac4166050cd1074fd080e2ef9ad5737fb55b92082118ced0852310c7e3c14ff7a24ad72904c3408c23d9e856fa2fc114ce39581a35061e4110082494424693c4278cbc9b7686a3aff1326693116d8ec458f522155577750f0be0e1d22056733f05cc41fc326aa82a2c641eaeace6d8ff5d83da58bdfe18b56cebaf22d6fb5a775799ec546d0a76f1f8456ee3331bfa3ce41d90390c451699d3b3767051c02c62eafebc2d084b529095f8f40a2faed0ae374e87f331db35ec48d0e4908f6c2bf8d1207d6b2fd3fe4b519e0b82793517b78bd32d86928892d8607b5030876de3c24facff73e0440386421370bec409849a0d34cd4fcbaaf1b5d71ca9fdfe72e95807a46194d87ec308bbfe2149729e014aa479734672413eebbe7cb53d16813c490995f8a2c67de63ac06632a9acb5fb8e8b310ca3f86ded6c54b672a5435699687a09cba9e72f54a8ddb68c8e70fa088fed787c3cbb8634f006bd6ff646b1d49a062a90071b5eb49eafec0c6da6674cd30f22c5759158dba11dd93e8a2a9131b4dd7ff164940b7049f7204ad38f740751ecd2a958b040ec731a8b268f0cf293e7978a802c7fa9da6ad2f18d23418900713d077f01dda5c3a00c174575056bd27b5d7f82e26b3bef4ac03a1d43eac33ff644c1cc0990268d4813e7b78f30c73ee633f55b9b7a05da1635ecf3d8699bc4241496b7e0f4e053a3259aaae0a1158ec588a52a11412306e777328a91ef53411c2d376f62cd015816d3b34d450440ee91fe187327620b37592473e5dd8e3b99175e7dfc3bd2fc5a508872f0fc11ce98ea54c1902d9720018af945ce4ec52682472c4bb67efaf2b135c07050199ee712b4d1537e880dc2d50570e8ad0acbb93089f69933b120e92e39c1bfb4f02ff55fef1de74bca39d2e5fe7a062f39b9eca5ffed3599266ab34c81511bb58c1a22392edea86d20df53f0dda6801e38fd9ab7ecdcbaa0d5a4f4b9e64ab4c4ad7ab4c8053e7f03b16b85cff0042bc6f25bde6b30ff37d83fe184f15b356f5cf33e453a968f301639130618868d81cbebaa2a032303c42e67e0909faecaab5d459995fdae22d1c4c02b4670e89c1aa5d98f71c3c61410995bed76104fb85cc219fd1a4b133daaa29e36cb4ca9b4de35c67a1bf879642b9f05b0f4e497d475a46d4b72fde8c45ef1dc80d5829d63f830b4059569a51f21115cd789d6d9a6a342cdc1af7f8aec8edf8efdbefb6c33e2b9c3b79f32b72e4499f0ca4cae94812526c38b0803391eef3cf92f0624ee9ff36960a62a83ea202a8a4437263e39b5ecab738f52542009b9de8155be5c2a37deaa258622b226a75be529a71443f79b167765e9d135be166dc1bc33589268d257216a15c688d82703f5950a4726edc943b6f1838c9348aff09c6d4b51cee97c7f43eb68469727683989c67aff7a3211b411d7de3e119bad83f1ae10bbfb72a057cf9ece99073bb6a2d3a165efe67d00e18fab4561ec204596f30597dcc0d08ad5a0acdc3c1090d409b332c5c4135f916c6e658eb9012b6ebfc7190b8a0a1a84c84e0d080f96127f7c3ee5bdd378a8370dd9d1c9945bf14b4a325280dd714e0b3035322102ccacc15bf1ac8f55d5ce1f8127be04a53130cfa16cfcfc02a6d3086703b4ff252062b71b2b0ef58a57ac6090ef7b2f3e15d8acb157226539b0387f843a719a129a816cbf38d97407f41c9a88f7480d99d7847a25e3f2eb7d19b4df4820431f1a5a2c58491ee2a6629153288648516074b6a6bf73ce2f68ef46a0f3f97d6fdd298c817e4917062097d32005310c5e0ea17575d0d65968196bdd20b32fed0e72962aee554e5995a2caa2452664044953979f45bbba543e2635e0eba9c6d4ea8ab092ec571ed6d48a8838f640e6c9dff216d3a0c0ea43c639dd4aa1e15c58189092dc05ef9d27a8a9aa38d5c5e10de7a306bdb9e3433c692b2dbc14c2dde768438c5a6f02e4a61fc9902d29aace49334c6c16095663fa2778dcfe89ad5548a2dafc1f955c6ea71cf0e0997b48acd44e26fc0de4c0a8f8abe37727bba59144f51098e435f9be0e2eab3b1356dbc151fb21199c86104b4e35986f7328ff544cafe83f5105c91416ae3f9a119bda050bac4b2254791c95434ee9ca51304791e7ee7be45fd7d049b70555a629fb8d9f6c0cc23249963a5ccb6dc57cc10bfeaf579380c1c81cd0b5ff017c5d6279372a95d6dfa855415b170a8ced3532749d48") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000010c0)={0x40, 0x0, 0x3}, 0x10) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000001100)) readv(r0, &(0x7f0000003540)=[{&(0x7f0000001140)=""/176, 0xb0}, {&(0x7f0000001200)=""/179, 0xb3}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/54, 0x36}, {&(0x7f0000002300)=""/45, 0x2d}, {&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/100, 0x64}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/128, 0x80}], 0x9) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000003600)={0x5, "bcf651892dca30ada006f5ea3dfc8a60b7fe4a7b25705dfdea130a96bfeb8c3c", 0x220, 0x1c, 0x3, 0x2, 0x1}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000003680)={0x0, @bt={0x199, 0x8, 0x0, 0x2, 0x7fc00000000, 0x401, 0x6, 0x7, 0x9, 0x7f, 0x8f, 0x0, 0x8, 0x9, 0x1, 0xc}}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000003740)={0x6, "93f6f8642d57454241b4a8eb7e961242c1576db4f13ad5ad8b7af9b0ee7e895a", 0x8, 0x2, 0x3, 0x8, 0x3}) r1 = signalfd(r0, &(0x7f00000037c0)={0x7e}, 0x8) fcntl$setstatus(r0, 0x4, 0x4800) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000003800)={0x1, 0xc, 0x1, "433d31dfd37321f0fd2db0f50ad639fe5582ca3c13dd5c1c05beddc975c63580", 0x7e737f7f}) ioctl$TIOCCONS(r0, 0x541d) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000003840)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000038c0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000003900)=0xffffffff, 0x4) setns(r0, 0x28020000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000003980)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003940)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000039c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000003a00)={0x1, 0x7}, 0x2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000003a40)) prctl$PR_MCE_KILL_GET(0x22) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000003a80)={0x8, 0x3, 0x2, 0xff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003ac0)={0x2, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000003b00)={r3, 0x200}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000003b40)={0x7, 0x5, 0x8, 0x3ff, '\x00', 0x5}) chdir(&(0x7f0000003b80)='./file0\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000003bc0)=0x85) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000003c00)={0x2, {0x2, 0x5, 0x6, 0x1a}}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000003c40)) syzkaller login: [ 227.745218][ T7785] IPVS: ftp: loaded support on port[0] = 21 07:08:30 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000005380)={0x7, &(0x7f0000000040)=""/4096, &(0x7f00000052c0)=[{0x8, 0xe9, 0x1, &(0x7f0000001040)=""/233}, {0x6, 0x1000, 0x8, &(0x7f0000001140)=""/4096}, {0x98c, 0x1000, 0x6, &(0x7f0000002140)=""/4096}, {0xe4e, 0x4b, 0x9285, &(0x7f0000003140)=""/75}, {0x7, 0x1000, 0x3, &(0x7f00000031c0)=""/4096}, {0x100000001, 0x1000, 0x94, &(0x7f00000041c0)=""/4096}, {0x400, 0xe9, 0x3, &(0x7f00000051c0)=""/233}]}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000053c0)={0x0}, &(0x7f0000005400)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000005440)={r2, 0x8, 0x400, 0x9, 0x898, 0x8}, &(0x7f0000005480)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000054c0)=@int=0x100, 0x4) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000005500)=0x200, &(0x7f0000005540)=0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000005580)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={[], 0x2a}}, 0x20, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_bond\x00'}) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000005600)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000005640)={r3, @in6={{0xa, 0x4e23, 0x0, @remote, 0x7a}}, 0x401, 0x3, 0x4, 0x7, 0x8}, 0x98) r4 = syz_open_dev$dspn(&(0x7f0000005700)='/dev/dsp#\x00', 0xa75, 0x103901) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000005740)={0x77359400}, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000005780)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000057c0)={'ipvs\x00'}, &(0x7f0000005800)=0x1e) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000005880)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000005940)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005900)={&(0x7f00000058c0)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000005980), &(0x7f00000059c0)=0x8) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000005a00)={{0xa, 0x4e24, 0xaa, @empty, 0x3}, {0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x0, [0x9, 0x7, 0x80000000, 0xfff, 0x1, 0xed, 0x1000, 0x7fff]}, 0x5c) lsetxattr$security_smack_transmute(&(0x7f0000005a80)='\x00', &(0x7f0000005ac0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000005b00)='TRUE', 0x4, 0x2) socket$inet6(0xa, 0x803, 0x6) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000005b80)={0x1, &(0x7f0000005b40)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000006bc0)={r6, &(0x7f0000005bc0)=""/4096}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000006c00)) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000006c40)={{0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800}, {0xa, 0x4e22, 0x100000001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x4, [0x9f, 0x9, 0x8, 0x4, 0x8, 0x80, 0x12c4, 0x1]}, 0x5c) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000006cc0)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000006d80)) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000006e80)={{&(0x7f0000006dc0)=""/68, 0x44}, &(0x7f0000006e40), 0x8}, 0x20) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000006ec0)={&(0x7f0000ffe000/0x1000)=nil, 0x7, 0x6, 0x3a, &(0x7f0000ffd000/0x3000)=nil, 0x3}) r7 = request_key(&(0x7f0000006f00)='user\x00', &(0x7f0000006f40)={'syz', 0x3}, &(0x7f0000006f80)='\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r7, 0x1ff) [ 227.884599][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 227.961122][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.982255][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.992732][ T7785] device bridge_slave_0 entered promiscuous mode [ 228.001172][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.008308][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.016389][ T7785] device bridge_slave_1 entered promiscuous mode [ 228.030706][ T7788] IPVS: ftp: loaded support on port[0] = 21 [ 228.053986][ T7785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.064353][ T7785] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:08:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x428800, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/214) sendfile(r0, r0, &(0x7f0000000140), 0x6) r1 = accept(r0, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x80) bind$packet(r0, &(0x7f0000000240)={0x11, 0x17, r2, 0x1, 0xa7, 0x6, @random="93663d896cdb"}, 0x14) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000380)) getsockname$netlink(r1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) read$alg(r1, &(0x7f0000000440)=""/124, 0x7c) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) prctl$PR_SET_FP_MODE(0x2d, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x802, 0x0) link(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000006c0)=@req={0xf15, 0x3863, 0xfffffffffffff001, 0xfffffffffffffffd}, 0x10) signalfd(r4, &(0x7f0000000700)={0x9}, 0x8) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000740)) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000800)) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000940)={0x5, 0x55595659, 0x1000, 0x5, 0x3, @discrete={0x3, 0x7}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000980)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000009c0)=0x28) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000a00)={r5, 0x6, 0x20}, 0xc) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000a40)={0x10000, 0x0, 0xfff, 0x200, 0x145e9bef}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vsock\x00', 