Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. syzkaller login: [ 38.609243] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/12 06:09:31 fuzzer started [ 38.814876] audit: type=1400 audit(1573538971.425:36): avc: denied { map } for pid=6976 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.896570] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/12 06:09:33 dialing manager at 10.128.0.105:38775 2019/11/12 06:09:33 syscalls: 2529 2019/11/12 06:09:33 code coverage: enabled 2019/11/12 06:09:33 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/12 06:09:33 extra coverage: extra coverage is not supported by the kernel 2019/11/12 06:09:33 setuid sandbox: enabled 2019/11/12 06:09:33 namespace sandbox: enabled 2019/11/12 06:09:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/12 06:09:33 fault injection: enabled 2019/11/12 06:09:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/12 06:09:33 net packet injection: enabled 2019/11/12 06:09:33 net device setup: enabled 2019/11/12 06:09:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/12 06:09:33 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 42.037820] random: crng init done 06:11:13 executing program 5: 06:11:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 06:11:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@noquota='noquota'}, {@grpid='grpid'}]}) 06:11:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x1fd, @empty}, 0x1c) 06:11:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000080)="ea", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:11:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) lstat(0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x0, 0x3, 0x7f, 0x1, 0x0, 0x0, {0x1, 0x0, 0xffff, 0x0, 0x9, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x9c10, r2, 0x0, 0xfc9}}}, 0x90) write$P9_RSTATu(r1, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r2], 0xc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) [ 141.133108] audit: type=1400 audit(1573539073.745:37): avc: denied { map } for pid=6976 comm="syz-fuzzer" path="/root/syzkaller-shm082593291" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 141.180111] audit: type=1400 audit(1573539073.755:38): avc: denied { map } for pid=6993 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=12881 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 141.311745] IPVS: ftp: loaded support on port[0] = 21 [ 142.089846] chnl_net:caif_netlink_parms(): no params data found [ 142.101791] IPVS: ftp: loaded support on port[0] = 21 [ 142.128865] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.135855] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.143078] device bridge_slave_0 entered promiscuous mode [ 142.149932] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.156670] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.164011] device bridge_slave_1 entered promiscuous mode [ 142.185020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.198581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.223628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.231131] team0: Port device team_slave_0 added [ 142.236769] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.244248] team0: Port device team_slave_1 added [ 142.249769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.250495] IPVS: ftp: loaded support on port[0] = 21 [ 142.257175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.343433] device hsr_slave_0 entered promiscuous mode [ 142.390333] device hsr_slave_1 entered promiscuous mode [ 142.430824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.437772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.498089] chnl_net:caif_netlink_parms(): no params data found [ 142.507366] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.514347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.521455] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.527934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.576932] IPVS: ftp: loaded support on port[0] = 21 [ 142.629261] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.635939] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.643704] device bridge_slave_0 entered promiscuous mode [ 142.652289] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.658625] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.665799] device bridge_slave_1 entered promiscuous mode [ 142.705886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.716825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.733256] chnl_net:caif_netlink_parms(): no params data found [ 142.755270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.763142] team0: Port device team_slave_0 added [ 142.776419] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.783933] team0: Port device team_slave_1 added [ 142.807712] IPVS: ftp: loaded support on port[0] = 21 [ 142.809203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.820708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.834664] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.841290] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.849031] device bridge_slave_0 entered promiscuous mode [ 142.912944] device hsr_slave_0 entered promiscuous mode [ 142.950331] device hsr_slave_1 entered promiscuous mode [ 142.990699] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.997691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.005699] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.012151] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.019135] device bridge_slave_1 entered promiscuous mode [ 143.040785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.052082] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 143.058158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.067033] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.074262] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.088896] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.095692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.102336] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.108686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.132834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.141007] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.147897] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.155153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 143.163388] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.169989] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.198602] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.204818] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.214760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.247351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.254711] team0: Port device team_slave_0 added [ 143.260957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.268089] team0: Port device team_slave_1 added [ 143.275041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.282915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.290794] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.297237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.305195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.316685] IPVS: ftp: loaded support on port[0] = 21 [ 143.335838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.343481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.353878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.362030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.369650] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.376035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.388281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.406910] chnl_net:caif_netlink_parms(): no params data found [ 143.419055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.431629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.440275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.493393] device hsr_slave_0 entered promiscuous mode [ 143.530465] device hsr_slave_1 entered promiscuous mode [ 143.595610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.605304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.613148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.622887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.635008] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.643028] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.649962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.657208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.665394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.674925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.690741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.698497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.723940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.752816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.762929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.784999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.791150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.815911] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.822421] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.829410] device bridge_slave_0 entered promiscuous mode [ 143.839855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.849559] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.856082] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.864670] device bridge_slave_1 entered promiscuous mode [ 143.895377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.906963] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 143.918393] chnl_net:caif_netlink_parms(): no params data found [ 143.932996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.939855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.948320] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.958716] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.976709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.983677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.002732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.015473] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.026689] team0: Port device team_slave_0 added [ 144.051705] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.073272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.081217] team0: Port device team_slave_1 added [ 144.086520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.094429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.105500] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.111888] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.167535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.175121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.187714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.197497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.206015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.214603] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.221579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.234560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.255258] bridge0: port 1(bridge_slave_0) entered blocking state 06:11:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f00000000c0)=[{r1, 0x2710}, {r2}, {r3}], 0x3, 0x0) [ 144.262760] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.275434] device bridge_slave_0 entered promiscuous mode [ 144.297010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.306553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.318638] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.325788] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.334823] device bridge_slave_1 entered promiscuous mode [ 144.345689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.355198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:11:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) r1 = msgget(0x2, 0x100) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = getuid() quotactl(0x1, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r7, r8) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x4, 0x5}, 0x1eb2bc4c4062bfad) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r11 = getuid() quotactl(0x1, &(0x7f0000000000)='./file0\x00', r11, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r11, r12) msgctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x0, r3, r4, r6, r12, 0x1, 0x1}, 0x400, 0x3, 0x3ff, 0x80000000, 0x6, 0xffffffff, r9, r10}) [ 144.363084] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.369662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.376956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.385741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.394535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.411153] chnl_net:caif_netlink_parms(): no params data found 06:11:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x400000) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001440)=ANY=[@ANYBLOB="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"]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x2000000000000, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x18219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001380)='./file0\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x4) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ubi_ctrl\x00', 0x400080, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0xe61) r6 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) write$vnet(r6, 0x0, 0x0) r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r8 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) write$UHID_INPUT(r4, &(0x7f0000006c80)={0x8, "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", 0x10079}, 0xd87c1bff802bf49) r9 = syz_open_dev$dspn(0x0, 0x1, 0x2) write$vnet(r9, 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 144.453107] device hsr_slave_0 entered promiscuous mode [ 144.500784] device hsr_slave_1 entered promiscuous mode [ 144.540880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.548670] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.561831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.572441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.581481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 06:11:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x800, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x380, 0x200007fd, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d0", 0xb4}, {&(0x7f0000000500)="4520d8c1ee8e08b9ee293229b6ac2189970e6b277c", 0x15}], 0x2}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x212}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) sendto$inet(r2, &(0x7f00000012c0)="0d268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 144.589848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.610634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.616807] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.635225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.650856] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.665089] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.672410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.681044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.688563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.697337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.705912] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.718308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 06:11:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x8}, 0x28, 0x2) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x8400) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 144.735417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.743842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.752924] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.759388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.768275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.776401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.784795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.822211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.845909] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.854947] team0: Port device team_slave_0 added [ 144.861428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.868965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.880617] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.887177] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.894862] device bridge_slave_0 entered promiscuous mode [ 144.902114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.909286] team0: Port device team_slave_1 added [ 144.915910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.930417] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.936797] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.945283] device bridge_slave_1 entered promiscuous mode [ 144.952522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.961631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.969567] bridge0: port 2(bridge_slave_1) entered blocking state 06:11:17 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000480)="6ed9b7255278daa197d8629a72f16862105cdfe0cc61253b50da885c24b09e447685d532a842b8a17849c17df8fe60ab62944bd39c79a03119293d44ae215f1249ebcdd89e9ed2f846fac783a8444e9d85cb0e27febfd949ff5534a0", 0xffffffbb}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0xffffffff}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x2) write(r4, &(0x7f00000003c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48bb7a9dbe30fcc0ee3c0d19", 0x5e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = socket(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_int(r5, 0x1, 0x4, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r6 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00') open(&(0x7f0000000440)='./file0\x00', 0xa2b40, 0x24) [ 144.975964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.990589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 144.998724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.010432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.016513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.024224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.032428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.041134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.049409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.064216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.071728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.079305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.087561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.113568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.123852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.141743] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 145.199561] audit: type=1400 audit(1573539077.785:39): avc: denied { map } for pid=7055 comm="syz-executor.5" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=26660 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 145.283747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.295505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.317439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.325963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.334754] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.382502] device hsr_slave_0 entered promiscuous mode [ 145.420416] device hsr_slave_1 entered promiscuous mode [ 145.462390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.472039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.480616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.487376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.494699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.502364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.512709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.520707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.527699] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.548318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.556356] team0: Port device team_slave_0 added [ 145.563912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.573648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.581206] team0: Port device team_slave_1 added [ 145.586752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.594784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.601874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.609778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.619949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.633490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.641588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.649989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.661836] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.668000] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.685815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.733513] device hsr_slave_0 entered promiscuous mode [ 145.780499] device hsr_slave_1 entered promiscuous mode [ 145.820565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.828109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.837568] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.847778] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.855675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.864859] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.873471] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.888577] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 145.896144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.913198] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.925217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 06:11:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = syz_open_pts(r0, 0x1) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) dup3(r4, r0, 0x0) [ 145.933596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.953557] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.960070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.969390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.976321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.984805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.993903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.005581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.019431] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.026080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.037724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.049459] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.055859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.065448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.085233] sp0: Synchronizing with TNC [ 146.089520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.115535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.131002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.139853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.189891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.206861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.229841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.240984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.249296] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.262876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.291499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.298526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.318692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.338077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.354716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.373027] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.383568] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.411109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.421431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.433856] sp0: Synchronizing with TNC [ 146.444749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.452103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.463952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.473470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.486440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.495857] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.502262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.542043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.549521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.582293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.594939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.607470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.648445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.670542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.690638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.698315] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.704731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.718738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.726350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.735774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.753618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.765879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.786709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.820659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.827685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.853924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.878340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.885258] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.896510] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.912637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.922521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.935233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.943112] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.949862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.958863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.966964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.974754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.982410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.990317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.997865] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.004235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.011648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.018412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.025226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.032409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.041845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.051568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.059559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.067923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.075442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.083514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.097755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.108293] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.115789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.129698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.143094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.152988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.161501] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.167972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.184133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.199921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.209221] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.216259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.224554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.235071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.244867] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.252182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.262795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.271309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.278070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.285364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.295146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.304191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.312492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.324242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.333440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.344089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.357754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.366914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.376316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.392266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.409994] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.429246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:11:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) [ 147.454266] hrtimer: interrupt took 39734 ns [ 147.464954] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.484205] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.495847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.506734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.524018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.644594] XFS (loop3): Invalid superblock magic number 06:11:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10001, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4030011, r2, 0x69a38000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x2, 0x1000000000000002, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x68042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="d3db7fc926bb690d544ef2c365709fd681e98cfcdc9ffbd4236d3312ada04ad125a116dd31bf2201ced7f0369cd3", @ANYRESOCT], 