[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 63.514102][ T8617] restorecond (8617) used greatest stack depth: 22920 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 66.800763][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 66.800777][ T26] audit: type=1400 audit(1569672469.353:65): avc: denied { map } for pid=8707 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. 2019/09/28 12:07:55 fuzzer started [ 73.316822][ T26] audit: type=1400 audit(1569672475.873:66): avc: denied { map } for pid=8716 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16500 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/28 12:07:57 dialing manager at 10.128.0.26:32847 2019/09/28 12:07:57 syscalls: 2519 2019/09/28 12:07:57 code coverage: enabled 2019/09/28 12:07:57 comparison tracing: enabled 2019/09/28 12:07:57 extra coverage: extra coverage is not supported by the kernel 2019/09/28 12:07:57 setuid sandbox: enabled 2019/09/28 12:07:57 namespace sandbox: enabled 2019/09/28 12:07:57 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/28 12:07:57 fault injection: enabled 2019/09/28 12:07:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/28 12:07:57 net packet injection: enabled 2019/09/28 12:07:57 net device setup: enabled 12:10:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) [ 226.893144][ T26] audit: type=1400 audit(1569672629.453:67): avc: denied { map } for pid=8732 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=71 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 227.043405][ T8733] IPVS: ftp: loaded support on port[0] = 21 12:10:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 227.202195][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 227.242118][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.249797][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.273411][ T8733] device bridge_slave_0 entered promiscuous mode [ 227.282504][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.289635][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.299096][ T8733] device bridge_slave_1 entered promiscuous mode [ 227.320584][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 227.327022][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.339265][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.366546][ T8733] team0: Port device team_slave_0 added [ 227.376775][ T8733] team0: Port device team_slave_1 added 12:10:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 227.456318][ T26] audit: type=1400 audit(1569672630.013:68): avc: denied { map } for pid=8716 comm="syz-fuzzer" path="/root/syzkaller-shm615380559" dev="sda1" ino=16520 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 227.512566][ T8733] device hsr_slave_0 entered promiscuous mode [ 227.562589][ T8733] device hsr_slave_1 entered promiscuous mode [ 227.641546][ T8738] IPVS: ftp: loaded support on port[0] = 21 [ 227.667012][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.674436][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.682333][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state 12:10:30 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 227.689410][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.826524][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 227.857206][ T8741] IPVS: ftp: loaded support on port[0] = 21 [ 227.889898][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.897968][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.906578][ T8736] device bridge_slave_0 entered promiscuous mode [ 227.927098][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.934540][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.943041][ T8736] device bridge_slave_1 entered promiscuous mode 12:10:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$dspn(0x0, 0x0, 0x280a02) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) [ 228.026812][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.043198][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.053759][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.096961][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.164611][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.181748][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.202071][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.210994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 228.227098][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 228.243094][ T8736] team0: Port device team_slave_0 added [ 228.259851][ T8746] IPVS: ftp: loaded support on port[0] = 21 [ 228.268434][ T8736] team0: Port device team_slave_1 added [ 228.295815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.310482][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.320163][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.327294][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.337013][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.346046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.354960][ T22] bridge0: port 2(bridge_slave_1) entered blocking state 12:10:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)}, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000380)) r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) [ 228.362076][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.376530][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.430061][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.444179][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.455650][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.500482][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.518790][ T8750] IPVS: ftp: loaded support on port[0] = 21 [ 228.563127][ T8736] device hsr_slave_0 entered promiscuous mode [ 228.622220][ T8736] device hsr_slave_1 entered promiscuous mode [ 228.681418][ T8736] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.693729][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.702277][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.710874][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 228.745842][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.755173][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.789241][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.797550][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.806621][ T8738] device bridge_slave_0 entered promiscuous mode [ 228.817405][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.824865][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.832936][ T8738] device bridge_slave_1 entered promiscuous mode [ 228.842087][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.850388][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.884114][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.891918][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.899623][ T8741] device bridge_slave_0 entered promiscuous mode [ 228.907410][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.914595][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.923647][ T8741] device bridge_slave_1 entered promiscuous mode [ 228.945791][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.975331][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.003138][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.014444][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.082389][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.110337][ T8741] team0: Port device team_slave_0 added [ 229.127672][ T8738] team0: Port device team_slave_0 added [ 229.136994][ T8738] team0: Port device team_slave_1 added [ 229.144450][ T8741] team0: Port device team_slave_1 added [ 229.150277][ T8750] chnl_net:caif_netlink_parms(): no params data found [ 229.273110][ T8738] device hsr_slave_0 entered promiscuous mode [ 229.321885][ T8738] device hsr_slave_1 entered promiscuous mode [ 229.381299][ T8738] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.392708][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.409063][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.447241][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 229.514482][ T8741] device hsr_slave_0 entered promiscuous mode [ 229.571897][ T8741] device hsr_slave_1 entered promiscuous mode [ 229.621389][ T8741] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.642313][ T26] audit: type=1400 audit(1569672632.203:69): avc: denied { associate } for pid=8733 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 229.676022][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.683693][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.690757][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.706330][ T8750] device bridge_slave_0 entered promiscuous mode [ 229.724205][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.736049][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.746084][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.762527][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.769611][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.778291][ T8750] device bridge_slave_1 entered promiscuous mode [ 229.799235][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.828549][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.844751][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.870871][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.878054][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.891745][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.903793][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.926674][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.938248][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.946349][ T8746] device bridge_slave_0 entered promiscuous mode [ 229.956504][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.964045][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.972430][ T8746] device bridge_slave_1 entered promiscuous mode [ 229.997398][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.012330][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.027119][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.034258][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.076907][ T8736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.096793][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.124088][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.137769][ T8750] team0: Port device team_slave_0 added [ 230.146386][ T8750] team0: Port device team_slave_1 added [ 230.164153][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:10:32 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 230.175552][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.190107][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.200374][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.222805][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.242723][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.257549][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.266363][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 12:10:32 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x16, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 230.281794][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.290625][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.306708][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.317400][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 12:10:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffffffffffff67, 0x0}) [ 230.335573][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.346149][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.357742][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.388677][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.424402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.435272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.443793][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.450849][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.461940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.470471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.479320][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.486419][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.494916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 12:10:33 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffff8, 0x0, 0xfa, 0xffffffffffffffff}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 230.554750][ T8750] device hsr_slave_0 entered promiscuous mode [ 230.591677][ T8750] device hsr_slave_1 entered promiscuous mode [ 230.651522][ T8750] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.671102][ T8746] team0: Port device team_slave_0 added [ 230.680536][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.688366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.696774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.721538][ T8746] team0: Port device team_slave_1 added [ 230.770612][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.780313][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.789443][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.844559][ T8746] device hsr_slave_0 entered promiscuous mode [ 230.891775][ T8746] device hsr_slave_1 entered promiscuous mode [ 230.931437][ T8746] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.940341][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.949626][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.958385][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.966834][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.975504][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.984319][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.995952][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.075423][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.084366][ C0] hrtimer: interrupt took 25375 ns [ 231.103954][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.163857][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.178743][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.187024][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.229063][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.239186][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.248457][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.255622][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.316246][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.332757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.350787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.372437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.388298][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.395480][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.411063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.420430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.443276][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 12:10:34 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 231.478607][ T8750] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.501077][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.518463][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.538578][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.550885][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.566393][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.578159][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 12:10:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000010028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') syz_open_procfs(r1, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480), 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$int_in(0xffffffffffffffff, 0x5f92917ebb8de723, &(0x7f00000003c0)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x6, 0x103002) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0xc, 0x3}, 0x14) sync_file_range(r4, 0x5, 0x8, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_getevents(r5, 0x4b593f7, 0x0, 0x0, 0x0) [ 231.593600][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.624537][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:10:34 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000200081ae00060c00000f000002000000000000018701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) [ 231.642057][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.657500][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.673596][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.698899][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.707086][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.722246][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.730746][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.737877][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.748823][ T8811] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.779416][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.792050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.799938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.814271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.827241][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.834389][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.842493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.850347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.894678][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.904936][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.923189][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 12:10:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:10:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0xe, &(0x7f0000000040)=""/74) [ 