0x801, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000ac0)=0x100) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/video0\x00', 0x2, 0x0) [ 228.099044][ T7785] team0: Port device team_slave_0 added [ 228.114107][ T7785] team0: Port device team_slave_1 added [ 228.204321][ T7785] device hsr_slave_0 entered promiscuous mode [ 228.241810][ T7785] device hsr_slave_1 entered promiscuous mode 07:08:31 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000040)={0x399f1336, r0}, &(0x7f0000000080)={0x101, 0x100000000, 0x7fff, 0x9, 0x5, 0x80}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x220200, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000180)=0x1) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000009c0)=@broute={'broute\x00', 0x20, 0x3, 0x778, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x20, 0x0, 'veth0_to_bridge\x00', 'team_slave_1\x00', 'veth0_to_team\x00', 'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x100, 0x360, 0x3b0, [@helper={'helper\x00', 0x28, {{0x1, 'Q.931\x00'}}}, @time={'time\x00', 0x18, {{0x17e2bbb5, 0x9, 0x14004, 0xd2bf, 0x7ff, 0x9, 0x3}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xda8, 'system_u:object_r:mqueue_spool_t:s0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10001, 'system_u:object_r:etc_mail_t:s0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x4, 0x6}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x5, 0x42, 0x8864, 'nr0\x00', 'batadv0\x00', 'ip6_vti0\x00', 'caif0\x00', @random="5090a3b8d13c", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="52fcec3823df", [0xff, 0xff, 0xff], 0xe0, 0x210, 0x248, [@time={'time\x00', 0x18, {{0x80000001, 0x4, 0x741d, 0x482e, 0x400, 0x6, 0x2}}}, @cpu={'cpu\x00', 0x8, {{0x437, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:sysfs_t:s0\x00'}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}}, {{{0x9, 0x4, 0x8aef, 'bond_slave_0\x00', 'ip6tnl0\x00', 'bpq0\x00', 'vlan0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa0, 0xa0, 0xf0, [@pkttype={'pkttype\x00', 0x8, {{0x7}}}]}}, @common=@log={'log\x00', 0x28, {{0x40, "1e66a2d794140b0a5c6700b2e1d22876b6b3d04347ef4b7cec7b9f7cd755", 0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x7f0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000a80)={0x0, 0x1, {0x32, 0xe, 0x6, 0x9, 0x3, 0x2000000000000000, 0x6, 0x5d, 0xffffffffffffffff}}) gettid() ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x68, 0x4) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000b00)={0x2a, &(0x7f0000000ac0)="76a572d46dc766ba15575252bb9711fd74a9075277aa4fcb4f7c27bc8c0fbf8210b3ff1f947f5e5478d9"}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000b40)=0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4}, 0x68) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000c40)={0x2, &(0x7f0000000c00)=[{}, {}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000d40)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'bpq0\x00', r2}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000dc0)={0x9, 0x94f, 0x400, 0x6, 0x7ff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000e40)={0x34, 0x0, &(0x7f0000000e00)}) sync_file_range(r1, 0xe7a, 0x4, 0x6) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000e80)) sendto$llc(r1, &(0x7f0000000ec0)="7c040f81830ffd7c887cf9ee9e150f94f90381f84d9f5afbbfc3c15bee48831a36f4dfdcd2e8183342af6ac3f5d0303ac5ac118d5ec5a5f169bd93a02767aafcb97b29b410c4650040a24b8b79ea646bc3ebf52640f590a4321e581d686c7dbf05882f1ee2ea829115073a756fdf48d601057fcc7aeaa94fb0db13ee9a4da9ebe9cbd8ced470f2556fecb6b7b5a293e9e44e134c1f9c37ddd6", 0x99, 0x800, &(0x7f0000000f80)={0x1a, 0x323, 0x0, 0x9, 0x466c9d40, 0x100000000}, 0x10) bind$alg(r1, &(0x7f0000000fc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000001040)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000001200)) [ 228.349933][ T7790] IPVS: ftp: loaded support on port[0] = 21 [ 228.372697][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.379906][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.387592][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.394696][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state 07:08:31 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x400, 0xc0000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x310, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x54cf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = accept$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) getegid() r3 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x5, 0x200000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000002c0)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000300)={0xffffffff, 0x80, 0x7}) r4 = semget$private(0x0, 0x3, 0x12b) semctl$IPC_INFO(r4, 0x4, 0x3, &(0x7f0000000340)=""/37) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000380)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x6, 0x9, 0xfffffffffffffffc, 0x0, 0x9, 0x8, 0x20, {0x0, @in6={{0xa, 0x4e21, 0x101, @local, 0x3f}}, 0x8, 0x3, 0x100000000, 0x6, 0x2}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000004c0)={r6, 0x8}, 0xc) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000540)={0x0, 0x5, 0x7, &(0x7f0000000500)=0xffff}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000580)={r5}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000005c0)={0x35, 0x8, 0x4, 0xfff, [], [], [], 0x100, 0x0, 0x3, 0xffffffffffffffee, "9a9a7a9975605bb465f5578dee78f624"}) semget(0x1, 0x5, 0x10) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={@remote={[], 0x1}, 0x1, 'veth0_to_team\x00'}) timerfd_create(0x3, 0x800) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000800), &(0x7f0000000840)=0x4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000880), 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000bc0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000c00)={@remote, 0x2d, r7}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000d80)={0x2ef, 0xff, 0x1}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000dc0)=0x2) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000e00)={0x1, 0x0, 0x103, 0x2, {0x7fffffff, 0x716, 0x4, 0x7}}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000e40)={r6, 0xff}, 0x8) [ 228.547728][ T7794] IPVS: ftp: loaded support on port[0] = 21 [ 228.594804][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 228.701745][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.767487][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.797732][ T7796] IPVS: ftp: loaded support on port[0] = 21 [ 228.815410][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.825956][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.846251][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.854885][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 07:08:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, r2, 0xb00, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x65}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x84) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000380)={0x9, 0x21, 0xa73}) truncate(&(0x7f00000003c0)='./file0\x00', 0x81) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x1}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)="4341366b349d387873f6d29cdd7cf604790f143379009f25a8a7068f6f15cdbc266b01ae655b8b54b1456e30f0faecabb815ed31da62db40cad599e1c95cf822a39e2f8c10872a0a06294cd917dbd7e2b59a8ae857219d15", 0x58}, {&(0x7f00000004c0)="3f9c5983f7a202f9c70dde3ddc16df4e2fdc430dee3521cbb8216a9d8bf25082f6e1ce8786de5e33e3f651fb", 0x2c}, {&(0x7f0000000500)="b88f9ffa3ae2147c3f48b9f790fc90ea256ecd1c45eb9484bdba7033f52cc8ea864686009ce190d74c2ee253209773d5fc83261df793d987899b90ae5cf0c909ad36", 0x42}], 0x3, &(0x7f00000005c0)="1e1a798c8efad0cc49bd76081a253c27530cfb0b7b405feb4cdc9cfd8586f2379fd56a29a70846e2806d12e33baaa0ae3917c5e59fed52afbf38a449eeee", 0x3e, 0x40010}, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x18, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000780)={0x0, 0x2}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000800)={r4, 0x900000, 0x7fffffff}, 0x8) sendfile(r0, r1, &(0x7f0000000840), 0x80000000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000880)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000900)=0x1, 0x4) getpeername$packet(r1, &(0x7f0000000940), &(0x7f0000000980)=0x14) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000009c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000a00)=0x3) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000bc0)={r4, 0xd5, "e4903be8ffabf15aea13a144649dc03fa0d75d81d7ace837f1ea09b00518e43128e8211524543ca3cccf4b34c510a22a1e71d7b84590193205afb7883323a1c8ffabcb306f1c067261b18fd84b131b310ed75b6b26eef3d98724678e9587dd1452929d77c5a244f1cc0b1ab491e53cfbf7cea4dbd1b40690829745b3fb73715d4dc3651eab45ea312ef9e1aa447b789c34cbc2312634c54630c87c5c99a164d04e14cd026a40d330e4914785ca3b660b49bb8901eb6a36aa4d256dbdf08b62701a4259d0b439590384308c0fea2b167299365c0a36"}, &(0x7f0000000cc0)=0xdd) sendmsg$tipc(r1, &(0x7f0000001f80)={&(0x7f0000000d00)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000d40)="f090655191d754c386708342840293b3935a3b8ae621c12d386e859e28f9c07dcaeb6ce4a2bf0eea41bc824c967009afef50f26b94f1608d6a031223e593947b235aa16f9a3dc0f96d67ea9b654932451d545b06a541e1f3520145fac6b2ec804c7db7f769678cf053080a82305d2f4a4f59a33b7ccbed0a446f102cd206949c8d1e4391b8001336b7ffff40a633d75168b59eca7521eec36d57608130bf58de993922d80a896e01b7375402d4c08e82a25e6d2a21d5e410134e3969401b0c12a598bb2c0a634c7661319937336618cabf91377796a9f9504637eec550eb676828", 0xe1}, {&(0x7f0000000e40)="02e69a804dc28fa0872172bef56497171213700dc3cbd873a62e939b8516546fce942653dae898c2aba4c29c76c204efa8c6393bdf9a8872ee53570dabb4a00bd6bce571d27dfbc3", 0x48}, {&(0x7f0000000ec0)="30e4f81b5e93f6bb163abc44998ca781ab97e824dd6951a78c0b083b426f4df796e7a4202f06e7bb175773c599221dd01241484f30eb357dcaf3fdf29fe5d95430e5e93df69841c50dc7fff042731b67e04f683ed46365ec022f99acb4f9a152c8619dc06daf29d7", 0x68}], 0x3, &(0x7f0000000f80)="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", 0x1000, 0x4040080}, 0x0) r6 = add_key$keyring(&(0x7f0000001fc0)='keyring\x00', &(0x7f0000002000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000002040)='keyring\x00', &(0x7f0000002080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r6, 0x3, r7) socket$inet_tcp(0x2, 0x1, 0x0) [ 228.955832][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.965505][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.972643][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.981897][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.991775][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.998809][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.008129][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.016799][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 229.046466][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 229.056470][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.064104][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.072826][ T7788] device bridge_slave_0 entered promiscuous mode [ 