0x45) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) fallocate(r5, 0x0, 0xffff, 0x9) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r4, r5, 0x0, 0x10001) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x8, 0x7, 0x5b00, 0x6, 0xd, 0x40, 0x7, 0x6, 0x2509, 0x2, 0x5, 0x100}) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 06:11:21 executing program 4: prlimit64(0x0, 0x4, &(0x7f0000000280)={0xffffffff, 0x103}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x600040, 0x100) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = fcntl$getown(r2, 0x9) perf_event_open(0x0, r3, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x90001, 0x0) signalfd4(r4, &(0x7f00000001c0)={0x9}, 0x8, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) 06:11:21 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') r4 = getpgid(0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="725b29bd7000fbdbdf2525000000080001007063690014000200303030303a30303a31302e300000000008008b0004000000100001006e657464657673696d000000100002006e6574646576f7ffffffffffffff8b0002000000100001006e657464657673696d000000100002006e657464657673696d30000008008b0004000000080001007063690014000200303030303a30303a31302e300000000008008a00", @ANYRES32=0x0, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) fcntl$setpipe(r2, 0x407, 0x0) connect(r0, &(0x7f0000000500)=@nl=@proc, 0x80) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8938, &(0x7f0000000240)={'\x00', @ifru_map={0x1, 0x31, 0xfffc, 0x2, 0x1}}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x4000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-monitor\x00', 0xa01, 0x0) accept4$unix(r7, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 06:11:21 executing program 5: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)={0x9, 0xc2, "4dcdd48bd4bc9fdbcc7e5bbb8cf89c7f26dc3889addb414c502304794d7722d381d34851b9481ad5310967b0cac5a85265db7e092aec31cd015ef0cf59ad16997fb00e6c7ccc13b00a8cf441d64048a5911716444e9605cdfe306d24abfe854216e2c67295c08f1622b05c32e55a00467e3403f71df12c455bdde220b48ba280362e09dbdc3b2193c9ed7406d899a0f99c3a9eff396fba83f5d497200098db0d1c84a6a155d9ba270b67016d14fb87dbcf83879725d4f1e355fec4ceeb8e2314cd11"}) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="10018000", @ANYRES16=r3, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4015}, 0x20000000) 06:11:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68+0\x99\x14k^nBx\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 06:11:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) lstat(0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x0, 0x3, 0x7f, 0x1, 0x0, 0x0, {0x1, 0x0, 0xffff, 0x0, 0x9, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x9c10, r2, 0x0, 0xfc9}}}, 0x90) write$P9_RSTATu(r1, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r2], 0xc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 06:11:21 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) [ 148.781554] binder: 7172:7173 ioctl c0306201 20000000 returned -14 [ 148.868361] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 148.887338] device nr0 entered promiscuous mode [ 148.911696] audit: type=1400 audit(1573539081.525:40): avc: denied { create } for pid=7180 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 148.987989] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 148.999015] device nr0 entered promiscuous mode [ 149.001281] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted [ 149.072579] audit: type=1400 audit(1573539081.525:41): avc: denied { write } for pid=7180 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:11:21 executing program 3: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3b) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000001280)=ANY=[@ANYRESOCT], 0x17) fallocate(r0, 0x11, 0x0, 0x20008000) 06:11:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x420002, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x78) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a40)={0x0, 0x19}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000ac0)={r6, 0xeda}, &(0x7f0000000b00)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000008a37aa8a9558241ffd1dffbcf2deccd4547d0e26092c2e82984a055126df23bb794c227f6dca44c8b4c10f776f99f52c3a780745e9709e2cb6ea5946d6426b00ed3d5dc36585966564be8990962d39030c38d2dae24f54738c68e0e97c909ebc2cf557e5b895a8320a4b066397376f8fe47daa32dc37fcb4be09f59acbbc152a2b0ee39d79fdbba695d314cd047a5cc0cdd525d539559b4026c2e6eda53e7c0c124c139729f31494"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="445ef10024000000000000000000000000000000c3811cef83875b9d101cf854035aed441d058b81ef4990d08faecd68517c57f89b61db59b67ffb72d07528592cce34f868bae19ca7319adf29f4d48420800ff9d6cdb0be5cfd30486504d4ade22fee722c9db03c7f35f6ed4c442aa06259716ceae62a0afa", @ANYRES32=r10, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a00070200"/20, @ANYRES32=r10, @ANYBLOB="ecff123ac9e82f25da3fff2bbec7a4de0000000000000000"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000b40)={0x1f, 0x3, 0xae48ffdf88b4471c, 0x7, 0x2, 0x7, 0x8, 0x31c, r6}, &(0x7f0000000bc0)=0x20) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockname$packet(r11, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000b4cd0000"], 0x48}}, 0x0) fcntl$getflags(r3, 0x401) sendmmsg$sock(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="be", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)='%', 0x1}, {&(0x7f0000000800)='R', 0x1}], 0x2}}, {{&(0x7f0000000c40)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000d00)="63d955b801c7f98737126e16db6ec92cca0c0db03cc85a", 0x17}, {&(0x7f0000000900)="b009df2bdf7952ec436838622bb8a1be10175cfbc01529e605ec599d2005bcf90cc05ec0444ae8e68ee78d9489fe3cdacba7771efd9a5b644bdf9e9b", 0x3c}, {&(0x7f0000000440)="3e3958ab57a2c5b7784444a83eb4476e77e391e9422c7cf0821afac7282864e56bd42c747cfd6828fc8be7f3544a4c69a798", 0x32}], 0x4, &(0x7f0000000f00)}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001000)="01000080000000001f39f653c42268e1073764f46e0898f389db0c0012b83a3b0448aec3c64470cd987acc202cdf621fdc50c4d5b89aa76aad", 0x39}, {0x0}, {0x0, 0x23}, {&(0x7f00000010c0)}], 0x4, &(0x7f00000021c0)}}], 0x4, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=@newlink={0x114, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf4, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xe4, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x7}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x4}, @IFLA_GRE_TOS={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}], @IFLA_GRE_REMOTE={0x14, 0x7, @empty}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x9}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe47d0}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x8149}], @gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e20}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e21}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x3}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_TTL={0x8, 0x8, 0x5}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x8}], @gre_common_policy=[@IFLA_GRE_FWMARK={0x8, 0x14, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0xa99}, @IFLA_GRE_TOS={0x8, 0x9, 0x9}, @IFLA_GRE_LINK={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}]]}}}]}, 0x114}}, 0x0) 06:11:21 executing program 5: socket$inet(0x2, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xf303770db2014ab2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r6, 0x6, 0x401, 0x1, 0x7ff, 0x101, 0x400, 0x1, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x1, 0x6, 0x400, 0x20}}, &(0x7f0000000180)=0xb0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20675d9f82d3869feeed860e6cb504000000cad7cb69050046b6e50e067f000000000000c1374611c0dd34c12d100ea73cc21c5ed2ac1e4640dd4d226fdc90887e50f948fcf32bab60844794d3f3477681280d8d206bfebd201986fe24352453e388796c27433690fb"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 149.291665] audit: type=1400 audit(1573539081.525:42): avc: denied { read } for pid=7180 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 149.408902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7213 comm=syz-executor.1 06:11:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="677432fc783bdfd8674e468efea84c19d89fce3ffba19946b71df13f05c20c1b9e85a98cdf03178ed64800e6daa7141483d7a81ccd72f54397f63b03cc246eb275cad13fab476b2fab93", 0x4a, 0x801, &(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 06:11:22 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) pread64(r3, &(0x7f0000000000)=""/12, 0xc, 0x83) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 149.579746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7239 comm=syz-executor.1 06:11:22 executing program 4: prlimit64(0x0, 0x4, &(0x7f0000000280)={0xffffffff, 0x103}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x600040, 0x100) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = fcntl$getown(r2, 0x9) perf_event_open(0x0, r3, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x90001, 0x0) signalfd4(r4, &(0x7f00000001c0)={0x9}, 0x8, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) 06:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x7, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x905b07f811658211) sendto$ax25(r2, &(0x7f0000000100)="76cc7078c2fbe0e46d2312d05aa4c6d0b8cd371212c1d5897a414f3da408467524ea2893f7ae98bb622438cf5597e6cb14936d1a519bffca208f0e997e09686f11f927a0e22d18e830eb3700be7eeb6cb05db1bfa7a698fadb876c657fae1bac85d3cf69e4b9aa079ac037d7f7e9c4fb121ac1aefa5fb8b4a4c95579afae0f1b0735898d6016507df0854741b6d23f74ff933e4e46390d2f95ecf81f698c5798eac1045181c7", 0xa6, 0x0, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 06:11:22 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 06:11:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1014, 0x26, 0x100, 0x70bd2c, 0x25dfdbfe, {0x7}, [@generic="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"]}, 0x1014}}, 0x20000000) sendfile(r0, r3, 0x0, 0xedc0) 06:11:22 