Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. 2019/10/12 07:26:05 fuzzer started [ 77.107396][ T26] audit: type=1400 audit(1570865165.958:42): avc: denied { map } for pid=9486 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/10/12 07:26:07 dialing manager at 10.128.0.26:39993 2019/10/12 07:26:08 syscalls: 2546 2019/10/12 07:26:08 code coverage: enabled 2019/10/12 07:26:08 comparison tracing: enabled 2019/10/12 07:26:08 extra coverage: extra coverage is not supported by the kernel 2019/10/12 07:26:08 setuid sandbox: enabled 2019/10/12 07:26:08 namespace sandbox: enabled 2019/10/12 07:26:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/12 07:26:08 fault injection: enabled 2019/10/12 07:26:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/12 07:26:08 net packet injection: enabled 2019/10/12 07:26:08 net device setup: enabled 2019/10/12 07:26:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 07:29:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000000c0)) r3 = accept4(r1, 0x0, &(0x7f0000000100), 0x80000) read$alg(r3, &(0x7f0000000140)=""/194, 0xc2) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:root_t:s0\x00', 0x1c, 0x2) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x1, 0x980c1efd41796130) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000400)) r6 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x1, 0x242100) connect$caif(r6, &(0x7f0000000480)=@dbg={0x25, 0x1f, 0x20}, 0x18) syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x6, 0x40002) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x400e4, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x10001, 0x103503) recvfrom$rxrpc(r7, &(0x7f00000005c0)=""/4096, 0x1000, 0x20, &(0x7f00000015c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x3ff, @ipv4={[], [], @multicast1}, 0x2}}, 0x24) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFO(r8, 0x89ed, &(0x7f0000001640)) r9 = geteuid() mount$9p_xen(&(0x7f00000016c0)='cgroup.stat\x00', &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='9p\x00', 0x30, &(0x7f0000001780)={'trans=xen,', {[{@fscache='fscache'}, {@posixacl='posixacl'}], [{@euid_eq={'euid', 0x3d, r9}}, {@audit='audit'}]}}) msgget(0x3, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000001800)={0x980000, 0x5, 0xe7f0, [], &(0x7f00000017c0)={0x9b036a, 0x10000, [], @ptr=0x7}}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001840)='/dev/hwrng\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r10) openat$null(0xffffffffffffff9c, &(0x7f0000001880)='/dev/null\x00', 0x10000, 0x0) r11 = syz_open_dev$cec(&(0x7f00000018c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$UFFDIO_ZEROPAGE(r11, 0xc020aa04, &(0x7f0000001900)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}, 0x1}) [ 264.444000][ T26] audit: type=1400 audit(1570865353.298:43): avc: denied { map } for pid=9501 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16539 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 07:29:13 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x800) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0xff) r1 = socket$can_raw(0x1d, 0x3, 0x1) pwritev(r1, &(0x7f0000001480)=[{&(0x7f0000000100)="3d2e8d88bbdfba0e172f5ab757c3b5f8113ca9ebe4a406f3ba764a7ac7b40f183d94e2caa5abd43e1434fcf87d7c6a367d710bf97d85f4a0d91ee5eee0084aa81a4a3984b62355f153b46244d52a9436c85322", 0x53}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="9be24e48ad9f19af6ecc31499be0e38c059efcb9e08ace42533b27f3788f685bb164776fecd89a16f456b00e44ebb2efc59b29854020f99b25e486a1d3b27a868a088a25d21cfc9c94d1ed5437171302d7f65c95ec5542d3ac4ca4deb2a7e71438704018265d574726fd79866dae726d0bf5e08e54f33a98fbcbd4761eab8e19241a8ac860291b6c11", 0x89}, {&(0x7f0000001240)="2789f7fd9cfb8cac23fb41298af7a4111737d92c1b59307db253255c9d9598243183c2c194ea6cfa1cc53af1d00b04eeb6833cc8eac38ba432e20422e3349df995ffbeb0d55db922a95ce71435de3d03d2e1d3af94aff6aedf6e05a3528b7950726e", 0x62}, {&(0x7f00000012c0)="6debf4694f349fd740af6eca9b724843c83c4ef32f5f8e55dc3e7f9e9db314c2b55e7294a424085c099fc0f49c2c9f72db010dfce04f6b32c7d8df1244d65457d930de8a0f8d5cd97de7", 0x4a}, {&(0x7f0000001340)="2a6174737a4e9804d93b672f58bf4054ede5655619307ea6f28b17e7f1ba824cafa459107b1828c24ed4720a810be81b1b182d0633a2c1112a90bd482692a2d66840da40f1dba1039c82de77d9e6ab4743b0550c1e884af37b3ffd99bcd0979824e6b487fb27d02cafe03b5d36741ee37811d1ded279649368907d169e21f8595a1da55881732c6cc209e0a0c9555012e6aff7b0120db47d66da42be1a9263e08d8c1ae481497f8ade4a8084df1a8e21d8ed0cb8195e91bfddd174642af02c990a7a09d981e871f1ab8850eaa887464246", 0xd1}, {&(0x7f0000001440)="efdc8d8598368893ed45", 0xa}], 0x7, 0x4d) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001500)='/proc/capi/capi20\x00', 0x20240, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000001540)=0x5) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000001580)=0x8af4) clock_nanosleep(0x0, 0x1, &(0x7f00000015c0), &(0x7f0000001600)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vcs\x00', 0x400100, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000001680)=0x9, 0x4) io_setup(0xfffffffc, &(0x7f00000016c0)=0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = openat(r3, &(0x7f0000001780)='./file0\x00', 0x10000, 0x2) io_cancel(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f0000001700)="6418ad9925cdcdb8e032f0a547901010ebedf4e7ab9afbdc101ce77c13ff5c2ce03be91b06f7b18112f6f8d7bcdb8e8ef79c0ccf6ac6661286e6d5666605bed5b516e800df2b0bc982797337cfea771db221421c5bde2a88a790a545c0b369422596f752684ef3", 0x67, 0x0, 0x0, 0x2, r6}, &(0x7f0000001800)) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000001840)={0x0, 0x80}, 0x2) r7 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001880), &(0x7f00000018c0)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_ima(r8, &(0x7f0000001900)='security.ima\x00', &(0x7f0000001940)=@v2={0x3, 0x1, 0x6, 0x1000, 0xa6, "ad84002f08b8029cce21683ca8b53ba155525e36d5d605f2bf245801860b3224d110b09697d2a7f702a67041974ff40b582845a9cae87266aeec2304371e25b8b5b5b70a014c99d7b5893ee237aaa1a7046288d803e8e336ae9cc12f448f8117e70bc366b20fe810da82b9da404192b283ce61d1f4a0efc67999b4daca7920d11ab69a601a479991052e81b5cf0c00f8e6e9ff0a70b4c31c5daa2871f23202e1429663a0256c"}, 0xb0, 0x2) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/audio\x00', 0x2, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000001a40)={0x4, @raw_data="260984ef0c2f6bb268ec6001c633ea656150823aa8835afd85c4ccddf87453505bee33a1d15a5e7e33add3b9eb3f745d7a59c39d396ce384f95172f44825b990e105bb1936a4e51b5e3480c380e522e9855b4a6a6aa445196de4b6753f4b8b92c95f17a7cb3fffc2eab7c8e2df0fd3e6c398e048ecf82af0288f41d51a4c9249d5b4ca3dae6bf80c63a887747b049bcb2ed53013322032062f200793a96586a46d365e2376c550484e5c35e7fd1148614ad8b00bf6c31fd3fecf6a64753b1ea3cf6b4a75d151cdcf"}) sendto(r5, &(0x7f0000001b40)="3ba8d6902e11fdeb7c351f87dfbb4f65102f89783245ab079dfdfb845ab6cd338a9d8a9d5bc7d44b42fd6a95a06c1e1e23d712241e2eedccd10772c6a1f2bb3c0b8896783ac4614f5c66986038fffe2d1d2417afd5e4", 0x56, 0x88, &(0x7f0000001bc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) syz_open_dev$rtc(&(0x7f0000001c40)='/dev/rtc#\x00', 0x6, 0x8000) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000001c80), &(0x7f0000001d00)=0x60) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000001d40)={0x1, 0x9}, 0x8) r11 = syz_open_procfs(0x0, &(0x7f0000001e40)='net/protocols\x00') getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001e80)={0x0, 0x9, 0x200000, 0x7054, 0x8, 0x4, 0x100, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x8}}, 0x4, 0x7, 0x6, 0x7f, 0x43000}}, &(0x7f0000001f40)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000001f80)={0x6, 0x1, 0x2, 0x5b6119e0, 0x8, 0x5, 0x7e, 0xfffffff7, r12}, &(0x7f0000001fc0)=0x20) [ 264.696338][ T9502] IPVS: ftp: loaded support on port[0] = 21 [ 264.783154][ T9504] IPVS: ftp: loaded support on port[0] = 21 07:29:13 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x4, 0x1000}) r1 = socket$isdn(0x22, 0x3, 0x23) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)={0x2, '*]'}, 0x3) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fffffff, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000001c0)={0x0, 0x5, 0x2014, 0x2}) r4 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000200)=0x625, 0x2) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000240)={0x10}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x226800, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f00000002c0)={{0x7, 0x4, 0x20, 0xff, 0x40, 0xff}, 0xfffffffe, 0x8000, 0x80000001}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000300)={0x10001}) r6 = open(&(0x7f0000000340)='./file0\x00', 0xb0400, 0x24) getsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000400)={0x1}, 0x4) r7 = socket$unix(0x1, 0x506e21890970a2d1, 0x0) write$binfmt_script(r7, &(0x7f0000000440)={'#! ', './file0', [{0x20, '/dev/video#\x00'}, {0x20, 'lo'}, {0x20, 'ppp0.