229.080335][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.087536][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.095404][ T7788] device bridge_slave_1 entered promiscuous mode [ 229.102663][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.130447][ T7788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.149920][ T7788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.166964][ T7802] IPVS: ftp: loaded support on port[0] = 21 [ 229.181396][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.190017][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.198772][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.207045][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.235544][ T7788] team0: Port device team_slave_0 added [ 229.271099][ T7788] team0: Port device team_slave_1 added [ 229.313821][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.320952][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.329146][ T7794] device bridge_slave_0 entered promiscuous mode [ 229.337376][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.345582][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.354238][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.361375][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.368980][ T7790] device bridge_slave_0 entered promiscuous mode [ 229.376500][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.383656][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.392196][ T7790] device bridge_slave_1 entered promiscuous mode [ 229.415186][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.422335][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.429926][ T7794] device bridge_slave_1 entered promiscuous mode [ 229.450223][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.514154][ T7788] device hsr_slave_0 entered promiscuous mode [ 229.562311][ T7788] device hsr_slave_1 entered promiscuous mode [ 229.650009][ T7790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.660704][ T7790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.674641][ T7794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.735522][ T7794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.759804][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.793527][ T7790] team0: Port device team_slave_0 added [ 229.817491][ T7794] team0: Port device team_slave_0 added [ 229.827886][ T7796] chnl_net:caif_netlink_parms(): no params data found [ 229.842941][ T7790] team0: Port device team_slave_1 added [ 229.878813][ T7794] team0: Port device team_slave_1 added [ 229.891178][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 07:08:32 executing program 0: unshare(0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x3, 0x8]) setns(r0, 0x4) 07:08:32 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa800, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/37, &(0x7f0000000100)=0x25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0xffffff94, 0x40, 0xfa00, {{0xffffff93, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @dev}}}, 0x48) [ 229.960393][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.043116][ T7790] device hsr_slave_0 entered promiscuous mode [ 230.049951][ T7790] device hsr_slave_1 entered promiscuous mode [ 230.068014][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.083178][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.090664][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.107502][ T7794] device hsr_slave_0 entered promiscuous mode [ 230.114267][ T7794] device hsr_slave_1 entered promiscuous mode [ 230.122803][ T7802] chnl_net:caif_netlink_parms(): no params data found 07:08:32 executing program 0: sched_setattr(0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @mcast2, 0x4}, r1}}, 0x30) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0xb, "a934ca02d8d425"}, 0x9, 0x2) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@rose) [ 230.164816][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.172789][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.180423][ T7796] device bridge_slave_0 entered promiscuous mode [ 230.188169][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.196817][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.206955][ T7796] device bridge_slave_1 entered promiscuous mode [ 230.251387][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.260007][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.268787][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.275880][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.283723][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.292306][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.300591][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.307682][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.315199][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.325869][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.334368][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.343151][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.351863][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.360391][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.386811][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.394608][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 07:08:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1400008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mremap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000000)={0x7, {{0xa, 0x4e20, 0x7, @loopback}}, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x4}}}, 0xffffff67) [ 230.425910][ T7796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.448183][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.462326][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.470571][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.479024][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.491445][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.507090][ T7796] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.507286][ T7824] mmap: syz-executor.0 (7824) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 230.516146][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.537390][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.545334][ T7802] device bridge_slave_0 entered promiscuous mode [ 230.577167][ T7796] team0: Port device team_slave_0 added [ 230.584146][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.591197][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.599194][ T7802] device bridge_slave_1 entered promiscuous mode 07:08:33 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x2) accept$inet(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x20044094) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) capset(0x0, 0x0) [ 230.626147][ T7796] team0: Port device team_slave_1 added [ 230.646852][ T7802] bond0: Enslaving bond_slave_0 as an active interface with an up link 07:08:33 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x1000000000000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0x8000fffffffd) syz_extract_tcp_res(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() getpgrp(0x0) getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) r5 = gettid() r6 = getpgrp(r5) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1, 0x0) capget(0x0, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6, 0x3ff, 0x8001}) r7 = socket$inet6(0xa, 0x400000000001, 0x0) r8 = dup(r7) fsync(r4) ioctl$ASHMEM_SET_PROT_MASK(r8, 0x40087705, &(0x7f0000000280)={0x100000000}) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000007c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x800000001, 0x0, 0x5, 0xffffffff80000000, r6}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000580)=""/40) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) io_setup(0x20, &(0x7f0000000300)=0x0) r10 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000540)={0x2, 0x4, r6, 0x0, r10, 0x0, 0xff, 0x5}) getsockopt(r7, 0x9, 0x1, &(0x7f0000000680)=""/216, &(0x7f0000000780)=0xd8) io_cancel(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x423, r8, &(0x7f00000005c0)="f2f42245d196f91a48f2b821d3442e277a43f0ca0ad8ed1b65a81f934bc9a4fdca52f744ec264514eba836b2ca9b2e580d83a0ab4e20c5f62b71ca27af042df6ea32e6c5c9369755e64b56aec0188ec11bcea89595863c737ff8c0f248ad0d9201ff46962f0087fc1990817fdbaf8c2d3ca9a833872d38e2a9005b2e2903904e622869", 0x83, 0xf, 0x0, 0x0, r8}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) [ 230.682401][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.696300][ C1] hrtimer: interrupt took 25287 ns [ 230.702921][ T7802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.714919][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.756956][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.808623][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 07:08:33 executing program 1: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) r3 = dup(r0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xc0000, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200100, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x0, 0x7, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r3, 0x0, 0x10000, 0xfffffffffffff000}, {r4, 0x0, 0x1000000010000, 0xfffffffff0000000}, {r0, 0x0, 0xfffffffff0004000, 0x2000}, {r5, 0x0, 0x100008000, 0xfffff000}, {r0, 0x0, 0x10000fffff000, 0xfffff000}, {r0, 0x0, 0xfffffffff0000000, 0x4000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000002, 0x80, 0x20, 0x2000002, 0x0, r0, 0x20008}, 0x2c) [ 230.874259][ T7796] device hsr_slave_0 entered promiscuous mode [ 230.911821][ T7796] device hsr_slave_1 entered promiscuous mode 07:08:33 executing program 1: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2973ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd34", 0xee}], 0x1}, 0x0) rename(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0xc486a904111c309c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) [ 230.957183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.969064][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.986457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.002183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.010648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.017794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.032130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.042700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.050457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.059909][ T7802] team0: Port device team_slave_0 added [ 231.073742][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.097456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.106620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.115583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.122719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.132031][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.140912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.150426][ T7802] team0: Port device team_slave_1 added [ 231.194443][ T7802] device hsr_slave_0 entered