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f00000000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000200)="b7e087957e15b83719753e281471e747e970845281bae9def34b41a777846be23f78e56821fb8b724db5caa018caa43200956a4b3b71b1b58a50d3a55d5f1761003564", &(0x7f0000000380)="b8d75f516179c9a188d586e341aeee1a494be41a512379019202ac46620c961f34bf2b52bf48c235317327a4255324830733812147926da6f3c8b9c862dcb8147beef2a36921ef65bfaacd52b5ebcde4c039410e3c3f2b9fec80f260525b8fc4b5c326d0b3a38d87d5"}, 0x20) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2ee4, 0x0) write$UHID_INPUT2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000610044eb316f29ead323199fa9293d591e924e4730751717fdd812cf94ff1e5269eda0a80d951ac0e5997f0c66a38fc42efa98b9a39ebe2a9faeef139f9d6b8705225b2c3c75bcaea9c20c98c28f81b39f6ac2af0e8af1721eb9c88acdd51fdebfe8d1"], 0x67) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffc7}}, 0x0) sendmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="02cebcb727c4a5feaae1", 0xa}], 0x1}}], 0x1, 0x0) [ 149.967501] vivid-000: kernel_thread() failed 06:11:22 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) pread64(r3, &(0x7f0000000000)=""/12, 0xc, 0x83) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 06:11:22 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) pread64(r3, &(0x7f0000000000)=""/12, 0xc, 0x83) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 150.224238] syz-executor.5 (7223) used greatest stack depth: 23488 bytes left [ 150.231726] syz-executor.5 (7229) used greatest stack depth: 23456 bytes left 06:11:23 executing program 5: socket$inet(0x2, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xf303770db2014ab2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r6, 0x6, 0x401, 0x1, 0x7ff, 0x101, 0x400, 0x1, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x1, 0x6, 0x400, 0x20}}, &(0x7f0000000180)=0xb0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20675d9f82d3869feeed860e6cb504000000cad7cb69050046b6e50e067f000000000000c1374611c0dd34c12d100ea73cc21c5ed2ac1e4640dd4d226fdc90887e50f948fcf32bab60844794d3f3477681280d8d206bfebd201986fe24352453e388796c27433690fb"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x400000000000058, 0x0) 06:11:23 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x7530}}) socket$inet6(0xa, 0x3, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x3b) ptrace$peekuser(0x3, 0x0, 0x1) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000440)='./file2\x00', &(0x7f00000003c0)='.\x00') mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") setsockopt$SO_TIMESTAMP(r2, 0x1, 0x6, &(0x7f0000000000)=0x2, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="e0ffff0b6eb10b2eff00000000d9c70100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000000000089b1f2672e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094c93850efed233671ef11816004f2c9670a74eacdb139d28c0eff54970fbdb298d85d418f2a6bfe0b88b4ec55e5a42c135253b8c06d90104b3242cc1389d24558cce57b24ca142a4b78"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000200)={'gre0\x00', 0x5}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 06:11:23 executing program 4: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/93, 0x5d}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='+\xea\t\xc8\xa2\xb2\xa5pxr\x03u\x91\xad%N\x11|v\x95*\xdd#\xb9*\a0FFxN_w\x18p\x8fY\x04w\x04\x98\xedc\xdb\xe3,\xb2K\xdd{\xb7\x18\xaaI\x8e\xe8j\x8d\x9b\x0f\x0e\x02\x8d\x05y%\x13\"X\xbd,w\xde7\xc6%\x12\xcb\xd6\xdd\x16 \xc0\xa7\xfaY\x87\xb3F\x83\x1fs\x0f\xa8,\xee\xe7\t#\xd0sL\xb6\x1d_`\x91-(\xb2\x1eoA\xd1-$O\vn\x88\x05\xa07\xef\x87{\x8f\x1cu^\x8a\x00,\x9b\xa0C\xdf\xce\x83@\xc7\xbf$\xde\xa1\xd3\x9b\xf3\xffve\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 06:11:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2081ff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46600) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'stack ', 'ppp1.{GPL\x00'}, 0x10) r5 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x1542) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x81, 0x3, 0x1f, 0xbe5e, 0x9, {0x4, 0x3, 0x3, 0x400, 0x0, 0x7ff, 0x49, 0x4, 0x2, 0x6655, 0x8, 0xfffe, 0xa0000000, 0x401, "0800000000000000216f2c9ae1ec01708721c9bdca5948e8faaacc27e0ab21d7"}}) 06:11:23 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f00000000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000200)="b7e087957e15b83719753e281471e747e970845281bae9def34b41a777846be23f78e56821fb8b724db5caa018caa43200956a4b3b71b1b58a50d3a55d5f1761003564", &(0x7f0000000380)="b8d75f516179c9a188d586e341aeee1a494be41a512379019202ac46620c961f34bf2b52bf48c235317327a4255324830733812147926da6f3c8b9c862dcb8147beef2a36921ef65bfaacd52b5ebcde4c039410e3c3f2b9fec80f260525b8fc4b5c326d0b3a38d87d5"}, 0x20) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2ee4, 0x0) write$UHID_INPUT2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000610044eb316f29ead323199fa9293d591e924e4730751717fdd812cf94ff1e5269eda0a80d951ac0e5997f0c66a38fc42efa98b9a39ebe2a9faeef139f9d6b8705225b2c3c75bcaea9c20c98c28f81b39f6ac2af0e8af1721eb9c88acdd51fdebfe8d1"], 0x67) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffc7}}, 0x0) sendmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="02cebcb727c4a5feaae1", 0xa}], 0x1}}], 0x1, 0x0) 06:11:23 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x28366, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) getuid() 06:11:23 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:11:23 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) pread64(r3, &(0x7f0000000000)=""/12, 0xc, 0x83) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 06:11:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f00000000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000200)="b7e087957e15b83719753e281471e747e970845281bae9def34b41a777846be23f78e56821fb8b724db5caa018caa43200956a4b3b71b1b58a50d3a55d5f1761003564", &(0x7f0000000380)="b8d75f516179c9a188d586e341aeee1a494be41a512379019202ac46620c961f34bf2b52bf48c235317327a4255324830733812147926da6f3c8b9c862dcb8147beef2a36921ef65bfaacd52b5ebcde4c039410e3c3f2b9fec80f260525b8fc4b5c326d0b3a38d87d5"}, 0x20) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2ee4, 0x0) write$UHID_INPUT2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000610044eb316f29ead323199fa9293d591e924e4730751717fdd812cf94ff1e5269eda0a80d951ac0e5997f0c66a38fc42efa98b9a39ebe2a9faeef139f9d6b8705225b2c3c75bcaea9c20c98c28f81b39f6ac2af0e8af1721eb9c88acdd51fdebfe8d1"], 0x67) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffc7}}, 0x0) sendmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="02cebcb727c4a5feaae1", 0xa}], 0x1}}], 0x1, 0x0) 06:11:24 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) mount$9p_tcp(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=tcp,', {'port'}}) 06:11:24 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x3c64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x401) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000840)) perf_event_open(&(0x7f000001d000)={0x3, 0x3d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x62ac, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x0, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[]}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r14}]]}}}]}, 0x38}}, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082) socket$nl_route(0x10, 0x3, 0x0) 06:11:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:11:24 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:11:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[]]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:24 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x28366, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) getuid() [ 152.396656] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 06:11:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x9}, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x3e40}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x121080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x38, 'memory'}, {0x2b, 'memory'}, {0x2b, 'io'}]}, 0x21) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/d\t\x00\x00\x00\x00\x1a\x00\x00un\x00', 0x400040001, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x0, '\x03\x8a\xa1t\xe3\xc4\x94u\xb5m\x1b\x88\xa8\xa4ueX\x81\x80', 0x60}]}, 0xfdef) epoll_create1(0x100000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x99}, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x140020, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000200)={0x3f, 0x1, 0x9, 0x81}, 0x10) 06:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="442a939dc400"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c0001f762e07cc9726964676502121400e6ff0767d1000002000047001600030000009a08340366727a9e652ae8e6a57ed4d807095fd55f47bf544b8302d75da4b99437f5c069d700c9e7ce74529bc4d1607ae1a991f8dda4a6742a4bcab4"], 0x3}}, 0x0) 06:11:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 06:11:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 152.940664] device nr0 entered promiscuous mode 06:11:25 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x3c64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x401) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000840)) perf_event_open(&(0x7f000001d000)={0x3, 