+selinuxem0'}, {0x20, '/dev/sequencer\x00'}, {0x20, '/selinux/status\x00'}, {}, {}, {0x20, '/dev/input/mice\x00'}], 0xa, "3a4b095ecbb29e7312b58335e62fdcc80f17fbca5ec1ea4e005a405ba1a8"}, 0x7e) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f0000000500)) r9 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@can, &(0x7f00000005c0)=0x80, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000600)={0x2, 0x1, 0x5}, 0xc) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x1) r10 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x2, 0x50000) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000840)={r11, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) migrate_pages(0x0, 0x9, &(0x7f0000000880)=0x200, &(0x7f00000008c0)=0x80000001) socketpair(0x10, 0x801, 0x1, &(0x7f0000000900)) r12 = syz_open_dev$cec(&(0x7f00000009c0)='/dev/cec#\x00', 0x2, 0x2) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ion\x00', 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x100000, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@cache_none='cache=none'}, {@noextend='noextend'}, {@mmap='mmap'}], [{@context={'context', 0x3d, 'system_u'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '['}}, {@dont_measure='dont_measure'}]}}) [ 264.928401][ T9502] chnl_net:caif_netlink_parms(): no params data found [ 265.059943][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 265.078781][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.087859][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.112499][ T9502] device bridge_slave_0 entered promiscuous mode [ 265.133927][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.142397][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.151571][ T9502] device bridge_slave_1 entered promiscuous mode 07:29:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x9b, 0x4, 0xfffffffc, 0x7, 0x8, 0x0, 0x6, 0x40, 0xabb, 0x7f4f, 0xffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'hwsim0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x7, 0x3e9d, 0x7ff, 0x3, 0x3}, 0x14) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x26281, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}, [0x2271a03e, 0xfc61, 0x7, 0x3, 0x9, 0xe, 0xff, 0x6, 0x1, 0x0, 0x1e2, 0x4534, 0xfa4a, 0x2, 0x3f]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x4, 0x3f}, &(0x7f00000003c0)=0x8) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000400)={0x3ff, 'syz1\x00'}) prctl$PR_GET_THP_DISABLE(0x2a) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000480)={0x3, 0x1f, 0x80000000, 0xb6e2, 0x5, 0xd6, 0x8, 0x5, 0x9, 0x2, 0x1, 0x5}) r8 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x80000000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={r6, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x1a}, 0xfffffffe}}, 0x3, 0x8000, 0x81, 0x9, 0x1}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000600)={r9, 0x2, 0xfffffffe, 0x3}, &(0x7f0000000640)=0x10) ioctl$LOOP_SET_FD(r8, 0x4c00, r1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000680)={'veth0_to_bridge\x00', {0x2, 0x4e23, @loopback}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000006c0)={0x0, r3, 0xe6b5, 0xda1, 0x9, 0x100000000}) modify_ldt$read(0x0, &(0x7f0000000700)=""/224, 0xe0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/btrfs-control\x00', 0x220000, 0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000880)={0x2027}) msgget(0x1, 0x400) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/snapshot\x00', 0x222000, 0x0) write$P9_RRENAMEAT(r12, &(0x7f0000000900)={0x7, 0x4b, 0x1}, 0x7) [ 265.197776][ T9508] IPVS: ftp: loaded support on port[0] = 21 [ 265.198062][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.216276][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.223960][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.234567][ T9504] device bridge_slave_0 entered promiscuous mode [ 265.255722][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.296330][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.314035][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.331235][ T9504] device bridge_slave_1 entered promiscuous mode [ 265.393973][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.406018][ T9502] team0: Port device team_slave_0 added [ 265.425558][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.444456][ T9502] team0: Port device team_slave_1 added [ 265.467460][ T9504] team0: Port device team_slave_0 added [ 265.486915][ T9510] IPVS: ftp: loaded support on port[0] = 21 [ 265.499529][ T9504] team0: Port device team_slave_1 added 07:29:14 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x162) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x3, 0x2, @stop_pts=0x7fff}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0xd9) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000240)}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000300)) fsopen(&(0x7f0000000340)='affs\x00', 0xfa8f800fe5b0d3ea) keyctl$setperm(0x5, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000380)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000400)={0x2, "4b1a053d36b0e4685ef8c7b205cf821b14d21fa9480b5164542f8f1e16e99c2d", 0x2, 0xff, 0x4313, 0x2, 0x3}) r5 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x8, 0x458d80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xffff, 0xd795, 0x9, 0x9, 0x60e4397c31165b7f}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000640)={r6, 0xdb, "9bfc85209d2151c5c460122fae57976867d057df2072fed5b805766b2e593ff2cb029ee2b334124cc7f98a4d3dc6d448f8445b72cf76ed75e379d7b2544070a85268396fa4378b2ba8236b4660f85353dce122f39750c658311172e1b885a2150ac090e586f050a8f3d773be1ab3c134cd3ec9d6644f3b0a58a8ab8b64accfe66e29a9ec9a4dd294f8368a424a3fad766f937837ab44d373309ac53bd3faff9bdb2e6232d1d9c4f7f5ec0c3ebedc277dc2c10cefc760362ba70dced6f17d9416e6b3070cb2aaf7742ff4f99d867e92aa8a4540b8c9f58010025ba7"}, &(0x7f0000000740)=0xe3) listen(r3, 0x7) r7 = add_key$user(&(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="498a9040dc25681f2570cdaffeecac7e2bc310f0108a6a13ba3fc255e9a5faff7a7a665b54fadff541c7e59fe2e3b7c3f5d62955c15dfebd551c828ebe73964dcfe93c4d1d", 0x45, 0xffffffffffffffff) r8 = add_key(&(0x7f0000000900)='ceph\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="e5850c0eabeb738492d58dc5930b616cf607acd05170cb98f00a828a58ead264d8c004c2ed8fe2ee056f5e02857133491035987ae6c546641d4a33ca5915d433f9a2d4bacd034e3bb63fd2134b643b2d071b9d288dd85edea69be7974db4834ab5e16b98e2b64222efbc9e120e41f73b50e26a54fb19c48a5a362be5c08daac9cc4fa8fea89316fb6d12c796e0347ab22f07796b521687650e1d3f40f2ffa1dbba51dee098faa178", 0xa8, 0xfffffffffffffffd) keyctl$search(0xa, r7, &(0x7f0000000880)='blacklist\x00', &(0x7f00000008c0)={'syz', 0x0}, r8) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000a40)=0x99) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0xffff, 0x2, 0x1000, 0xfe00, 0xfff, 0x2, 0x1afdfb35, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x4}}, 0x9, 0x6, 0x200, 0x8, 0x3f}}, &(0x7f0000000b80)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000bc0)={0x0, 0x1, 0x2, 0x10000, 0x0, 0x80, 0x5, 0x800, r10}, &(0x7f0000000c00)=0x20) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x144, r12, 0xb40, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x3c}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000ec0)={r10, 0xbbd4}, &(0x7f0000000f00)=0x8) r13 = socket(0x1, 0x80002, 