promiscuous mode [ 231.231552][ T7802] device hsr_slave_1 entered promiscuous mode [ 231.291935][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.300365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.308876][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.317602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.326256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.334844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.343091][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.350107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.357692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.366143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.374831][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.381909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.389342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.398161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.406488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.437824][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.447027][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.459494][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.472381][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.480675][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.489744][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.498979][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.513847][ T7790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.522465][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.540826][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.549904][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.565134][ T7794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.576272][ T7794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.596424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.604693][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.614076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.622376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.652531][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.659675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.674776][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.714042][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.737680][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.759992][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.785603][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.802301][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.843703][ T7861] Unknown ioctl 8821 [ 231.854934][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.869431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.879031][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 07:08:34 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB="feb9fe9f21d4967a959505d84a1195c06c18", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="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"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34) 07:08:34 executing program 0: mkdir(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) io_setup(0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) socket$inet_udplite(0x2, 0x2, 0x88) [ 231.892740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.894630][ T7863] Unknown ioctl 8821 [ 231.899841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.900343][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.938131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.956699][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.963847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.979151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.988786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.989251][ T7870] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 232.002479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.028198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.068918][ T7868] BUG: assuming atomic context at kernel/seccomp.c:271 [ 232.071830][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.087383][ T7868] in_atomic(): 0, irqs_disabled(): 0, pid: 7868, name: syz-executor.0 [ 232.090253][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.110090][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.110231][ T7868] no locks held by syz-executor.0/7868. [ 232.119624][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.128690][ T7868] CPU: 1 PID: 7868 Comm: syz-executor.0 Not tainted 5.0.0-rc7-next-20190220 #39 [ 232.138894][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.141552][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.141559][ T7868] Call Trace: [ 232.141582][ T7868] dump_stack+0x172/0x1f0 [ 232.141605][ T7868] __cant_sleep.cold+0xa3/0xbb [ 232.141622][ T7868] ? trace_hardirqs_on_caller+0x6a/0x220 [ 232.141641][ T7868] __seccomp_filter+0x12b/0x12b0 [ 232.141667][ T7868] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.141687][ T7868] ? seccomp_notify_release+0x280/0x280 [ 232.141704][ T7868] ? trace_hardirqs_on_caller+0x6a/0x220 [ 232.141720][ T7868] ? retint_kernel+0x2d/0x2d [ 232.141739][ T7868] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.141772][ T7868] ? retint_kernel+0x2d/0x2d [ 232.141799][ T7868] __secure_computing+0x101/0x360 [ 232.150247][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.159825][ T7868] syscall_trace_enter+0x5bf/0xe10 [ 232.159846][ T7868] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 232.159870][ T7868] ? lockdep_hardirqs_on+0x418/0x5d0 [ 232.159891][ T7868] ? trace_hardirqs_on+0x67/0x230 [ 232.163205][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.167492][ T7868] do_syscall_64+0x479/0x610 [ 232.177924][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.182769][ T7868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.182783][ T7868] RIP: 0033:0x45ac8a [ 232.182800][ T7868] Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d df ba 5f 00 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7 [ 232.182808][ T7868] RSP: 002b:00007fa4ddd29c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 232.182822][ T7868] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac8a [ 232.182831][ T7868] RDX: 00000000000308b6 RSI: 00007fa4ddd29c60 RDI: 0000000000000001 [ 232.182839][ T7868] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 232.182848][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.182858][ T7868] R13: 00000000004c4cd5 R14: 00000000004d8890 R15: 00000000ffffffff [ 232.218871][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.274528][ T26] audit: type=1326 audit(1550732914.992:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x50000 [ 232.378183][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.385300][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.393083][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.401933][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.410383][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.419016][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.432526][ T26] audit: type=1326 audit(1550732915.002:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 232.461347][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.487998][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.499955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.514007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.528272][ T26] audit: type=1326 audit(1550732915.002:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x50000 [ 232.556486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.565341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.574159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.582847][ T26] audit: type=1326 audit(1550732915.012:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x457e29 code=0x50000 [ 232.605867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.607698][ T26] audit: type=1326 audit(1550732915.012:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x50000 [ 232.614929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.642142][ T26] audit: type=1326 audit(1550732915.022:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 232.646118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.666807][ T26] audit: type=1326 audit(1550732915.172:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7866 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 232.697489][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.716691][ T7796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.728114][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.736269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.746589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.755078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.780462][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.815130][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0 07:08:35 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x2a}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x6}, 0x8) io_setup(0x4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x102000}) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x1, 0x80) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000001700)) connect$rds(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000440)={0x8, 0x2000}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x62b}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000380)={0x0, 0x4004400}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) 07:08:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x5, 0x5, 0x209e20, 0x3, 0x800100000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000140)={0x4, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0xffffffffffffffca) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000)="d82d217b9590c9b304db8684", &(0x7f0000000040)=""/92}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20082, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000100)) 07:08:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001180)='/dev/rfkill\x00', 0x20000, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4082, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000001140)=0xfffffffffffffff7) write$UHID_INPUT(r2, &(0x7f0000000100)={0x8, "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", 0xfffffffffffffeea}, 0x1006) bind$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000011c0)=@bpq0='bpq0\x00', 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") listen(r0, 0xffffffff) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)="64dd1f836323b603b6556adf748bfb460c3250445e599982fc1532313819fe76bdf85f0cc67d670281922ae16bb25682ce7cd6e724f187cf70f0327a6331b0fb6a5193169f447f62b077f9ee2188adefff5a43dba5897ddf02a5aa353ca89c6c3ade79ad7f93b7ce0dc4a3ee85af388444598773d4acbbac0cc02827f57ded8754df408470e0443809168627707f79e0b5c6210bb7aa2db23d2959784c84be6029f451fbd27cda258a7ebf57db1b8b5aea1dc3b1cca647ae1d", 0xb9}, {&(0x7f00000012c0)="48530cfac998b5e77de83452e15951ec6b29afbf532a4a89a5ca99cf0b0c22071c6e4454fbfbce6de8c5082a177c", 