0x3d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x62ac, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000000100006a0af2fe00000000850000001a000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee5105b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be77d81b48a5c69395bf5d8be489bc5af1f04e98e61dbc2777df150b7cdd77b85b94109a314fd085f028f2ed1a4535550614e09d6378198a60978670838336a440b4d8f699b62aafbad8ada181f7af2abd55a87acb7d153d62058d0a4139f173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a5903ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b870f8f92eb6f0e8c70e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84fad791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16e97fc20faf791ec85821d0c48fb657c29b302b0d2277a84af326f36f3e2c25a61ec45c3af97a8f17da954aff3f7dac1a37fa3c18078bc4a04b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d6691f8c180f82c5f573c6d294d36650193ad0fde074569ae753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585628c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b90bc0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870787854df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de59bda7780ae073dfb81c8d6623851c31539b22c09e1d7f0cda06a9fa87d64cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044fd539f5096412b926b2e095b84c20243ff98df3347f0e399d1bbf27e3c332f9c0e153b28b2d422ebccec45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7946130b547dbf8b497af0a77fbcf2cd1da14a829d7849cbcfc83d5dd697cd592781fdfd266ee0e2ac8b3d547337f858cc93fe9f0d6506fa923be164c9bddca4e59db430698863d0a32381088beefaaf58433960fb72d4fd925c329124a67713017806d29888ada48167abb5bae1f1c8fb3f55e709b862bc8a5ce8d444b3ed7113092867db3f6444162fd50233e00752b4ab6b373b336b52b6e710d7b36e524283e6dfc58473b985ab4de64440048f1b5d39f2fd1ff7823bff8261c065dd5fb75fac7108e8dcea36b0158cbbe00ab161117de2deda42b745524c1ef417dde6850470d7bf5e0055c9d46f648c74c64ab279d5ccfa7d0f68a60d4434276514fb68db4b939a957d9369f8ad776e7d8d5b5b92009f4329a4670998e7c8206b77edb1ea4de291d18cd1f6590e09496b3bf9c17d0000000000000075e3a5f4c995c96ec1fb5a86500edd9c3cfd8541f9a7dc2bb97c699d565e5b5ab9dc1fff5759e307e6ec77d13efc25d3606f02484df90fd1c2dc42e66a2d96655c614fd20f653abf7a61ac3630a3787b3e467db9be79448c1758b3e0e17e4eff1b899368acb9fd75a39e3db8129b48fb449c5d4f609d778e8f1b103de76bb577896d3ec0a476a7a85d22feb83cccfbf46aba93fb9592d1000abf8965eaf041bbcf8dd27e415a771ee05672d78a2a5f35eeaae300c198de53d009f01d246a3130fc9e6e04757843e9600e889f4b8d1cc9e3f030a3d40e9ccd7abb3b4995663688ed875068e420f7fdebb180b84cf75747ed54a73e3711fe914a7530417e29a2ed23829064c4a5f56041cc5690b16f6d6adbb15f87c336f8416415862fe63bc7f3ca85ea685c0e94db54fe3509e784312f846a510d5be9d01bd47e5c4cd1245c4e13640553ea01d1d797ecc9fcd3acb610440f96e6fd5ca570916a4c34244558ec43be8d83d73fd4ff549996a951828832bbf648621e0aea4d8786033a2531932adce9ad87d00b1efa3a44a82236c0a9ce37d9f172adfa4874a475aef81c1a863b096aa2d28b3831d6dd24e0a17e99f718c36ee7768f734639380040bb3ceb4a2f81aa91bec55f85bbfbde0d842ea953f58bb9944d62424afc203fba22476d4f898495a39fa49768a452dde9cdc6993321d059b50d59fb8ddc6be696a986ac9974fcec45951026969bf38170f9037e3b7a945eefb1f089296ff77ff3dca9c80fd0c7f4e96e875412d659fa5c27ade1229d3147c6235c619b1b4be628c7ca39b8f446b5489ef926021e5520d627885f1e9cb290eef82def6da117676fbcd25d18487fe5519f882eb55e3317cba1f006a305037406eb571144133eedfdfa3ee6b0b40341cad80e3b1236c3bcce6458a1442c66bcb215cb92d9991f7ce22d2bb91e96c27d23702eba80dc2faa891c2983e1c4e752f464ece0e3a753152123037635fbed782bcd7ac04cf333cf3c9b3845eca6fd2f3bc565c996ff762a7e3dc235f06bd75601d9f3f4f809fa04050000"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x0, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[]}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r14}]]}}}]}, 0x38}}, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082) socket$nl_route(0x10, 0x3, 0x0) 06:11:25 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) finit_module(r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) 06:11:25 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000005380)={{}, 'port0\x00'}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x143940, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xdeb122dc58e6d338, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xf1e) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='hfsplus\x00=\x94\xfa\xe2\xf2\x95i*\xf2k\x8bk\xf0#\xd7\xc0\xab@\xf6\xf2\x8f\nf0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0x10000001c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, 0x0, 0x0) time(&(0x7f0000000040)) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x400004e, 0x0) r6 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0xb, 0x0, "10120979126dc30e9e73116735c1c833c30bd344c34fae47667b3afc9a7b980a36655585ad1d21035f681d2c5cc31c2419696e7d56264e4528b857da2d5de44a", "c272f308f0f74a72755e1bb543dd1ec59d414e766ac74fce95d5a3b17e507aa4", [0x0, 0xf818]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 06:11:25 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x28366, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) getuid() 06:11:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc822, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1d9d0f791b60a80e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000600)=""/4096) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x1, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = timerfd_create(0x8, 0x80800) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000000)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bridge0\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x800001, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000500)=""/4096) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf00000000000000000000000000000000000000000000000000007902e2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d91f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692f3e41b61846cd8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd24913318180000000000000000a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb40000000000000000002eac62fb4f4d85209ae5df74a241b950e5e4bdd4680e463db39c1ac43fdb6683914c033b0a52dc85d1003f5cc1480ce7f77c111080b531e1efe789e96a4f881dfca77e39bd57ab3aae6556e06acf16c00fe603c7b7b3255e2e9e4dd7e15c3f5bfd6079d8eb337a2571c0b684bcbd6b7ff99866b445917532148c0d27337e26c07ff38f46dc458d9e42b1f2d89d2aeecb84b7555e60f35d5a2519a0aa7da1ec1de378fc6350aa7fc0dada7835c261e19c448ba59e067c9aee512e115372a603bb56725114cde716107cdcfd812238b6b6a5b86fd8d8c17d26c3682c5adf00"/824], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r7, 0x15}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 153.519814] print_req_error: I/O error, dev loop3, sector 2 [ 153.527223] hfsplus: unable to find HFS+ superblock [ 153.541387] audit: type=1400 audit(1573539086.135:43): avc: denied { create } for pid=7475 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 153.633750] bond0: Error: Device is in use and cannot be enslaved [ 153.695319] audit: type=1400 audit(1573539086.215:44): avc: denied { wake_alarm } for pid=7475 comm="syz-executor.3" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 06:11:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 06:11:26 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x3c64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x401) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000840)) perf_event_open(&(0x7f000001d000)={0x3, 0x3d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x62ac, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000000100006a0af2fe00000000850000001a000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee5105b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be77d81b48a5c69395bf5d8be489bc5af1f04e98e61dbc2777df150b7cdd77b85b94109a314fd085f028f2ed1a4535550614e09d6378198a60978670838336a440b4d8f699b62aafbad8ada181f7af2abd55a87acb7d153d62058d0a4139f173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a5903ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b870f8f92eb6f0e8c70e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84fad791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16e97fc20faf791ec85821d0c48fb657c29b302b0d2277a84af326f36f3e2c25a61ec45c3af97a8f17da954aff3f7dac1a37fa3c18078bc4a04b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d6691f8c180f82c5f573c6d294d36650193ad0fde074569ae753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585628c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b90bc0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870787854df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de59bda7780ae073dfb81c8d6623851c31539b22c09e1d7f0cda06a9fa87d64cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044fd539f5096412b926b2e095b84c20243ff98df3347f0e399d1bbf27e3c332f9c0e153b28b2d422ebccec45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7946130b547dbf8b497af0a77fbcf2cd1da14a829d7849cbcfc83d5dd697cd592781fdfd266ee0e2ac8b3d547337f858cc93fe9f0d6506fa923be164c9bddca4e59db430698863d0a32381088beefaaf58433960fb72d4fd925c329124a67713017806d29888ada48167abb5bae1f1c8fb3f55e709b862bc8a5ce8d444b3ed7113092867db3f6444162fd50233e00752b4ab6b373b336b52b6e710d7b36e524283e6dfc58473b985ab4de64440048f1b5d39f2fd1ff7823bff8261c065dd5fb75fac7108e8dcea36b0158cbbe00ab161117de2deda42b745524c1ef417dde6850470d7bf5e0055c9d46f648c74c64ab279d5ccfa7d0f68a60d4434276514fb68db4b939a957d9369f8ad776e7d8d5b5b92009f4329a4670998e7c8206b77edb1ea4de291d18cd1f6590e09496b3bf9c17d0000000000000075e3a5f4c995c96ec1fb5a86500edd9c3cfd8541f9a7dc2bb97c699d565e5b5ab9dc1fff5759e307e6ec77d13efc25d3606f02484df90fd1c2dc42e66a2d96655c614fd20f653abf7a61ac3630a3787b3e467db9be79448c1758b3e0e17e4eff1b899368acb9fd75a39e3db8129b48fb449c5d4f609d778e8f1b103de76bb577896d3ec0a476a7a85d22feb83cccfbf46aba93fb9592d1000abf8965eaf041bbcf8dd27e415a771ee05672d78a2a5f35eeaae300c198de53d009f01d246a3130fc9e6e04757843e9600e889f4b8d1cc9e3f030a3d40e9ccd7abb3b4995663688ed875068e420f7fdebb180b84cf75747ed54a73e3711fe914a7530417e29a2ed23829064c4a5f56041cc5690b16f6d6adbb15f87c336f8416415862fe63bc7f3ca85ea685c0e94db54fe3509e784312f846a510d5be9d01bd47e5c4cd1245c4e13640553ea01d1d797ecc9fcd3acb610440f96e6fd5ca570916a4c34244558ec43be8d83d73fd4ff549996a951828832bbf648621e0aea4d8786033a2531932adce9ad87d00b1efa3a44a82236c0a9ce37d9f172adfa4874a475aef81c1a863b096aa2d28b3831d6dd24e0a17e99f718c36ee7768f734639380040bb3ceb4a2f81aa91bec55f85bbfbde0d842ea953f58bb9944d62424afc203fba22476d4f898495a39fa49768a452dde9cdc6993321d059b50d59fb8ddc6be696a986ac9974fcec45951026969bf38170f9037e3b7a945eefb1f089296ff77ff3dca9c80fd0c7f4e96e875412d659fa5c27ade1229d3147c6235c619b1b4be628c7ca39b8f446b5489ef926021e5520d627885f1e9cb290eef82def6da117676fbcd25d18487fe5519f882eb55e3317cba1f006a305037406eb571144133eedfdfa3ee6b0b40341cad80e3b1236c3bcce6458a1442c66bcb215cb92d9991f7ce22d2bb91e96c27d23702eba80dc2faa891c2983e1c4e752f464ece0e3a753152123037635fbed782bcd7ac04cf333cf3c9b3845eca6fd2f3bc565c996ff762a7e3dc235f06bd75601d9f3f4f809fa04050000"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x0, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[]}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r14}]]}}}]}, 