0x81) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000221}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x128, r14, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffeff}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="2fb51cefd51a9abe97d87445356d8ca6"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x86d4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) [ 265.643229][ T9502] device hsr_slave_0 entered promiscuous mode [ 265.690556][ T9502] device hsr_slave_1 entered promiscuous mode 07:29:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10500, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x192, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0xfffffffa}}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1, 0x18a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, r2, 0x0) sync_file_range(r2, 0x1, 0x7fffffff, 0x1) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000180)={0x8, 0x1, 0x20, 0xf44, 0x2}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000200)=""/27, 0x1b, 0x10000, &(0x7f0000000240)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$bt_bnep(0x1f, 0x3, 0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x28000, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) r6 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x16e, 0x2080) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000380)={0x401, 0x0, 0x80d3, 0x5, 0xc8, 0x1a, 0xb, "3e307e5c3fa1ba4cebbb882a97daba3d49c151e4", "f94ea19024f75fbaf9bc8684994c2739ee1ddd1d"}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000003c0), 0x4) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCLINUX3(r7, 0x541c, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000440)=""/62) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x56a02, 0x0) ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f00000004c0)) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x341, 0x0) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000540)={0x1f, 0x2, 0x5, 0x2, 0x100, 0xfffc}) getsockopt$sock_buf(r9, 0x1, 0x3d, &(0x7f0000000580)=""/181, &(0x7f0000000640)=0xb5) uname(&(0x7f0000000680)=""/159) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000740)="66cd9c80d085be28613671aadfdaf83597e97164ca753e8169e3d387f1be0164f80ab9f773c6c3054e4cf7d04b2d5dbb3e425b7aa96fd66c11a1ee4f0b60e93e144d74b99c9b41eaec305f7b412148be24363a8c5979f61673019f3f9e59933111de24ecad") r10 = syz_open_dev$media(&(0x7f00000007c0)='/dev/media#\x00', 0xfff, 0x80) write$P9_RLERRORu(r10, &(0x7f0000000800)={0x32, 0x7, 0x2, {{0x25, '\xcdwlan1trustedbdev,em0/^selinuxkeyring'}}}, 0x32) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000840)={0x35, 0x7, 0x9e, 'queue0\x00', 0x7ff}) [ 265.823194][ T9504] device hsr_slave_0 entered promiscuous mode [ 265.880489][ T9504] device hsr_slave_1 entered promiscuous mode [ 265.930662][ T9504] debugfs: Directory 'hsr0' with parent '/' already present! [ 265.948682][ T9508] chnl_net:caif_netlink_parms(): no params data found [ 266.003036][ T9513] IPVS: ftp: loaded support on port[0] = 21 [ 266.014781][ T9515] IPVS: ftp: loaded support on port[0] = 21 [ 266.068325][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.076244][ T9508] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.086504][ T9508] device bridge_slave_0 entered promiscuous mode [ 266.094814][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.102141][ T9508] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.109925][ T9508] device bridge_slave_1 entered promiscuous mode [ 266.132471][ T9508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.166074][ T9508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.209074][ T9508] team0: Port device team_slave_0 added [ 266.218065][ T9508] team0: Port device team_slave_1 added [ 266.323788][ T9508] device hsr_slave_0 entered promiscuous mode [ 266.360501][ T9508] device hsr_slave_1 entered promiscuous mode [ 266.410382][ T9508] debugfs: Directory 'hsr0' with parent '/' already present! [ 266.437720][ T9510] chnl_net:caif_netlink_parms(): no params data found [ 266.514461][ T9513] chnl_net:caif_netlink_parms(): no params data found [ 266.573901][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.590062][ T9515] chnl_net:caif_netlink_parms(): no params data found [ 266.613624][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.620917][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.628557][ T9510] device bridge_slave_0 entered promiscuous mode [ 266.644046][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.651369][ T9508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.659152][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.666243][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.682501][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.689603][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.698559][ T9510] device bridge_slave_1 entered promiscuous mode [ 266.714753][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.722437][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.730719][ T9513] device bridge_slave_0 entered promiscuous mode [ 266.739253][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.746506][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.754546][ T9513] device bridge_slave_1 entered promiscuous mode [ 266.802939][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.815589][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.826441][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.838839][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.852687][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.861386][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.874436][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.883095][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.893789][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.901274][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.908881][ T9515] device bridge_slave_0 entered promiscuous mode [ 266.917524][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.947558][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.955182][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.962910][ T9515] device bridge_slave_1 entered promiscuous mode [ 266.978767][ T9510] team0: Port device team_slave_0 added [ 266.987021][ T9510] team0: Port device team_slave_1 added [ 266.993776][ T9513] team0: Port device team_slave_0 added [ 267.002914][ T9513] team0: Port device team_slave_1 added [ 267.013786][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.023684][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.033254][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.041947][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.048977][ T9516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.056757][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.066450][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.074887][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.081956][ T9516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.089565][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.103982][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.183447][ T9513] device hsr_slave_0 entered promiscuous mode [ 267.250678][ T9513] device hsr_slave_1 entered promiscuous mode [ 267.300384][ T9513] debugfs: Directory 'hsr0' with parent '/' already present! [ 267.312969][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.363609][ T9510] device hsr_slave_0 entered promiscuous mode [ 267.400837][ T9510] device hsr_slave_1 entered promiscuous mode [ 267.450301][ T9510] debugfs: Directory 'hsr0' with parent '/' already present! [ 267.462676][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.479571][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.497185][ T9504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.508237][ T9504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.524922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.533592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.542512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.554502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.563564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.571574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.579367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.588139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.596969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.606054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.615073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.622979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.648096][ T9515] team0: Port device team_slave_0 added [ 267.667277][ T9502] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.678499][ T9515] team0: Port device team_slave_1 added [ 267.753366][ T9515] device hsr_slave_0 entered promiscuous mode [ 267.810752][ T9515] device hsr_slave_1 entered promiscuous mode [ 267.870348][ T9515] debugfs: Directory 'hsr0' with parent '/' already present! [ 267.885642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.894504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.903483][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.910668][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.937119][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.954697][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.968576][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.984618][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.993916][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.001065][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.009525][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.042145][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.066827][ T9508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.100418][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.109128][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.117680][ T26] audit: type=1400 audit(1570865356.948:44): avc: denied { associate } for pid=9504 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 268.142548][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.152145][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.161329][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.176946][ T9502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.188816][ T9502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.229610][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.239395][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.252649][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.261457][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.269902][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.279158][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.301196][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.318251][ T9510] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.343727][ T9508] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.362579][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.379632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.398637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.409377][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.418333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.437110][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.446493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.455298][ T26] audit: type=1400 audit(1570865357.308:45): avc: denied { create } for pid=9529 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 268.456398][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.487916][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.495917][ T26] audit: type=1400 audit(1570865357.338:46): avc: denied { getopt } for pid=9529 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 268.496764][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.520771][ T26] audit: type=1400 audit(1570865357.338:47): avc: denied { create } for pid=9529 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 268.535827][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.558489][ T26] audit: type=1400 audit(1570865357.338:48): avc: denied { setattr } for pid=9529 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=28596 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 268.612963][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.624960][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.633537][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.643861][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.653361][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.660745][ T9520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.669250][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.678237][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.687488][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.695090][ T9520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.703048][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:29:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2000cf66}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 268.761689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.775606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.784768][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.798711][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.827878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.837497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.847815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.859838][ T26] audit: type=1400 audit(1570865357.708:49): avc: denied { prog_load } for pid=9536 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 268.861677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.891164][ T26] audit: type=1400 audit(1570865357.708:50): avc: denied { prog_run } for pid=9536 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 268.892535][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.923717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.932886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.941562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.950373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.958738][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.965817][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.973552][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.982301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.990910][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.998011][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.007499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.015502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.023588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.032641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.051721][ T9510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.062139][ T9510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.079419][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.097087][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.107525][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.131140][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.149191][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.158123][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.169798][ T9516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:29:18 executing program 1: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) pipe(0x0) getpid() write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) creat(&(0x7f0000000000)='./file0\x00', 0x0) 07:29:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x14}}}]}]}, 0x50}}, 0x0) [ 269.208129][ T9508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.228439][ T9508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 07:29:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.266202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.275115][ T26] audit: type=1400 audit(1570865358.128:51): avc: denied { create } for pid=9545 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 269.329593][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.347857][ T9552] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.354182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.379419][ T26] audit: type=1400 audit(1570865358.128:52): avc: denied { write } for pid=9545 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 269.411972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.435356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.448574][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.470069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:29:18 executing program 0: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) ioctl(0xffffffffffffffff, 0xf2, &(0x7f00000000c0)="41d2206ffd25bd6937485907e1fefc3fc656179cb288ea663b11b4734618354a262a") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x81, 0x404002) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) [ 269.479488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.487929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.517037][ T9510] 8021q: adding VLAN 0 to HW filter on device batadv0 07:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_rm_watch(r1, 0x0) [ 269.537363][ T9515] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.550714][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.567412][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.587099][ T9508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.649601][ T26] audit: type=1400 audit(1570865358.498:53): avc: denied { map } for pid=9559 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30776 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 269.658749][ T9513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 07:29:18 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup3(0xffffffffffffffff, r1, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) [ 269.697998][ T9513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.725424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.735367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.761576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.791090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.799742][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.806960][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.817671][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.827023][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.837064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.845772][ C0] hrtimer: interrupt took 41985 ns [ 269.853146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.862373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.871608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.881575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.889407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:29:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1fa, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000002c00010700"/20, @ANYRES32=r1, @ANYBLOB="00e50000000000000c00000009000100666c6f77000000000c0002000800030006000000"], 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x26, 0x0) [ 269.907607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.984951][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.001449][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.015350][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.022632][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.033857][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.042535][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.052449][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.061166][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.069575][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.078307][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.089130][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.123584][ T9515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.140810][ T9515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.172329][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.184204][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.204348][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.248254][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.272734][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.316643][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.348569][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.449640][ T9597] QAT: Invalid ioctl 07:29:19 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 07:29:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) [ 270.491415][ T9601] QAT: Invalid ioctl [ 270.686426][ T9617] QAT: Invalid ioctl [ 270.692883][ T26] audit: type=1400 audit(1570865359.538:54): avc: denied { create } for pid=9609 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 270.774819][ T9622] QAT: Invalid ioctl [ 270.796460][ T26] audit: type=1400 audit(1570865359.588:55): avc: denied { read } for pid=9609 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 270.828209][ T26] audit: type=1400 audit(1570865359.608:56): avc: denied { write } for pid=9609 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:29:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) r0 = mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getgid() r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x922c0, 0x0) sendmsg$nl_crypto(r1, 0x0, 0x0) r2 = mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r3 = mq_open(&(0x7f0000000040)='.selinux\x00', 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mq_getsetattr(r4, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 07:29:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)='K', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000100)=0x13d) 07:29:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 07:29:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x10}}, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001300)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(cmac-aes-ce)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002d40)={0x0, 0x989680}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000240)="285ec08e", 0x4) r2 = open(&(0x7f000054eff8)='./file0\x00', 0x719408be16731e99, 0x0) r3 = dup(r2) getdents64(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_setup(0x9, &(0x7f0000000380)=0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x101202, 0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @remote}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:29:19 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000002c0)=""/34, 0x22, 0x0) 07:29:19 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x0) [ 270.983579][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:29:19 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe05699ca246cde7188b"}, 0x60) getpeername(r0, 0x0, &(0x7f0000000540)) 07:29:19 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 271.039191][ T9640] team0: Device ip_vti0 is of different type [ 271.085237][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:29:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 07:29:20 executing program 0: r0 = creat(0x0, 0x0) vmsplice(r0, &(0x7f0000000880)=[{&(0x7f0000000500)="097f33c52ab0dcd40e0ef12d92", 0xd}, {0x0}, {0x0}, {&(0x7f0000000700)="16ce38932e2470e3df48b38b2491dac5427627518fedba82f597004885d526795c926e243ff182dd15a89e30", 0x2c}, {&(0x7f0000000740)}], 0x5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) fcntl$setstatus(r0, 0x4, 0x6000) syz_genetlink_get_family_id$ipvs(0x0) getxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000a00)=""/87, 0x57) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x8, 0x0, 0x4}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) pipe(&(0x7f0000000080)) 07:29:20 executing program 1: syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 07:29:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 07:29:20 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 07:29:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0xa}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 07:29:20 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) [ 271.604977][ T9676] device lo entered promiscuous mode [ 271.636944][ T9676] device lo left promiscuous mode [ 271.650740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 271.656716][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:29:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x10}}, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001300)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(cmac-aes-ce)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002d40)={0x0, 0x989680}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000240)="285ec08e", 0x4) r2 = open(&(0x7f000054eff8)='./file0\x00', 0x719408be16731e99, 0x0) r3 = dup(r2) getdents64(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_setup(0x9, &(0x7f0000000380)=0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x101202, 0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @remote}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:29:20 executing program 1: 07:29:20 executing program 4: 07:29:20 executing program 3: waitid(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r2, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="dde20f100fc1c79a93edf7e95ad2a3ceb954bf7b28df4f7b25", 0x19, 0x0, 0x0, 0x0) 07:29:20 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)='-', &(0x7f0000000100)='\a'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000500), &(0x7f0000000000)="10"}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080)}, 0x20) [ 271.890280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 271.896136][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:29:20 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000140)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0) 07:29:20 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x4) 07:29:20 executing program 5: [ 271.992566][ T26] audit: type=1400 audit(1570865360.848:57): avc: denied { map_create } for pid=9698 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 272.079514][ T26] audit: type=1400 audit(1570865360.848:58): avc: denied { map_read map_write } for pid=9698 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 07:29:21 executing program 0: 07:29:21 executing program 3: 07:29:21 executing program 4: 07:29:21 executing program 5: 07:29:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xa8392ce1fdc1d2f2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:29:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) readv(r0, 0x0, 0x0) close(0xffffffffffffffff) 07:29:21 executing program 0: 07:29:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x8d, 0x0, 0x1bf, 0x0, 0x3db}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:29:21 executing program 3: seccomp(0x0, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) open$dir(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff07007400"/61, 0x3d, 0x1a0}]) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000380)=0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}}, 0x24, 0x2) setgid(r0) 07:29:21 executing program 5: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) sendfile(r0, r0, 0x0, 0x2008000fffffffe) creat(0x0, 0x0) 07:29:21 executing program 2: 07:29:21 executing program 0: 07:29:21 executing program 5: 07:29:21 executing program 1: 07:29:21 executing program 0: 07:29:21 executing program 1: [ 272.831280][ T9742] Dev loop3: unable to read RDB block 1 [ 272.837792][ T9742] loop3: unable to read partition table 07:29:21 executing program 2: 07:29:21 executing program 5: [ 272.905233][ T9742] loop3: partition table beyond EOD, truncated [ 272.927166][ T9742] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 07:29:21 executing program 0: [ 273.234054][ T9742] Dev loop3: unable to read RDB block 1 [ 273.239782][ T9742] loop3: unable to read partition table [ 273.248471][ T9742] loop3: partition table beyond EOD, truncated [ 273.258035][ T9742] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 07:29:24 executing program 4: 07:29:24 executing program 1: 07:29:24 executing program 5: 07:29:24 executing program 2: 07:29:24 executing program 0: 07:29:24 executing program 3: 07:29:24 executing program 1: 07:29:24 executing program 3: 07:29:24 executing program 5: 07:29:24 executing program 0: 07:29:24 executing program 2: 07:29:24 executing program 4: 07:29:24 executing program 2: 07:29:24 executing program 1: 07:29:24 executing program 3: 07:29:24 executing program 5: 07:29:24 executing program 0: 07:29:24 executing program 4: 07:29:24 executing program 2: 07:29:24 executing program 1: 07:29:24 executing program 3: 07:29:25 executing program 4: 07:29:25 executing program 0: 07:29:25 executing program 5: 07:29:25 executing program 3: 07:29:25 executing program 1: 07:29:25 executing program 2: 07:29:25 executing program 4: 07:29:25 executing program 5: 07:29:25 executing program 1: 07:29:25 executing program 3: 07:29:25 executing program 0: 07:29:25 executing program 2: 07:29:25 executing program 4: 07:29:25 executing program 1: 07:29:25 executing program 0: 07:29:25 executing program 5: 07:29:25 executing program 3: 07:29:25 executing program 1: 07:29:25 executing program 0: 07:29:25 executing program 4: 07:29:25 executing program 2: 07:29:25 executing program 3: 07:29:25 executing program 5: 07:29:25 executing program 1: 07:29:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) iopl(0x8) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000140)="f7f1", 0x2, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:29:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') write(r1, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) 07:29:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='wlan1bdevcpusetprocem0!\xf0trustedmime_type^ppp0ppp0}em1\x00', &(0x7f00000000c0)='\x00', 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x23, &(0x7f0000000000), 0x20a154cc) 07:29:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x301040, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) rt_sigaction(0x19, 0x0, 0x0, 0x6, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r1, &(0x7f0000000240)=""/27, 0xfffffd50) r2 = socket(0x10, 0x3, 0x0) dup2(r2, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = socket(0x0, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x4}, &(0x7f0000000200)=0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r5 = socket(0x0, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='\x81\x1c\x05\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000340)=0x2) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000380)={r4, 0x0, 0x4, 0x40, 0x1, 0x8001, 0x80000001, 0x8001, {r6, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffffffffffffe, 0x525, 0xbc, 0x0, 0x9}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 07:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x99, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}, @IFA_FLAGS={0x8, 0x8, 0x142}]}, 0x34}}, 0x0) 07:29:26 executing program 2: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ptrace$getenv(0x4201, r0, 0x5ce4, &(0x7f0000000000)) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) ptrace$getenv(0x4201, r3, 0x5ce4, &(0x7f0000000000)) capget(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)={0x0, 0x0, 0x100000, 0x0, 0x4, 0x4}) 07:29:26 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x122a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x15000, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RLERRORu(r6, &(0x7f0000000000)={0xf, 0x7, 0x2, {{0x2, ':^'}, 0x1000}}, 0xf) [ 277.345014][ T9878] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 07:29:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x20000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) socket$kcm(0x11, 0x2, 0x300) write$cgroup_int(r1, &(0x7f0000000000), 0x12) [ 277.453888][ T26] audit: type=1400 audit(1570865366.298:59): avc: denied { ioctl } for pid=9872 comm="syz-executor.5" path="socket:[31362]" dev="sockfs" ino=31362 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 07:29:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xffffffdc, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @rand_addr="0000000000000000000007000100"}, 