0x2e}, {&(0x7f0000001300)="b68a1cb292fcd3a35d6fd6d1c4592633e6560ebad5995682f6d6358ef4c4066ea4", 0x21}], 0x3, &(0x7f0000001380)}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000000)) 07:08:35 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffca7, 0x840) capset(0x0, &(0x7f0000000400)={0x0, 0xfffffffffffff026, 0x200000, 0x4, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)={0x77359400}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000300)={0x0, 0xfffffd65, 0x0, 0x3, 0x100, 0x0, 0x0, 0x3, 0x40, 0x2, 0x80000001, 0x0, 0x2, 0x662, 0x0, 0x7, 0x783, 0x3, 0x7, 0xaa1, 0x401, 0xaea, 0x0, 0x20, 0x0, 0x4, 0x0, 0x37b800, 0x0, 0x80, 0x7, 0x0, 0x0, 0x6, 0x100000000, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3}, 0x1000, 0x0, 0x0, 0x0, 0x401, 0x23837179, 0x4a}, 0x0, 0x3, 0xffffffffffffffff, 0x9) pkey_alloc(0x0, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r5}, 0xffffffffffffff80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) syz_genetlink_get_family_id$ipvs(0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x1b9) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000180)=0x68) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0x3, {0x0, 0x0}}, 0x20) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) tee(r7, r6, 0x60, 0x4) 07:08:35 executing program 0: mkdir(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) io_setup(0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) socket$inet_udplite(0x2, 0x2, 0x88) 07:08:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x20, @rand_addr="e7b648433ec3dff9765a5699142f1b47", 0x800}, @in6={0xa, 0x4e21, 0x8, @rand_addr="068d9b6bb98b5b3c86f59803a9d0e9bf", 0x80000001}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x922, 0x7fff}, 0xc) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000040)=0xf4) 07:08:35 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200000000002, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000020c0), 0xfffffd41) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r3 = socket(0xa, 0x3, 0x8) semget$private(0x0, 0x4, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="eca94680ca140b12423b8d931dec2d929449fd6e5eede7fb6ae53cdea7cacec31f1f51cc98762efd87f154ecb87de1b1e38f131c9ea400374802665b1ff8fa7b0b7f09e2750b20195b7068d923ade919833b1186cc5ed1053cd91112fd85afad65cc15fe36538e555ea1cd9cdf886e0b73e30c3373ca8426b6c905edcc788ad8630b195ca43a293221e8e59c501d3092e52770238a8a"], 0x1}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000600)={'ip6tnl0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 07:08:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x7, 0x0, {0x14}}}, 0x30}}, 0x0) [ 233.067778][ T26] audit: type=1326 audit(1550732915.802:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7893 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x50000 [ 233.091571][ T7898] BUG: assuming atomic context at kernel/seccomp.c:271 07:08:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x867, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x20000000000003, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)=ANY=[@ANYBLOB="30040000", @ANYRES16=r2, @ANYBLOB="0300000000000000000011000000100004000c00010073797a31000000000c0005000800010075647000"], 0x30}}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100000, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(r3, &(0x7f00000002c0)=""/218, 0xfd97) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) [ 233.172106][ T7898] in_atomic(): 0, irqs_disabled(): 0, pid: 7898, name: syz-executor.0 [ 233.240622][ T7898] no locks held by syz-executor.0/7898. [ 233.267591][ T7898] CPU: 1 PID: 7898 Comm: syz-executor.0 Tainted: G W 5.0.0-rc7-next-20190220 #39 [ 233.278034][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.288093][ T7898] Call Trace: [ 233.291392][ T7898] dump_stack+0x172/0x1f0 [ 233.295744][ T7898] __cant_sleep.cold+0xa3/0xbb [ 233.300529][ T7898] __seccomp_filter+0x12b/0x12b0 [ 233.305475][ T7898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 233.310940][ T7898] ? seccomp_notify_release+0x280/0x280 [ 233.316500][ T7898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 233.321971][ T7898] ? retint_kernel+0x2d/0x2d [ 233.326578][ T7898] __secure_computing+0x101/0x360 [ 233.331611][ T7898] syscall_trace_enter+0x5bf/0xe10 [ 233.336735][ T7898] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 233.342994][ T7898] ? lockdep_hardirqs_on+0x418/0x5d0 [ 233.348291][ T7898] ? trace_hardirqs_on+0x67/0x230 [ 233.353330][ T7898] do_syscall_64+0x479/0x610 [ 233.357930][ T7898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.363833][ T7898] RIP: 0033:0x457e29 [ 233.367735][ T7898] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:08:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xa87, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 233.387535][ T7898] RSP: 002b:00007fa4ddd29cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.395951][ T7898] RAX: ffffffffffffffda RBX: 000000000073bf08 RCX: 0000000000457e29 [ 233.395961][ T7898] RDX: 00000000004c4cd5 RSI: 0000000000000081 RDI: 000000000073bf0c [ 233.395970][ T7898] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 233.395980][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c [ 233.395989][ T7898] R13: 00007ffdcb925e1f R14: 00007fa4ddd2a9c0 R15: 000000000073bf0c 07:08:36 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20400440c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getflags(r0, 0x40b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0003000000000000080000000000000002000000000000000000000000000000ad9d7bf34d49886c085446f78febd367538c2da9121192129b2d2662b1b4d99683a3d3474929beb89e89824802e25e887505016decf070290755d4fdf338c5686ded5763fdfe78068b4cba53"]) 07:08:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget(0x3, 0x208) msgctl$IPC_RMID(r0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) [ 233.437855][ T26] audit: type=1326 audit(1550732916.192:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7893 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 07:08:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01002e2e200000000000000000000000000000000000000000"]) [ 233.514562][ T26] audit: type=1800 audit(1550732916.212:40): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16536 res=0 [ 233.515257][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.546086][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state 07:08:37 executing program 3: connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffbd) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffc6e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000100), r0, &(0x7f0000000140), 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_buf(r4, 0x29, 0x33, 0x0, 0x24f1b73f) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r2, r6, &(0x7f00000000c0)=0x209, 0x5a) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x60240, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0xdae, 0x0, 0x8}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001240)=ANY=[@ANYBLOB="e4000000467cec80bd7f49807ce97134069f638c9e6e7bed038c741d928097f9651652cee9f4c85bbb1b127ca6fae98f040b01ccfb1a88b5d804d58e57cccdf8cecccb4e9e2d2391f96079d29e5b5d222d83e08d8fa6a9eff95d445cd6ca466fdc7860b71ed29f6711c87638d0a455a9492940ee9384336483f9cc0aaf05f6099827d157cc60176ec39aef255a46ae0c2e72541ce5061e5c5254a79bf021584a46ddbd20255a15a938c56684f30fc2b36b23ff6e36a9e36d44a03e5009d4338f52668535a9cd330277ef782665042967169364e1f3c1554223b1c8646d3634d4625541d8d53c98350899e1e1e4171ab3a30990742c09fc00"], 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e20, 0x7fff, @loopback, 0x40}}}, 0x84) r8 = add_key(&(0x7f0000000e80)='cifs.spnego\x00', &(0x7f0000000ec0)={'syz', 0x0}, &(0x7f0000000f00)="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", 0xff, 0xfffffffffffffff9) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)='minix\x00', r8) syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x81, 0x400000) 07:08:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000d00)={&(0x7f0000000340), 0xc, &(0x7f0000000cc0)={&(0x7f0000000400)={0x8a0, 0x14, 0xa, 0x501, 0x70bd25, 0x25dfdbfb, {0xc, 0x0, 0x4}, [@nested={0x444, 0x2d, [@generic="6889334c3e05f6ad065f31436dfe1dddd9482a3606476a7eb39003ff0219ed93b31a5e7fb64c01fe0cf2ee681e01af614f2fab4cedfeec0c70ec56", @typed={0x8, 0x8c, @fd=r1}, @generic="526f1af15412d8c8686b671e211949fb6a7e5c0dd88bf10519bc62739fbda1ffab26dda9fd0e2921fb99dc971b8e69cfd29905a96d5aeef7111a941d7357d9a850ef55f25c131aa72730991ed2cdc46b640bc4e2f39f4f5ed15e2243483a6ad53d8bb2e0afb38d68bb26d7bace216eaecf362c5577763074521d82b49875e0f8b1df28821fcd3e4facf7d9115f27704a49373acbbe99ea49327dc85afee854d1c93c75e0279311a0ebd524ceaf5a50", @typed={0x8, 0x65, @pid=r2}, @generic="202abf3dca9cb1a87908b72bbba4e930ae362fe396fb515aa298298ff93d57b28492fc52e90bfca2689d8c0c58743dbfa2687410557fc7e5006fd0723840e0bb54a01d21ce6415f254e3d293c302a22c5d919a9286a26a7ed69f634deadf175792165e694d1b354364669b11faebcc38352b84521aa4804ac64441144f62f25071c62330a754d54ef561a0bbdafbd1d0ce949482cfe920c17f80ba780ab6c0d052bd6b8be1", @generic="44193308bff8f2d193d85969eb7ef6f733c3a23a402af196cd0c7fc7545f36d536a8be4597b6d5f1431efeff0bfa4d72e09eb4bd465140078914", @generic="9aad69e7c47c5180e30062e66e2cff6a8535a6b04b42b1adbe836fa487a187200db516e802dc5ada0c31b9e0a5af43ec86e4d6239f6b6c6316ceeab84ffecd1bb1c3e43878c70d1f6e9e98fc7ea3ae81e57cc352b026bedf9eed8462906d00021c4cd2415b48fa8e0b7c484488ed5c26c4111b5186274091e0e07b7487c7a0d9f1211d0eda9e6567d773cb72f09514b54e1a413653ceba12a94c1b67e078725006b1f1371db03f582efab8d2e71369ea205425d8aec88b638a4e41eac0e9a65a97518c289da1d4c205213f2d6095f77ce634759cb7b8f0a9bfa319af3cd668920d7990d3cade30a40ffc8b9b7779dab54b70516a541b161e", @generic="46357b1219b2227e0cfe708281b1b54ccc6c082a71576c0c8b2b0db7bc55218c15c71ddf8dd3405c7e6a1964205c8eba9cfafe18b7945fd2999d9a513ad3be11e162c57c813b33dbaf34ff93ddad5f0625840d97b764e441ac9277af62f138db0ddca637bf22d152e82060800f34db44a4e6564fc6775a3c66b2ef7473feb09c7304c6b7f8d86c8a2408b2e2e57b118eb1a36b5e9c2b4bc4b6376998a3be8af75d6e437f20b1f082dec260272e5069ef83dcf1cdf117ecb161078fe87f38e94e58f008e1cd", @generic="09ab418b8d05b6acd385537049c416282c8ceb8cb3d95db3568bc9e312b12a98db38c8b2dc75f7d945338ff10c13573fd515df2e9296606e51bea8212e8b9965b20b10f612f010d55adbb84afb3a73a1fec7767a394282080938f7e9442991b025bf34ccafaf26b4646e30095d84ca741f20a55a8e12f25bc71bc15377ee6a967a58e232070fc4012fe062d077cfae137964f245e41eb5e81ab0a6063265cdcb0629e4f79262541f49"]}, @typed={0x8, 0x91, @ipv4=@local}, @generic="a480cb456e765c7b8e433f420cca81a4b790412247b23dddae8f2a907515f9b366caddaf71870f600f833c7d45890641568675001cc4659c75433305813fc51cd4cc80f1ddf3e93ee92e0da9021ef4fb812ed7454c2fa5df1b642f30ecd36c6d812a349b262d616be22402caf2526326a4cfa4eca07f312cf360ecaaf3db5c28915ebabda5dff8be058f5d8555375d8d4e3356", @generic="4283b172147b9674816032fb95438213e24dc79c3fa09b39805a82b0689f2f73d0799e2e68ddb0dd8b53c8d6f13ad6c316d7149e3ffe5149698b9d8dd341f6769ee83fd4ea966e01730dd50b37aaf37c839a4dbb11eae774f7996a825522da175d9e7159f713e0a04cb3ee69e6671a6ae3fd5248ecb78ff369cd4e417aca5e260abc4e28e0d993479e3fb699f3079fc9ee71", @nested={0x318, 