0x38}}, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082) socket$nl_route(0x10, 0x3, 0x0) 06:11:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x901}, 0x3, 0x3, 0x2}}, {&(0x7f0000000140)=""/134, 0x86}, &(0x7f0000000200), 0x10}, 0xa0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, r4, 0x4) [ 153.914804] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 06:11:26 executing program 3: creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @vbi={0x0, 0x200, 0x1000, 0x37303250, [0x1688000, 0x3], [0x7f, 0x3f], 0x1}}) dup2(r0, r3) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r6 = dup2(r5, r2) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x7, 0x1, 0x0, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}]}) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2175e3fa96467d7d) [ 153.977415] audit: type=1400 audit(1573539086.225:45): avc: denied { ioctl } for pid=7475 comm="syz-executor.3" path="socket:[26379]" dev="sockfs" ino=26379 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:11:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = dup3(r0, r1, 0x1c0000) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02000000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@data_journal='data=journal'}, {@delalloc='delalloc'}]}) [ 154.092077] audit: type=1804 audit(1573539086.695:46): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir800267180/syzkaller.XQygn5/10/bus" dev="sda1" ino=16553 res=1 06:11:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getresgid(0x0, &(0x7f0000000300), 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, 0x0, 0x17326a56bc819c21) r1 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00fb880409226e2f3eba46aefcfdf36a0049c2a79a05f6520a140820e8f44e7f1d9d5f8bc6f8d93144ef8614e4528bb732de5cb24c2311d71673547c1915ed041d89837661cf8e7a299ac5efcfc0102c866b6a9f9cf915462f490078695a7184003af8ac484c7e64cfc68120e7ad6e7b015090be9f91205ef105de6ea441b94a01bb339e10bba51e783a883916b63eb5f39eab905a390db77742878c2fb123aee271934048d2da8c46775147af0d80acf41b7b603bc526f65d7b4e24d4036d970029a4dbffff6982e7f80981180000000000"], 0x1, 0x2) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x6b3fc6eefeca6435) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x240040, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x5) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='\xfbJE\n\xc8z\xf8W\x8bmemory.e6ents\x00#3\x13i\xa3\xb9\"\xf8\xab\x82w\xb9.\x998Y\xf7\xf3\aJ\xc2\xbf\xf5Y\xce\t\x1d\xf9\x0f\x8cy\xf1\xcfTh\xf85z\x9d>\xb5\xd3\xcf\x84=\x19\n\x1fi\xd4\x0e\x00\x84\xd7\xd8\xfd\xd3f!\xc4Z/\xbe\xb6x\xdaV\xc9\x96\x83p\x83\x10\x7fe\xfe\xe4\xd5\x19\xba\x9f\xd4\xaf\x8b\xc4\xe6#?\x940.\x87]\xe0\xdd\xd9\xd0\xeb1\x96\xed7\x1bt\xb6\x99\x04\xcf\xd1X\x01\x87\xf8\xa3[8\xd2\xc2\x15\xa8\xc7:\x7f\x12\x16\x1d\x89\xca\xe4s\x06\x12;\xc0\xfc\xab\xc8\x9fY\x1a\x91\xb4U\xeb|\t`E\xf0\xd3\xc5\xc4\xef\ann\x0f!\xc3\xa3&\a\xf0\x13\x05\xd3M\\ \xcd\x1e\xeb\x95F{\xf4\xd4\xb4D\xbe\x8e\xab\x95\x16l^\x96n\xa5\x9c\x101\xf3\x87\x9f\xc6dHD4\x05\xc1&y\x89,\xfby~x\x1cs\xf1Y?o\x05V\xa2\xb4\xb1\x8c\xb8\xd8\xd3zkV,\xdb\xcaE\xb3\xb4\x909\t\xb46EG0\x96\x7f\xbdC\xe9\x18W\x9b\xd9\xc7\xec|\xf4\x1d)w\xcf\xd5\b+|\xb5\xbf\x18\xb0q\xc2G\xd3#\xfeZ\xf0\xb4\x00\xa4\x7fsqk\x1d\xb0*', 0x26e1, 0x0) r6 = socket$inet6(0x10, 0x100000000000003, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a2809302062c0000a84309c025244d2500080008000c0008ce3f00631f000000faa7b970caafdc1317d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) socket$inet_dccp(0x2, 0x6, 0x0) getpid() [ 154.175699] FAT-fs (loop3): bogus number of reserved sectors [ 154.304642] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={[{@cruft='cruft'}]}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) recvfrom$ax25(r2, &(0x7f0000000180)=""/148, 0x94, 0x40000040, &(0x7f0000000040)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) [ 154.381493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 154.396034] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 154.398708] audit: type=1804 audit(1573539086.735:47): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir800267180/syzkaller.XQygn5/10/bus" dev="sda1" ino=16553 res=1 [ 154.544029] bond0: Releasing backup interface bond_slave_1 06:11:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) dup2(r0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0x1, 0x5, r5, 0x0, r6, 0x0, 0x1, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) dup2(r4, r3) [ 154.593527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.653662] ISOFS: Unable to identify CD-ROM format. 06:11:27 executing program 3: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev, @link_local, @dev, @remote, @dev={[], 0xb}, @remote, @remote]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10100, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380), 0x3) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 06:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="f920a2015c", 0x5}], 0x1) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000680)=@hopopts={0x3a, 0x2f, [], [@generic={0x80, 0x71, "5a342217c73daee1c477bdd7508bef9f4e10e7cf7373ca3f1f963769c80e263ba8c9d506e00fa66ec9e8bb461b16cf71e66c37f6c29a0da886595bd92d8bbc22550c95fb2ee7c3c214f73de2e33710f2d612642ff814934b690968435412daa54b62a61943dd8e2f5fe059148d4f7b9c38"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1f, 0xf7, "5a199a531d09706448a0cb2ec60f1b90f00cc6dacc8d046797677f87e9c8fa3fd289ad4de0e192c18d176295a77ae128c71e368fcea27dec991736b3fced3be6dd9b281502e8d72c74ce276e244b812cb9ae514896c88e151e638e906cff0273be37c548b6b56bd19d0c98bb98d77c583c6648dabc2b5389389032d573fbdfa0a657210721474f7a421055d9e4f66e7b1fd3002a30d377f932d475f447a894254a57f030b7484edeec37ce9b13a1d3509c070f3d818b9224593fb8aa876cecf11da2d8a8d98549922acea5969e736b79f5a69e5227294cafe45af7e1d89112c391aa497a1f591572a0cb7467db3e392db43bc4b788f058"}, @jumbo]}, 0x188) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/161, 0xa1}], 0x1, 0x0) r2 = getpid() ptrace$setopts(0x4200, r2, 0xef9e, 0x40) [ 154.745094] ISOFS: Unable to identify CD-ROM format. 06:11:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 06:11:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x11, 0x3, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x81) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0x6}}, {@debug={'debug', 0x3d, 0x8001}}, {@privport='privport'}], [{@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'ppp1\xf1em1keyring%'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r6 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'team0:&\x02\xb89\xeb,\xf9\x00]\x00', 0x400000000001b9}) 06:11:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000280)={0x5, 0x150, 0x0, 0x54f1, 0x80000001}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e5ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6, 0x8}, 0x8) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}]}, 0x4c}}, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 06:11:27 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) read(r1, &(0x7f0000000040)=""/110, 0x6e) fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x4) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r4, 0x5, 0x5, 0x80008, 0x1f, 0xffffffff}, 0x14) truncate(&(0x7f0000000180)='./file0\x00', 0x90002) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendfile(r2, r2, 0x0, 0x8800000) 06:11:27 executing program 3: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev, @link_local, @dev, @remote, @dev={[], 0xb}, @remote, @remote]}) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10100, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380), 0x3) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 06:11:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) creat(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) kcmp(r1, r2, 0x5, r3, r0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 06:11:27 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xf69, 0xcc00c0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x9fa) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x201) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0100002000000000002f9078cf837ac2c4ac1e0001ac1414bb00006558000c900000000000040000000000000000"], 0x0) [ 155.040275] audit: type=1800 audit(1573539087.645:48): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16547 res=0 [ 155.153113] audit: type=1800 audit(1573539087.765:49): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16547 res=0 06:11:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x201, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r5, 0x1000}, &(0x7f0000000280)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x111080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r7, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10012, r8, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000140)=r8) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 06:11:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x0) r1 = add_key$user(0x0, &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r2 = getpid() r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'rmd320\x00'}}) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x02\xfb8', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r5, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="5599bb0d16e0d3ba53bf8d88424ab1779890631cb2d9ad41687d27b0ce41cd7f21b8e62d3d4bcd6ce4f0a0", 0x2b, r5) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r3, r6}, &(0x7f0000000400)=""/183, 0xb7, 0x0) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_mr_cache\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) sendmmsg$alg(r11, 