0xffffffffffffff7c) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='md5sum$\x00', 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615c", 0x79, r6) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) 07:29:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_cancel(0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xffffffa0, 0x0) r2 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000100)={@multicast2}, &(0x7f0000000140)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000000c0)=[0x1d2]) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r6 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) [ 277.594697][ T9873] bond0: (slave bond_slave_1): Releasing backup interface [ 277.738946][ T9906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 277.900773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 277.907286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 278.130517][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.136975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 278.370270][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.376171][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:29:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001880)=0x14) r3 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r3, &(0x7f0000000240)=""/27, 0xfffffd50) r4 = socket(0x10, 0x3, 0x0) dup2(r4, r3) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x1, 0x4) r5 = getegid() r6 = getegid() getgroups(0x5, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0]) r9 = epoll_create1(0x0) close(r9) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x80c) r10 = epoll_create1(0x0) close(r10) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x80c) r11 = epoll_create1(0x0) close(r11) poll(&(0x7f00000002c0)=[{r11}], 0x1, 0x80c) r12 = epoll_create1(0x0) close(r12) poll(&(0x7f00000002c0)=[{r12}], 0x1, 0x80c) r13 = epoll_create1(0x0) close(r13) poll(&(0x7f00000002c0)=[{r13}], 0x1, 0x80c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9, @ANYRESHEX, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYBLOB="15f06923a86cc1f9b472bc6ada0b71ab81c862ea1503ae5a0d78b7254ef95da6726ca28bd084422e8caaf05a9de16c5c00495918ed7b982d29beb7f7ce98119cc0f1c3ed05738550fde65b9d5060402d5dbc58ddcd5272440da11a03fd401e01bc4cb5e17924ab7f48e634608508d72ecb3ad5d4ece67d613c6ed6ea1221ddb6be2e1bd8e672cccc48f40675d08c7683aaf627650f3966599367652f9dc58ff9b1f2266dcd4ce9a188d93f3f647f6fd33aceb9f118612c6675fa59f666131702f318e3fd75717b5ad8f867f3bb185eaa64850fa7b9cf7d7239302ef189aaec72d7534393747cee056df85d1cef4bec5850a034", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="862b0c6d91cf081978a3979a09d11535bf063eb0b3cf274415", @ANYRES64=r7, @ANYRESDEC=r10, @ANYRESOCT=r6, @ANYPTR64, @ANYRESOCT], @ANYRESHEX, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES64=r13, @ANYBLOB="aa6a2f09da15c724cc55563b09a244b61a8810dd18c8f60e359ae3573c4d432e0ddc4763a065a2e0c3e2bd382d0cc86fb63578925763562d9428a9154340392971283de74d4d8715a12abcce47d73946fccaa72d5a1abdf7725388fc80007ac051f62df8713d585794b101dbc54b9cf929310b"], @ANYRESDEC, @ANYPTR64, @ANYRESHEX, @ANYRES64=r5, @ANYRES64=r1], @ANYRESHEX=r11, @ANYRES16, @ANYRES64=r12, @ANYRES16]], 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000000ed, 0x0) [ 278.610258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.616104][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:29:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001880)=0x14) r3 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r3, &(0x7f0000000240)=""/27, 0xfffffd50) r4 = socket(0x10, 0x3, 0x0) dup2(r4, r3) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x1, 0x4) r5 = getegid() r6 = getegid() getgroups(0x5, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0]) r9 = epoll_create1(0x0) close(r9) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x80c) r10 = epoll_create1(0x0) close(r10) poll(&(0x7f00000002c0)=[{r10}], 0x1, 0x80c) r11 = epoll_create1(0x0) close(r11) poll(&(0x7f00000002c0)=[{r11}], 0x1, 0x80c) r12 = epoll_create1(0x0) close(r12) poll(&(0x7f00000002c0)=[{r12}], 0x1, 0x80c) r13 = epoll_create1(0x0) close(r13) poll(&(0x7f00000002c0)=[{r13}], 0x1, 0x80c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9, @ANYRESHEX, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYBLOB="15f06923a86cc1f9b472bc6ada0b71ab81c862ea1503ae5a0d78b7254ef95da6726ca28bd084422e8caaf05a9de16c5c00495918ed7b982d29beb7f7ce98119cc0f1c3ed05738550fde65b9d5060402d5dbc58ddcd5272440da11a03fd401e01bc4cb5e17924ab7f48e634608508d72ecb3ad5d4ece67d613c6ed6ea1221ddb6be2e1bd8e672cccc48f40675d08c7683aaf627650f3966599367652f9dc58ff9b1f2266dcd4ce9a188d93f3f647f6fd33aceb9f118612c6675fa59f666131702f318e3fd75717b5ad8f867f3bb185eaa64850fa7b9cf7d7239302ef189aaec72d7534393747cee056df85d1cef4bec5850a034", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="862b0c6d91cf081978a3979a09d11535bf063eb0b3cf274415", @ANYRES64=r7, @ANYRESDEC=r10, @ANYRESOCT=r6, @ANYPTR64, @ANYRESOCT], @ANYRESHEX, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES64=r13, @ANYBLOB="aa6a2f09da15c724cc55563b09a244b61a8810dd18c8f60e359ae3573c4d432e0ddc4763a065a2e0c3e2bd382d0cc86fb63578925763562d9428a9154340392971283de74d4d8715a12abcce47d73946fccaa72d5a1abdf7725388fc80007ac051f62df8713d585794b101dbc54b9cf929310b"], @ANYRESDEC, @ANYPTR64, @ANYRESHEX, @ANYRES64=r5, @ANYRES64=r1], @ANYRESHEX=r11, @ANYRES16, @ANYRES64=r12, @ANYRES16]], 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000000ed, 0x0) [ 278.930996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.937324][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 279.244700][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:29:28 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x4182) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="07dcfff981", 0x5) write(r1, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000400000000001400cf", 0xad) 07:29:28 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket(0x11, 0x802, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="225484d856ef", 0x6, 0x2a000804, &(0x7f00000017c0)={0xa, 0x4e1d, 0x0, @mcast2, 0x8000}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000890) alarm(0x1) msgsnd(0x0, &(0x7f0000000e40)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 07:29:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x301040, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) rt_sigaction(0x19, 0x0, 0x0, 0x6, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r1, &(0x7f0000000240)=""/27, 0xfffffd50) r2 = socket(0x10, 0x3, 0x0) dup2(r2, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = socket(0x0, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x4}, &(0x7f0000000200)=0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r5 = socket(0x0, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='\x81\x1c\x05\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000340)=0x2) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000380)={r4, 0x0, 0x4, 0x40, 0x1, 0x8001, 0x80000001, 0x8001, {r6, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffffffffffffe, 0x525, 0xbc, 0x0, 0x9}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 07:29:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x31204}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = add_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="59909b9ce56b14fa2c951e26dd1513ab", 0x10, 0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000400)) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') sendfile(r4, r5, 0x0, 0x100000008005) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bpq0\x00', r6}) keyctl$clear(0x7, r3) r7 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r8 = epoll_create1(0x0) close(r8) poll(&(0x7f00000002c0)=[{r8}], 0x1, 0x80c) r9 = epoll_create1(0x0) close(r9) poll(&(0x7f00000002c0)=[{r9}], 0x1, 0x80c) write$binfmt_elf64(r9, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="239425f0471bc1588ac9de07000000d6017b5e59a4e4899acfa4a27e5d61314662956b9e7d2ad7440734caf0654f3a3882469084c5e56b27232c72ac60bfc240ef2cb6faa1dd4bee2a01dca1ece01b51a7f3890ea400bb7c900fff821de7a3fc18f53455de0e255e5e05f1bf532171a2135379dd217283defde9fbcad5204772d358c1bfad769a3e56bb69df95cfb2c41b0da747a2eeeb154c2b00", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC], 