0x6f, [@generic="eb4729ebf3a1bc15b42da77a3f1c64631c37dce737ee5e6393859074a16078b3d640a36b447a4fe0fd1e751ca497f4339dfd450711693f6de113d14f7efc33ce9ff9c258ac2f995c6b629510ed1d", @generic="6bc03022afd2224cd1212bc618153bab8b97f6e4706696ed6ed46f47dca7235e45f592552cba1e5506247a370c0580e9b3ccd8f875f3282a2c4e12dd0ed83c32834225fa117a6731908c53822c0e09802be3d66e17eab31e2de3dfcafaee4c7b622402384ef2dffb8c80f283e32fe7f0f5efb6f73c4c82886520b77aa174ba4c0c1f41ef4f97182be0904f736852d7167177efae71716991111e055c29165d3b1dd6147552c880c30c9b566340e57a55d817989c8433c2b76e07717941d53df4f17a8eb9bfa8e6f9abc009ce5e669f402cf4d1b1b98c8936a1c52419212cbe214c9d1ffa87b992", @typed={0x28, 0x66, @binary="b5a193d0e3f70c85b548dae24026092268306b16a2f569d6677493025aacd15da665"}, @generic, @generic="00929806189f74d5e0137d0f990b62d0f075b3ed708eebd4aeba5ceb0a297391fb6241a1a6161537bb1d78be1a7d8f75b7acb2c4ddb1b46f185bfe255a", @generic="e4e1e6cbaf5f24a1dbfd746f08558a712efd5053740ea4a7b3ab626d766f0de1247f79726903d73c7e937bec1ec1e57a392a0a14eac0dc98e01db775c8096ce31849598dadd9874f034cb170bada7baaa3e9fc5753b2bcbe54493d5eeec57fa92b6e77906dd25bb1e658961daa2b65a1dcfb96f8170c4e180012b6bcc69af874f73745cdb9ab10f123f9a54419290a93735a9bf61c4857596d226893253466ded06e29e1b7433dacdc1466bdf337bb653f4297c5", @generic="fcc3254620434970a9f2ccd8af3a3694084c", @generic="5d3400389d78466e46bc0ab85030f37b2d0f280768e4a850eab695fc3eee283dffdc78f18e2e31e09b686fc266547ae420b08e7d93b9ea9a309de2d71eea7d4af77b38b2ccf91d925747560811429462deddc5d24dd521af986aa0f9d36ec9b8749ae945ee2a00622635dcd0b271bca6186dd4c388", @generic="972ce5d7aa5b84e805545cee102653d9b990b0f666ed00cf9e9eba46a5923678b977b4f50d462938eb6eb7028c5b5668855d8952ee32db1e82cae3e0"]}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/14, 0x5}) r5 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000200)={0x3, 0x0, @ioapic={0x2000, 0x4, 0x7fff, 0x400, 0x0, [{0xabc, 0x800, 0x6, [], 0x3f}, {0x3, 0x3, 0x3ff, [], 0xffffffff}, {0x7, 0xa5b, 0x4, [], 0x80}, {0x7, 0x7fff, 0x2dc0, [], 0x3ff}, {0x8, 0xa7f, 0x100000000, [], 0x10}, {0x7f, 0x4000000000000000, 0x2, [], 0xffffffffffffffff}, {0x3ff, 0x5, 0x4, [], 0x9}, {0x80000000, 0x2, 0x400, [], 0x9}, {0xffffffffffffff98, 0x3, 0x2, [], 0xffffffff}, {0xdab5, 0xb2, 0x3f, [], 0x6}, {0x2, 0x7, 0x5, [], 0x1f}, {0x200, 0x4, 0x7ed, [], 0xfff}, {0x6, 0x4, 0x4, [], 0x7}, {0x0, 0x10001, 0xfffffffffffff09f, [], 0x9}, {0x9, 0x85, 0x5bf, [], 0x8}, {0x0, 0x90b, 0x7fffffff, [], 0x7}, {0x3, 0x10001, 0xffffffff80000000, [], 0x252e}, {0xcc4c84400, 0x9, 0x800, [], 0x4}, {0x0, 0x6, 0xfff, [], 0x3f}, {0x6, 0x8, 0x1, [], 0x7}, {0x0, 0x41, 0x0, [], 0x5}, {0x800, 0x400, 0x40, [], 0x23}, {0xfff, 0x401, 0x4690, [], 0x7ff}, {0x100, 0x2, 0x8, [], 0x4}]}}) socket$unix(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000180)=""/97) [ 234.527772][ T7961] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 234.567411][ T7924] ýÿ: renamed from bridge0 07:08:37 executing program 1: unshare(0x8000400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) 07:08:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x401}, 0x1, 0x2, 0x0, {0x0, 0x7f}, 0x4000000000, 0x100000000}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 07:08:37 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f0000000240)='./file0\x00', 0x100000000, 0x2, &(0x7f0000001600)=[{0x0}, {0x0, 0x0, 0x6}], 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::b:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffff, 0x100) ioctl$TIOCSBRK(r2, 0x5427) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000014) 07:08:37 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000080)='-$\x00', 0xffffffffffffffff}, 0x30) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20000, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x80000) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000240)={r3, r4, 0x1}) mq_open(&(0x7f0000000000)='-$\x00', 0x842, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x80000000}) 07:08:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000080)={0x1, 0xcd, [{0xfffffffffffffffb, 0x0, 0x7}]}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) 07:08:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x2e3e0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x7, 0x7, 0x800}, 0xc) ioctl$EVIOCGREP(r2, 0x4004743b, &(0x7f0000000340)=""/174) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x3, 0xab, &(0x7f0000000100)="963a0ef5e62d9f7a971a4b2dd6d2e40c2316446ad419dd4fab81dd35cb3fd10b576cd8ac8240e199a0aa5c2b6168ef82e82ffceba173a6c9065e92b464e8fcecaa43319c9e75f50406b174ace69912a00838ed9915ec212fe815c40cba3d90b58d180ab079e964afc0367ad4e1f5bba2f790543d2a7f0ec411e08c2119510e51195c8e7a7a24e89a5b2df6263fa09e71a3e73a1ff759eebf134252f136cf11173a8fd8e06b16922ae898ad"}) 07:08:38 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~IyM\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xecM.\x8dD<\x82\xfc45\xbe\xd4\xde]i@\x9ax\x1c\x86>\x0f\xd8\xa6\xf8h\x92[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\x1a,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xcf\x81i0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4Nc\xe1\x16\n\xf1\xac\xf4]\xb1\xcd\xf4\xbc\xbb\xed\xe7\x95\xdby\x8ca\xdba\xe2?') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2200}) 07:08:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x6de, 0x62, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x100000001, 0x7f3, 0x5, 0x3, 0x7fffffff}, 0x14) 07:08:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) socket$kcm(0x29, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 07:08:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1f8, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x4, @mcast1={0xff, 0x1, [0xc, 0xf0ffff]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x4008000) r1 = dup2(r0, r0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, {0x7f, 0x5, 0xfffffffffffffeff, 0x5, 0x100000000, 0x3}, 0x7fffffff, 0x100}, 0xe) [ 235.497536][ T3479] libceph: connect [d::]:6789 error -101 [ 235.508704][ T8028] input: syz0 as /devices/virtual/input/input5 [ 235.524535][ T3479] libceph: mon0 [d::]:6789 connect error [ 235.543646][ T8032] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:08:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = shmget(0x1, 0x1000, 0x120, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) fadvise64(r0, 0x0, 0xc44, 0x3) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0c0600001000080826bd7200fddbdf255ddd13399263b6d4974d0008000800dd42227f215093689c33e377d8c72e77a1099c3b0a28703657aa0400f003ffcb00e32f3a7e1e6685d0c7dcc96aaf29a1a9365cdeb15ca167ef1a65c9f218ddd616e8167d4a4b8f5154a81dc845d2099cba2ccf441b18b808c37e9113471a0123d93ef220901747c9d4613cd3626e6fcd82cd6cdf80ba1d804b49afe60308d47796ca6d03ff31a2b1bc7e77", @ANYRES32=r4, @ANYBLOB="140046007070703162646576996574683025000014005f00fe880000000000000000000000000101af5cc7c19375f93fb90dc53b6953a18d8e6e5296fac126575e506773d3f501a533668e78506921f83e9686d1fc748908006200", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x60c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:08:38 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'nr0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xf80000000000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3, 0x2}, &(0x7f0000000280)=0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)=0x3f) ioctl$TCFLSH(r2, 0x5437, 0x0) [ 235.577895][ T8034] input: syz0 as /devices/virtual/input/input6 [ 235.588228][ T7803] libceph: connect [d::]:6789 error -101 [ 235.597723][ T7803] libceph: mon0 [d::]:6789 connect error 07:08:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x2, {0x5, 0x6, 0x0, 0x1f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000200)={0x56, 0x6, 0x7, 0x7}, 0x8) [ 235.686639][ T8042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 235.709241][ T8032] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:08:38 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f0000000240)='./file0\x00', 0x100000000, 0x2, &(0x7f0000001600)=[{0x0}, {0x0, 0x0, 0x6}], 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::b:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffff, 0x100) ioctl$TIOCSBRK(r2, 0x5427) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000014) 07:08:38 executing program 3: r0 = socket$inet6(0xa, 0x7, 0x2) getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f0000000180)) 07:08:38 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10602, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0xf, {0x7f, 0x6, 0x80, 0x8}}) 07:08:38 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'nr0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xf80000000000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3, 0x2}, &(0x7f0000000280)=0x8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)=0x3f) ioctl$TCFLSH(r2, 0x5437, 0x0) 07:08:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x3fffd, 0x0) 07:08:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) socket$isdn_base(0x22, 0x3, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 07:08:38 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xaa401, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', 0x1400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x4, 0x8, 0x10005, 0x4}, 0x2c) 07:08:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/dev_mcast\x00') readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x3) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)) 07:08:39 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x20, 0x105000) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='.