0x0, 0xffffffffffffff98, 0xaba709d8662b1a2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000280)) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1}, 0x0, 0x0, &(0x7f0000000200)={0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x9, 0x4) [ 155.272910] bond0: Releasing backup interface bond_slave_1 [ 155.292947] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:11:27 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000640)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getresgid(0x0, &(0x7f0000000300), &(0x7f0000000340)) r0 = getpid() sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x201) r4 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_mr_cache\x00') perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 06:11:27 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) fcntl$setpipe(r1, 0x407, 0xffffffffffffffff) [ 155.342407] Bluetooth: Error in BCSP hdr checksum 06:11:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) fcntl$setpipe(r1, 0x407, 0xffffffffffffffff) [ 155.610965] Bluetooth: Error in BCSP hdr checksum [ 155.627432] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 155.637047] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 155.646567] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 06:11:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 06:11:28 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x82d}}, 0x30) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x3fecd9fe9b788280}, 0x0, 0x0, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = open(0x0, 0x68042, 0x0) write$P9_RSTATu(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x26) fallocate(r6, 0x24, 0xfffffffeffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, 0x9}, 0xe) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001700)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f0000000100)) lstat(0x0, &(0x7f00000002c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r0, 0x126) r7 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) [ 155.667779] EXT4-fs error (device loop3): ext4_iget:4712: inode #2: comm syz-executor.3: root inode unallocated [ 155.679709] EXT4-fs (loop3): get root inode failed [ 155.718985] EXT4-fs (loop3): mount failed [ 155.894461] audit: type=1400 audit(1573539088.505:50): avc: denied { name_bind } for pid=7619 comm="syz-executor.4" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 155.918332] audit: type=1400 audit(1573539088.505:51): avc: denied { name_connect } for pid=7631 comm="syz-executor.4" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 155.943216] audit: type=1400 audit(1573539088.525:52): avc: denied { node_bind } for pid=7619 comm="syz-executor.4" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 156.265401] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 156.274615] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 156.283810] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 156.293862] EXT4-fs error (device loop3): ext4_iget:4712: inode #2: comm syz-executor.3: root inode unallocated [ 156.304906] EXT4-fs (loop3): get root inode failed [ 156.309865] EXT4-fs (loop3): mount failed [ 157.111061] Bluetooth: hci0 command 0x1003 tx timeout [ 157.116666] Bluetooth: hci0 sending frame failed (-49) [ 159.192473] Bluetooth: hci0 command 0x1001 tx timeout [ 159.197912] Bluetooth: hci0 sending frame failed (-49) [ 161.270241] Bluetooth: hci0 command 0x1009 tx timeout [ 165.595727] ================================================================== [ 165.603381] BUG: KASAN: use-after-free in kfree_skb+0x2e9/0x340 [ 165.609427] Read of size 4 at addr ffff88809ba1f8a4 by task syz-executor.2/7562 [ 165.616851] [ 165.618466] CPU: 0 PID: 7562 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 165.625371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.634828] Call Trace: [ 165.637411] dump_stack+0x138/0x197 [ 165.641023] ? kfree_skb+0x2e9/0x340 [ 165.644731] print_address_description.cold+0x7c/0x1dc [ 165.650146] ? kfree_skb+0x2e9/0x340 [ 165.653842] kasan_report.cold+0xa9/0x2af [ 165.657970] __asan_report_load4_noabort+0x14/0x20 [ 165.663088] kfree_skb+0x2e9/0x340 [ 165.666639] bcsp_close+0xc7/0x130 [ 165.670206] hci_uart_tty_close+0x1cb/0x230 [ 165.674533] ? hci_uart_close+0x50/0x50 [ 165.678493] tty_ldisc_close.isra.0+0x99/0xd0 [ 165.682969] tty_ldisc_kill+0x4b/0xc0 [ 165.686752] tty_ldisc_release+0xb6/0x230 [ 165.690885] tty_release_struct+0x1b/0x50 [ 165.695017] tty_release+0xaa3/0xd60 [ 165.698720] ? put_tty_driver+0x20/0x20 [ 165.702690] __fput+0x275/0x7a0 [ 165.705952] ____fput+0x16/0x20 [ 165.709214] task_work_run+0x114/0x190 [ 165.713087] exit_to_usermode_loop+0x1da/0x220 [ 165.718605] do_syscall_64+0x4bc/0x640 [ 165.722472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.727310] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 165.732480] RIP: 0033:0x413db1 [ 165.735735] RSP: 002b:00007ffffed0aac0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 165.743423] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 [ 165.750760] RDX: 0000001b31020000 RSI: 0000000000000989 RDI: 0000000000000003 [ 165.758159] RBP: 0000000000000001 R08: 000000006f7aa989 R09: 000000006f7aa98d [ 165.765419] R10: 00007ffffed0aba0 R11: 0000000000000293 R12: 000000000075c9a0 [ 165.772691] R13: 000000000075c9a0 R14: 0000000000761350 R15: 000000000075bfd4 [ 165.780057] [ 165.781669] Allocated by task 7309: [ 165.785280] save_stack_trace+0x16/0x20 [ 165.789266] save_stack+0x45/0xd0 [ 165.792701] kasan_kmalloc+0xce/0xf0 [ 165.796392] kasan_slab_alloc+0xf/0x20 [ 165.800262] kmem_cache_alloc_node+0x144/0x780 [ 165.804821] __alloc_skb+0x9c/0x500 [ 165.808434] bcsp_recv+0x38a/0x1450 [ 165.812048] hci_uart_tty_receive+0x1f4/0x4d0 [ 165.816525] tty_ldisc_receive_buf+0x14d/0x1a0 [ 165.821095] tty_port_default_receive_buf+0x73/0xa0 [ 165.826087] flush_to_ldisc+0x1ec/0x400 [ 165.830299] process_one_work+0x863/0x1600 [ 165.834522] worker_thread+0x5d9/0x1050 [ 165.838477] kthread+0x319/0x430 [ 165.841824] ret_from_fork+0x24/0x30 [ 165.845533] [ 165.847158] Freed by task 7309: [ 165.850422] save_stack_trace+0x16/0x20 [ 165.854375] save_stack+0x45/0xd0 [ 165.857977] kasan_slab_free+0x75/0xc0 [ 165.861856] kmem_cache_free+0x83/0x2b0 [ 165.865816] kfree_skbmem+0xac/0x120 [ 165.869516] kfree_skb+0xbd/0x340 [ 165.872957] bcsp_recv+0x28c/0x1450 [ 165.876593] hci_uart_tty_receive+0x1f4/0x4d0 [ 165.881072] tty_ldisc_receive_buf+0x14d/0x1a0 [ 165.885642] tty_port_default_receive_buf+0x73/0xa0 [ 165.890692] flush_to_ldisc+0x1ec/0x400 [ 165.894651] process_one_work+0x863/0x1600 [ 165.898871] worker_thread+0x5d9/0x1050 [ 165.902824] kthread+0x319/0x430 [ 165.906170] ret_from_fork+0x24/0x30 [ 165.909860] [ 165.911467] The buggy address belongs to the object at ffff88809ba1f7c0 [ 165.911467] which belongs to the cache skbuff_head_cache of size 232 [ 165.924629] The buggy address is located 228 bytes inside of [ 165.924629] 232-byte region [ffff88809ba1f7c0, ffff88809ba1f8a8) [ 165.936479] The buggy address belongs to the page: [ 165.941386] page:ffffea00026e87c0 count:1 mapcount:0 mapping:ffff88809ba1f040 index:0xffff88809ba1fe00 [ 165.950820] flags: 0x1fffc0000000100(slab) [ 165.955044] raw: 01fffc0000000100 ffff88809ba1f040 ffff88809ba1fe00 0000000100000004 [ 165.962910] raw: ffffea00029bd2a0 ffffea0002966c20 ffff8880a9e82d80 0000000000000000 [ 165.970831] page dumped because: kasan: bad access detected [ 165.976652] [ 165.978269] Memory state around the buggy address: [ 165.983210] ffff88809ba1f780: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 165.990576] ffff88809ba1f800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.997924] >ffff88809ba1f880: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 166.005280] ^ [ 166.009677] ffff88809ba1f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.017019] ffff88809ba1f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 166.024366] ================================================================== [ 166.031716] Disabling lock debugging due to kernel taint [ 166.040502] Kernel panic - not syncing: panic_on_warn set ... [ 166.040502] [ 166.048032] CPU: 0 PID: 7562 Comm: syz-executor.2 Tainted: G B 4.14.153 #0 [ 166.056194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.065538] Call Trace: [ 166.068116] dump_stack+0x138/0x197 [ 166.071734] ? kfree_skb+0x2e9/0x340 [ 166.075424] panic+0x1f9/0x42d [ 166.078603] ? add_taint.cold+0x16/0x16 [ 166.082575] ? ___preempt_schedule+0x16/0x18 [ 166.086974] kasan_end_report+0x47/0x4f [ 166.090934] kasan_report.cold+0x130/0x2af [ 166.095233] __asan_report_load4_noabort+0x14/0x20 [ 166.100137] kfree_skb+0x2e9/0x340 [ 166.103658] bcsp_close+0xc7/0x130 [ 166.107183] hci_uart_tty_close+0x1cb/0x230 [ 166.111489] ? hci_uart_close+0x50/0x50 [ 166.115441] tty_ldisc_close.isra.0+0x99/0xd0 [ 166.119922] tty_ldisc_kill+0x4b/0xc0 [ 166.123710] tty_ldisc_release+0xb6/0x230 [ 166.127833] tty_release_struct+0x1b/0x50 [ 166.131974] tty_release+0xaa3/0xd60 [ 166.135683] ? put_tty_driver+0x20/0x20 [ 166.139665] __fput+0x275/0x7a0 [ 166.142932] ____fput+0x16/0x20 [ 166.146189] task_work_run+0x114/0x190 [ 166.150057] exit_to_usermode_loop+0x1da/0x220 [ 166.154625] do_syscall_64+0x4bc/0x640 [ 166.158485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.163312] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 166.168685] RIP: 0033:0x413db1 [ 166.171851] RSP: 002b:00007ffffed0aac0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 166.181964] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 [ 166.189217] RDX: 0000001b31020000 RSI: 0000000000000989 RDI: 0000000000000003 [ 166.196462] RBP: 0000000000000001 R08: 000000006f7aa989 R09: 000000006f7aa98d [ 166.203710] R10: 00007ffffed0aba0 R11: 0000000000000293 R12: 000000000075c9a0 [ 166.210956] R13: 000000000075c9a0 R14: 0000000000761350 R15: 000000000075bfd4 [ 166.219968] Kernel Offset: disabled [ 166.223644] Rebooting in 86400 seconds..