0x6c) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x42, 0x2) shutdown(r0, 0x1) r10 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x4, r10, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r10, 0x0) keyctl$search(0xa, r3, &(0x7f0000000440)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, r10) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) close(0xffffffffffffffff) 07:29:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000000)=0xa4, 0x4) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r7, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$packet(r8, &(0x7f00000001c0), 0x0, 0x40, &(0x7f0000000200)={0x11, 0x18, 0x0, 0x1, 0x1, 0x6, @random="327ee759ce98"}, 0xfffffffffffffe10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r9, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r7, r8, 0x0, 0x3, &(0x7f00000002c0)='+>\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001340)={r4, r5, 0x0, 0x8, &(0x7f0000000040)='oom_adj\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r3, 0x0, 0x2, &(0x7f0000000080)='*\x00', r10}, 0x30) r11 = perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffe49, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r11, 0x0) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) 07:29:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r0, &(0x7f0000000240)=""/27, 0xfffffd50) r1 = socket(0x10, 0x3, 0x0) dup2(r1, r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipddp0\x00', 0x0}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x2, 0x0, 0x9, 0x311, 0xffffffffffffffff, 0x0, [], r2, r3, 0x2, 0x2}, 0x3c) r4 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r4, &(0x7f0000000240)=""/27, 0xfffffd50) r5 = socket(0x10, 0x3, 0x0) dup2(r5, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000f1ffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000002a3400"/77], 0x74}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x25, 0x52d, 0x0, 0x0, {0x0, r9, {0x0, 0xffff}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="034000006a0300002362fa690f5627c4", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r11, @ANYRES64=r12/1000+10000, @ANYBLOB="010000a0010000000100002040020000b56ec2962e56f43683e609c6f15510fdac14722ba238d6e29731d2ea887a14b7b28990f085498f5e6e974ae7ba5627e93734181601ff0647845436ecc71be143"], 0x80}}, 0x0) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) r13 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x2, 0x2) read(r13, &(0x7f0000000240)=""/27, 0xfffffd50) r14 = socket(0x10, 0x3, 0x0) dup2(r14, r13) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r18 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000040)="ff", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r18, 0x0, r17) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r21 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000040)="ff", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r21, 0x0, r20) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x3, {0x7f, 0x0, 0x0, {0x6, 0x1, 0x1, 0x2, 0xffffffffffff7fff, 0x1, 0x7fff, 0x10001, 0x83, 0x6, 0x6480000, r15, r20, 0x1, 0x9d}}}, 0x78) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) [ 280.204114][ T26] audit: type=1400 audit(1570865369.058:60): avc: denied { write } for pid=9939 comm="syz-executor.2" path="socket:[31445]" dev="sockfs" ino=31445 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 280.250741][ T9947] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:29:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="03"], 0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x40002000}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000100)={{0x3, @name="6d71f99e966d2ab6e128ac19f012045daca2226ac5bfeac66b39b6d1d50fa936"}, 0x8, 0x3ad, 0x6339}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000000)) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) [ 280.327538][ T9953] ------------[ cut here ]------------ [ 280.333444][ T9953] WARNING: CPU: 1 PID: 9953 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0x8b6/0xc80 [ 280.345519][ T9953] Kernel panic - not syncing: panic_on_warn set ... [ 280.352227][ T9953] CPU: 1 PID: 9953 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 280.361220][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.372243][ T9953] Call Trace: [ 280.375616][ T9953] dump_stack+0x172/0x1f0 [ 280.379972][ T9953] ? __vb2_queue_cancel+0x840/0xc80 [ 280.385184][ T9953] panic+0x2e3/0x75c [ 280.389173][ T9953] ? add_taint.cold+0x16/0x16 [ 280.394905][ T9953] ? printk+0xba/0xed [ 280.398897][ T9953] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 280.404373][ T9953] ? __warn.cold+0x14/0x35 [ 280.407399][ T9960] kobject: 'nfs_client' (00000000be8e9f47): kobject_add_internal: parent: 'net', set: 'nfs' [ 280.408801][ T9953] ? __vb2_queue_cancel+0x8b6/0xc80 [ 280.408829][ T9953] __warn.cold+0x2f/0x35 [ 280.408845][ T9953] ? report_bug.cold+0x63/0xad [ 280.408862][ T9953] ? __vb2_queue_cancel+0x8b6/0xc80 [ 280.408877][ T9953] report_bug+0x289/0x300 [ 280.408897][ T9953] do_error_trap+0x11b/0x200 [ 280.408914][ T9953] do_invalid_op+0x37/0x50 [ 280.408935][ T9953] ? __vb2_queue_cancel+0x8b6/0xc80 [ 280.419663][ T9960] kobject: 'nfs_client' (00000000be8e9f47): kobject_uevent_env [ 280.424223][ T9953] invalid_op+0x23/0x30 [ 280.424250][ T9953] RIP: 0010:__vb2_queue_cancel+0x8b6/0xc80 [ 280.424269][ T9953] Code: 1e fb ff ff 48 89 df e8 78 92 da fc e9 11 fb ff ff e8 9e 37 9f fc 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8a 37 9f fc <0f> 0b 48 8b 45 d0 48 05 28 02 00 00 48 89 c2 48 89 45 88 48 b8 00 [ 280.424277][ T9953] RSP: 0018:ffff88805bd5fc18 EFLAGS: 00010216 [ 280.424289][ T9953] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90005f77000 [ 280.424297][ T9953] RDX: 0000000000000991 RSI: ffffffff84d3da76 RDI: 0000000000000005 [ 280.424306][ T9953] RBP: ffff88805bd5fc90 R08: ffff88805be96480 R09: ffffed1042f90e88 [ 280.424315][ T9953] R10: ffffed1042f90e87 R11: ffff888217c8743f R12: ffff888217c8743c [ 280.424324][ T9953] R13: ffff888217c874d0 R14: ffff888217c871f8 R15: ffff888217c813f0 [ 280.424346][ T9953] ? __vb2_queue_cancel+0x8b6/0xc80 [ 280.430263][ T9960] kobject: 'nfs_client' (00000000be8e9f47): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 280.433336][ T9953] ? __vb2_queue_cancel+0x8b6/0xc80 [ 280.433365][ T9953] vb2_core_streamoff+0x60/0x150 [ 280.433384][ T9953] __vb2_cleanup_fileio+0x78/0x170 [ 280.433403][ T9953] vb2_core_queue_release+0x20/0x80 [ 280.433471][ T9953] _vb2_fop_release+0x1cf/0x2a0 [ 280.433490][ T9953] vb2_fop_release+0x75/0xc0 [ 280.481898][ T9960] IPVS: ftp: loaded support on port[0] = 21 [ 280.496066][ T9953] vivid_fop_release+0x18e/0x450 [ 280.496081][ T9953] ? vivid_req_validate+0xc0/0xc0 [ 280.496162][ T9953] v4l2_release+0x21f/0x390 [ 280.496183][ T9953] __fput+0x2ff/0x890 [ 280.496200][ T9953] ? dev_debug_store+0x110/0x110 [ 280.496216][ T9953] ____fput+0x16/0x20 [ 280.496233][ T9953] task_work_run+0x145/0x1c0 [ 280.496257][ T9953] exit_to_usermode_loop+0x316/0x380 [ 280.496278][ T9953] do_syscall_64+0x65f/0x760 [ 280.528173][ T9960] kobject: 'lo' (00000000ed2c7664): kobject_add_internal: parent: 'net', set: 'devices' [ 280.534617][ T9953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.534631][ T9953] RIP: 0033:0x459a59 [ 280.534648][ T9953] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.534656][ T9953] RSP: 002b:00007faed1eb0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 280.534669][ T9953] RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000459a59 [ 280.534677][ T9953] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 280.534686][ T9953] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 280.534693][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faed1eb16d4 [ 280.534701][ T9953] R13: 00000000004c0117 R14: 00000000004d2478 R15: 00000000ffffffff [ 280.544557][ T9953] Kernel Offset: disabled [ 280.733951][ T9953] Rebooting in 86400 seconds..