\x02\x00\x00\x00oup.cpw/syz1\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xfffffffffffffd97) write$cgroup_int(r2, &(0x7f00000000c0)=0xffff, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) 07:08:39 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0xffefffffffffdffa) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xdb, 0x1) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/46) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) futex(0x0, 0x0, 0x0, &(0x7f00000000c0)={r1}, 0x0, 0x0) 07:08:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x11, &(0x7f0000000100), &(0x7f0000000000)=0x1) 07:08:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0xfffffffffffffffd) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x20, 0x10000) clock_gettime(0x7, &(0x7f0000000440)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000002c0)=""/120, 0x78, 0x7, &(0x7f0000000380)={r2, r3+10000000}) ioctl(r0, 0x120000000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r4, 0x80000, r0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x8000, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000000200000, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000180)={0x9}) 07:08:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[@ANYBLOB="b8070000000000000000000000000000000000000000000000000000efffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000002"], 0x69) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r6, 0x0, &(0x7f0000000080)="6a3eaef2f6920a2cb89f9aa1a04657dc14c68020cc25c2450f9c177141cc6c821d02226b08688765f9f06a27c5757d0a22b4bfa0c7292428888d29747103063bd8d1cc86a16e8a05d0086ca8fa6a613117ca56cc5e748dea5db1a27d82fe3e98f534694fc89553d4f02f5fff57bf551a192ffc6bc96e00dfec") 07:08:39 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) flock(r0, 0x1) fchdir(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x81785501, &(0x7f0000000080)) 07:08:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x10a) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x9, 0x0, 0xfffffffffffffffb, 0x2000000000000004, r0, 0x50000000000000}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffa, 0x0, 0x820007, 0x0}, 0x2c) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0xa0000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x9, 0x34424752, 0x7, 0x80000000, 0x2, @discrete={0x3ff, 0xfffffffffffffffd}}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x792, 0x4) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 07:08:39 executing program 2: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20040, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757070657264697200000000696c65302c6c6f7765726469723d2e2f66696c65312c776f666b6469723d2e2f66696c65314fe0fad2a383956d92bf2ab2a3249b1f48bcd275466e9e89177165fdced14801e78e4d100f79a991457ac59814c89ee596efbbe578862e5d61d8f230b41c8043d0619fab320300e85fcbb8a42c327bb4aa2910e76eba244a6fac7c1de130bd7e1242ca491fb2faefd32a37b958947ebc6fc99b4a78284feec66ccfa0f058ca269ccf1fc979de2244a67fed2ebf482898774cde90b039f20eddfccd3c610e59ace000380000000000009125886f604ca01e05a43303ef743d0217e712fbc4e25a73c8204f1c5d87dc"]) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x2, 0x0) 07:08:39 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x20, 0x105000) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='.\x02\x00\x00\x00oup.cpw/syz1\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xfffffffffffffd97) write$cgroup_int(r2, &(0x7f00000000c0)=0xffff, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) 07:08:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$addseals(r0, 0x409, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x40000, 0x0, @loopback}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) [ 236.802853][ T8134] overlayfs: unrecognized mount option "upperdir" or missing value 07:08:39 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff09) fallocate(r0, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x7}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x80201, 0x0) epoll_create1(0x80000) sendto(r2, &(0x7f0000000280)="3f4bdc1a93f5db2567d184f0f9cbf9ad918b1bf73803fedabf9a426c6ab2ad1789ae9fb6b1bd6db86ffc4adad0dcf5013987cba81fc226d7637b2285118d874444033f6f85474964b84905f1cbc9cb9db12fe36d076431b1dbc51508cd8cb5c8fb7c6cf86199788684c23bb9a691922606551b89cae63227bb725c3b1ef1874f", 0x80, 0x80, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x90000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x6, 0x0, [], [{0x10001, 0x1000, 0x5, 0x10000, 0x0, 0x401}, {0x7ff, 0x40, 0x7f, 0xb4b, 0x2, 0x5}], [[], [], [], [], [], []]}) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000380)={0x2a1, 0x3}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000500)={0x89, @loopback, 0x4e21, 0x0, 'rr\x00', 0x22, 0x6, 0x5a}, 0x2c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[]}}, 0x4801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) epoll_create1(0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x3fc30100, 0xfeff0000]}, @empty, @loopback}) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 236.869398][ T8132] *** Guest State *** [ 236.875334][ T8146] overlayfs: unrecognized mount option "upperdir" or missing value [ 236.883460][ T8132] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 236.898201][ T8132] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:08:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getpgid(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote}, &(0x7f0000000240)=0xc) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffa0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 07:08:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8480, &(0x7f0000000140)=ANY=[@ANYBLOB="757365667265652c646f74732c616c6c6f915f7574699d5fcf920bb550346333e52e7ed66d653d30300d30303030303030303030303030303030303030322c00b8a7f46c413db95b1258adb75edc5a15314d8585edb8eb4cecb2d41658d4e7c68bee68f8a4f3855fa7ee9810"]) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@empty}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) [ 236.924800][ T8132] CR3 = 0x0000000000000000 [ 236.938255][ T8132] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 236.947195][ T8132] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 236.959346][ T8132] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:08:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5080800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xffffffffffffffef, r2, 0x410, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xbde}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) timerfd_create(0xf, 0x80800) [ 236.993028][ T8151] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 237.006991][ T8132] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.037217][ T8158] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 237.054709][ T8132] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.076873][ T8132] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.119699][ T8132] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 07:08:40 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000300)='/dev/radio#\x00', 0xffffffffffffffff}, 0x30) wait4(r0, &(0x7f0000000380), 0xb, &(0x7f00000003c0)) r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) write$9p(r1, &(0x7f0000000240)="ce94805c0516469523691e775f0db749a4d497489c5cf65227068c72112e19d85d94134745c14db729233b4b735e77a15e24ee1be867efe25412e6070d8a3ec546cb12e6f6cf5798d503d83ab0d6157fac4ad2511d624840e2d5c2aa4fc483ae7915f90a655020a2d919a74cd85b2a4ebf259164915d0544f4e95c25aad567b88ce28fbd896b5a9404e9fdcfec897ba5af2ca91b17c58949a238dd9fd59eceab863de23f6b6bd26a3fc4a133", 0xac) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)='/group.stat\x00', 0xffffffffffffffff}, 0x30) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ptrace$setregs(0xf, r2, 0x5, &(0x7f00000000c0)="434e544d31688ccd32b14cdc4ebfb20535fecadd83a6cc4e43e0ce5d72b3488c55a90e276498a12818b24057c37dce76c326691ce7d89e61cef4779566111e9ac1ed11464403c672c99e97a73088cbbd6a9db7dd249842eb25e3e4be2ea3564dc671de5065cd2af674fe51c157afbc2decb9c101a7358bf05456829e108c9f7154a86a9aab9a4b786a8aaa64038deb6d1bf1d04df14a1bff7f4640227578e6d98746863fcf82de15a92200b70b") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:08:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000002580)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/210, 0xd2}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000002380)=""/187, 0xbb}, {&(0x7f0000002440)=""/199, 0xc7}, {&(0x7f0000002540)=""/32, 0x20}], 0x7, &(0x7f0000002600)=""/149, 0x95}, 0x7508}, {{&(0x7f00000026c0)=@nfc_llcp, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/225, 0xe1}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/122, 0x7a}}, {{&(0x7f0000002980)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000004840)=""/4096, 0x1000}], 0x1, &(0x7f0000002a40)=""/4, 0x4}, 0x6}, {{&(0x7f0000002a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/22, 0x16}], 0x1, &(0x7f0000002b80)=""/181, 0xb5}, 0x6}, {{&(0x7f0000002c40)=@nl=@unspec, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002cc0)=""/201, 0xc9}, {&(0x7f0000002dc0)=""/132, 0x84}], 0x2}, 0x10000}, {{&(0x7f0000002ec0)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002f40)=""/125, 0xffffffb1}, {&(0x7f0000002fc0)=""/135, 0x87}, {&(0x7f0000003080)=""/158, 0x9e}, {&(0x7f0000003140)=""/69, 0x45}], 0x4, &(0x7f0000003200)=""/205, 0xcd}, 0x100000000}], 0x6, 0x0, 0x0) [ 237.197071][ T8132] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.260228][ T8132] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.292922][ T8132] GDTR: limit=0x00000000, base=0x0000000000000000 [ 237.324069][ T8176] ref_ctr_offset mismatch. inode: 0x40ae offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 237.375321][ T8132] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.398895][ T8132] IDTR: limit=0x00000000, base=0x0000000000000000 [ 237.426086][ T8132] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 237.440352][ T8132] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 237.450079][ T8132] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 237.470809][ T8132] Interruptibility = 00000000 ActivityState = 00000000 [ 237.478224][ T8132] *** Host State *** [ 237.482654][ T8132] RIP = 0xffffffff811b3240 RSP = 0xffff8880539978e0 [ 237.489532][ T8132] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 237.497265][ T8132] FSBase=00007f2f7c4d4700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 237.511081][ T8132] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 237.519360][ T8132] CR0=0000000080050033 CR3=000000008e065000 CR4=00000000001426f0 [ 237.527485][ T8132] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 237.538002][ T8132] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 237.548190][ T8132] *** Control State *** [ 237.552811][ T8132] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 237.582647][ T8132] EntryControls=0000d1ff ExitControls=002fefff [ 237.588816][ T8132] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 237.597452][ T8132] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 237.605426][ T8132] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 237.618433][ T8132] reason=80000021 qualification=0000000000000000 [ 237.626010][ T8132] IDTVectoring: info=00000000 errcode=00000000 [ 237.644975][ T8132] TSC Offset = 0xffffff7efd772dc3 [ 237.651107][ T8132] TPR Threshold = 0x00 [ 237.660701][ T8132] EPT pointer = 0x000000008e0a901e 07:08:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@rand_addr="39a934fd641eaf2c7070184780ffc37c"}, 0x0, @in=@multicast2}}, 0xe8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '@!\xc0^#\x00'}, 0xb) fcntl$setstatus(r1, 0x4, 0x42803) 07:08:40 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x440400, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @multicast2}}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) 07:08:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000180)={0x3, @null, r1}) semget(0x3, 0x4, 0x0) 07:08:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2}, 0x48) 07:08:40 executing program 1: modify_ldt$read_default(0x2, 0xffffffffffffffff, 0xffffffffffffff62) 07:08:40 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x31, r2}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x1, 0x0, "79eca53778b70eb92219fbcf25407bf45e04bf8063afb68a733fab922622e42f"}) 07:08:40 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lapb0\x00', r1}) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2, ':chain\x00'}) 07:08:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x5ef7) bind$inet(r0, &(0x7f0000000240)={0x2, 0x3, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0xd08fc, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1d, 0x0, 0xfffffffffffffc49) 07:08:40 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) keyctl$unlink(0x16, r0, 0xfffffffffffffffd) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 07:08:40 executing program 3: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) mount(&(0x7f0000000500)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) chdir(&(0x7f0000000480)='./file0\x00') r1 = getpgrp(0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) 07:08:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="10ef1e00ef4bc9d77774d2bcf022dcaeaef353d50334dca297002af8f2ae98d48fe2c8462e7b6b57a9"], 0x29) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000040)='./file1\x00', 0x0) 07:08:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r0, 0x0, 0x8001, 0x0) [ 238.148353][ T8243] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:08:41 executing program 1: gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 07:08:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000000, 0x80, &(0x7f0000000300)=@nat={'nat`\x00\a\x02\x00\xa0\xff\xff\xff\xff\x00\xff\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x04\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 07:08:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51f6af874c8b0de7fb306bf908528f9c30badbb14e551634d2110fe89b5a9b34"}}) 07:08:41 executing program 1: syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x66000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 07:08:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af500023c123f3188a070") r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x20000000001) [ 238.831484][ T8258] xt_nfacct: accounting object `syz1' does not exists 07:08:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) add_key$keyring(&(0x7f0000000500)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0xfffffffffffffffc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xb, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x3) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 238.906959][ T8262] syz-executor.1 (8262) used greatest stack depth: 23128 bytes left 07:08:41 executing program 1: r0 = gettid() inotify_init1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) lstat(0x0, 0x0) getgid() lstat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getuid() r2 = dup(r1) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x1fb, 0x4) timer_create(0x0, &(0x7f0000002940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) pipe(0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) timer_create(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) prctl$PR_GET_DUMPABLE(0x3) tkill(r0, 0x15) 07:08:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$admmidi(0x0, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x80000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00`\x00', 0xfffffffffffffffd}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") 07:08:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) getrandom(0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, "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", 0x1000}, 0x1006) [ 239.208585][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.216028][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state 07:08:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbU\t\x00\x00\x00\x00\x00\x00\x00\xe83Q\xf1\xda\xedV\xac&\x9c\x92\x86 t\x93\xb4\xa5\x8d\xbd\xb5<\x1a\x90\xa3U\xb9{\xba\x99\xdf(\x9a%\xef\x0eO5\xcd\xbf\xe7\n\x13\xc3+(<\x02\x83|S0\xed\x0f9:\xc8\xb5\xa0\"\x00x\xe9\x1f\xe9\xee\x17\x88%\x19\xe3\x9d\x9d|P,\xb5+\x84\xaa\x1cZd\xb1fj\xde\xc7\xf0\xd8D\xaf\x01\x01\x8e\x95\x83X\xb9\xf5J\xb0\v\x0fC\xd3\x8e\x9d\xe1\x1e:!|\xa3%\xd2@M\x1b\xf3\xfe\xf1\x94\xffl~\x18\xedp\xa0\x10\x9fn\xcd\x9eK\x89\xf3\xa0\x1f\x93\xf3\xc0\x86\x04Y\xd5\xd5,\xc4\xf58y\xec\f\x16p\x9fs7\xb7\xc9\x85)\xe4\x1c\r\xdd\xe4\xe6\x91C\xec\x0e\x0e\"\xde\f\x99\xe3\xbaP\x0e\x94\xcd\x1fXl\x11\x13\xe3\xcf+>0\x8d\x01\xd4\xc3\xdf\x00\x0eDn\x05\x9dH\x9f\xa7\xceC\x18D\xe3\xf1\x1e\xb8\xa4\x9d\xae\xb9\x19\xa1\x1a\xa6\x13\x86q)/x\x85\x16\x8b2\xd5\x82dS\xd7\x16\xfc\xc6\xb3\xf6\x90\xa6\x14\x88\x1c;\xaex\x82(\xe0\xab\x91\xf0,\x9f=\xf2\x91g\xf0\xc9', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000000) 07:08:42 executing program 2: timer_create(0x1, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) 07:08:42 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x400) ioctl$CAPI_GET_PROFILE(r0, 0x400c4301, &(0x7f0000000040)) 07:08:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x0) 07:08:42 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 239.396240][ T8300] usb usb3: usbfs: process 8300 (syz-executor.5) did not claim interface 0 before use 07:08:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) clone(0x200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x4000000000016, &(0x7f0000000200)) ptrace(0x10, r4) 07:08:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbU\t\x00\x00\x00\x00\x00\x00\x00\xe83Q\xf1\xda\xedV\xac&\x9c\x92\x86 t\x93\xb4\xa5\x8d\xbd\xb5<\x1a\x90\xa3U\xb9{\xba\x99\xdf(\x9a%\xef\x0eO5\xcd\xbf\xe7\n\x13\xc3+(<\x02\x83|S0\xed\x0f9:\xc8\xb5\xa0\"\x00x\xe9\x1f\xe9\xee\x17\x88%\x19\xe3\x9d\x9d|P,\xb5+\x84\xaa\x1cZd\xb1fj\xde\xc7\xf0\xd8D\xaf\x01\x01\x8e\x95\x83X\xb9\xf5J\xb0\v\x0fC\xd3\x8e\x9d\xe1\x1e:!|\xa3%\xd2@M\x1b\xf3\xfe\xf1\x94\xffl~\x18\xedp\xa0\x10\x9fn\xcd\x9eK\x89\xf3\xa0\x1f\x93\xf3\xc0\x86\x04Y\xd5\xd5,\xc4\xf58y\xec\f\x16p\x9fs7\xb7\xc9\x85)\xe4\x1c\r\xdd\xe4\xe6\x91C\xec\x0e\x0e\"\xde\f\x99\xe3\xbaP\x0e\x94\xcd\x1fXl\x11\x13\xe3\xcf+>0\x8d\x01\xd4\xc3\xdf\x00\x0eDn\x05\x9dH\x9f\xa7\xceC\x18D\xe3\xf1\x1e\xb8\xa4\x9d\xae\xb9\x19\xa1\x1a\xa6\x13\x86q)/x\x85\x16\x8b2\xd5\x82dS\xd7\x16\xfc\xc6\xb3\xf6\x90\xa6\x14\x88\x1c;\xaex\x82(\xe0\xab\x91\xf0,\x9f=\xf2\x91g\xf0\xc9', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000000) 07:08:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000440)) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$notify(r4, 0x402, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000340)="ef4a07c43f6ffc020cd244e9c87a2135337a9f4f56ef6e4220a755b18572c67b18e9fd1edaa6f795f66d6ba5ade194983e1b2a6cf6281ad1bac9b28d016cfcf2abaeecf88e632438112b6ecbcc51070d9b68715f1e6c7e6cadb8448583c1845cba17cb96d9", 0x65}], 0x1, 0x1) ppoll(&(0x7f00000003c0)=[{r0, 0x80}, {r0, 0x10}, {r3, 0x2698}, {r4, 0x8}, {r1, 0x100}, {r1, 0x640}, {r4, 0x8010}, {r1, 0x200}], 0x8, &(0x7f0000000000), &(0x7f00000000c0)={0x200}, 0x8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), &(0x7f0000000280), 0x8) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) r7 = dup(r4) syncfs(0xffffffffffffffff) unshare(0x40000000) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000500)='yam0\x00', 0x800, 0x100000000, 0x6}) sysinfo(&(0x7f0000000700)=""/94) sendfile(r1, r1, &(0x7f0000000040), 0xb8f) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000005c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000540)={@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ptrace$setregset(0x4205, r8, 0x203, &(0x7f0000000400)={&(0x7f00000001c0)="a43498d816882f55092196518568422fd9fd", 0x12}) 07:08:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe) [ 239.728328][ T8317] IPVS: ftp: loaded support on port[0] = 21 [ 239.897030][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.904306][ T8289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.911751][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.918889][ T8289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.927088][ T8289] device bridge0 entered promiscuous mode 07:08:42 executing program 3: socket$inet6(0xa, 0x1, 0xfffffffffffffffe) r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = signalfd(r0, 0x0, 0x2c6) prctl$PR_GET_NO_NEW_PRIVS(0x27) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x7226f24b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$peek(0x1, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) init_module(0x0, 0x0, 0x0) getsockname(r2, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000400), 0xb3) removexattr(0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)=')', 0x1) set_tid_address(&(0x7f00000000c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) munlock(&(0x7f0000383000/0x3000)=nil, 0x3000) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) removexattr(&(0x7f0000000080)='\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r4, &(0x7f0000000280), 0x80000003) [ 240.047031][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.054262][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.100482][ T8287] device bridge0 left promiscuous mode [ 240.256637][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.263871][ T8289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.271332][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.278401][ T8289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.286150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.291309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 240.292057][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:08:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 07:08:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0fe36812f5ebb18e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:08:43 executing program 1: syz_open_dev$usb(0x0, 0x201, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 240.297802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 240.309467][ T8289] device bridge0 entered promiscuous mode 07:08:43 executing program 5: socket$inet6(0xa, 0x0, 0x88) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000006c0)='./bus\x00', 0xfffffffffffffffc) io_setup(0xb, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') [ 240.361834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.368192][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:08:43 executing program 3: [ 240.519562][ T8345] IPVS: ftp: loaded support on port[0] = 21 07:08:43 executing program 0: 07:08:43 executing program 4: [ 240.611183][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 240.611206][ T26] audit: type=1804 audit(1550732923.372:43): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880058042/syzkaller.Djg8Up/15/bus" dev="sda1" ino=16562 res=1 07:08:43 executing program 3: 07:08:43 executing program 4: [ 240.830635][ T26] audit: type=1804 audit(1550732923.482:44): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir880058042/syzkaller.Djg8Up/15/bus" dev="sda1" ino=16562 res=1 [ 240.945530][ T26] audit: type=1804 audit(1550732923.492:45): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880058042/syzkaller.Djg8Up/15/bus" dev="sda1" ino=16562 res=1 [ 240.970013][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.241345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 241.247240][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 241.331339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 241.337141][ C0] protocol 88fb is buggy, dev hsr_slave_1