231.939898][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.947061][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.969368][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.989708][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.011582][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.018742][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.027127][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.036211][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.045705][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.055648][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.068883][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.078406][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.094267][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.103811][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.113122][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.122249][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.130845][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.141935][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.160199][ T8750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.177171][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.208939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.234014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.266879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.285632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.294352][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.303079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.321731][ T8746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.332464][ T8746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.350102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.359157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.368225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.376885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.385891][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.423120][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.431748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.485970][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 12:10:35 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:10:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0xe, &(0x7f0000000040)=""/74) 12:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:10:35 executing program 5: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) io_setup(0x40000100000001, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 12:10:36 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:36 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffff8, 0x0, 0xfa, 0xffffffffffffffff}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:10:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 12:10:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x7ffd, 0x8000) fallocate(r1, 0x3, 0x0, 0xfff9) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x198) accept$netrom(r1, &(0x7f0000000080)={{}, [@null, @null, @null, @rose, @rose, @rose, @bcast, @default]}, &(0x7f0000000180)=0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0xfec096c7a2213591, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x8122) fallocate(r0, 0x0, 0x7ffd, 0x8000) fallocate(r0, 0x3, 0x0, 0xfff9) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xfffffffffffff000, 0x40004) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1020101}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x10000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80d4) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x198) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffbe, 0x200087f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x232) 12:10:36 executing program 2: connect(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/userio\x00', 0x4000, 0x0) lchown(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) getegid() setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 12:10:36 executing program 5: open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getown(r0, 0x9) 12:10:36 executing program 4: [ 234.240570][ T26] audit: type=1400 audit(1569672636.783:70): avc: denied { create } for pid=8892 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:10:37 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:37 executing program 1: 12:10:37 executing program 5: 12:10:37 executing program 2: 12:10:37 executing program 4: 12:10:37 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 12:10:39 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffff8, 0x0, 0xfa, 0xffffffffffffffff}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:10:39 executing program 5: 12:10:39 executing program 4: 12:10:39 executing program 2: 12:10:39 executing program 1: 12:10:39 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:39 executing program 4: 12:10:39 executing program 5: 12:10:39 executing program 2: 12:10:39 executing program 1: 12:10:39 executing program 1: 12:10:39 executing program 5: 12:10:42 executing program 0: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffff8, 0x0, 0xfa, 0xffffffffffffffff}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:10:42 executing program 4: 12:10:42 executing program 2: 12:10:42 executing program 5: 12:10:42 executing program 1: 12:10:42 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:42 executing program 5: 12:10:42 executing program 1: 12:10:42 executing program 4: 12:10:42 executing program 2: 12:10:42 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 12:10:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 12:10:45 executing program 0: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0x80) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x2a0a55c20b78fb6f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) rt_sigsuspend(0x0, 0xffffff87) accept$packet(r1, &(0x7f0000000000), &(0x7f0000000080)=0x14) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000180)={0x9, 0x4, 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000200)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/72, 0x48}], 0x2, &(0x7f00000003c0)=""/205, 0xcd}, 0x40000002) r4 = accept4(r0, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r4, &(0x7f0000000040)="789327dcf17bc3e8394ec10e0fd060b46f56aa3388a720fb988858ccbe598e5d11", 0xfffffffffffffd24, 0x0, 0x0, 0x0) 12:10:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x84053, r0, 0x0) 12:10:45 executing program 1: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 12:10:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135) getdents(r2, &(0x7f0000000100)=""/92, 0x35b) 12:10:45 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) [ 242.927745][ T8989] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.945887][ T26] audit: type=1400 audit(1569672645.503:71): avc: denied { map } for pid=8987 comm="syz-executor.5" path="socket:[31845]" dev="sockfs" ino=31845 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 12:10:45 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df250100000008000400c00000000800040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000100}, 0x4008040) r2 = socket$inet6(0xa, 0x4, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000005000000000c001a000800020003000400"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 243.165775][ T26] audit: type=1400 audit(1569672645.723:72): avc: denied { write } for pid=9008 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:10:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) fdatasync(r0) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r1, 0x409, 0x8) r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r2, 0x409, 0x8) r3 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r3, 0x409, 0x8) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000dc0)={0x9, &(0x7f0000000000)=""/25, &(0x7f0000000cc0)=[{0x1dc3, 0x7e, 0x5, &(0x7f0000000140)=""/126}, {0x8, 0x83, 0x3ff, &(0x7f0000000340)=""/131}, {0x4, 0x69, 0x0, &(0x7f0000000280)=""/105}, {0x0, 0x7d, 0x5, &(0x7f0000000a00)=""/125}, {0x40, 0x82, 0x2, &(0x7f0000000a80)=""/130}, {0x1f, 0xd, 0x3, &(0x7f0000000040)=""/13}, {0x4, 0x50, 0x3f, &(0x7f0000000b40)=""/80}, {0x6, 0xd, 0x948c, &(0x7f0000000bc0)=""/13}, {0x2b0e, 0x96, 0x1, &(0x7f0000000c00)=""/150}]}) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x1511c2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r5, 0x409, 0x8) fstat(r5, &(0x7f0000000200)) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x551}], 0x1) [ 243.289220][ T26] audit: type=1400 audit(1569672645.763:73): avc: denied { read } for pid=9008 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:10:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) restart_syscall() getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 12:10:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x3e4ae4293dced043, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000001c0)='\xfe&\xff\x93\xffs\xcaw\xf6kW;\xb4\x04\xd4 -\x80,bu!\xd5\v\x13\xecVJ\x83\x9e\xd3\xe4\x1c\xd23\x92%\x97\x8f\x82\xb0\xcfPc\xe4_\x11J\x13\x0fi\x10\xea\x82^\xb5\xe2\xd6x\x13]f\xa9\xc0\xb3h\xbc\xfey0o\x8b\x7f!lG\xab@\x1eN\xaa\xe76\x82A\xd6H\xcf\xa6\xb2n\xbf\xe9\x04\xeb\x7f\x9c\x81\x14\xaf`\xabU\x00lW\xfa_X\xca\xba\x81\x90W\xbf#\xd1\xdf\xaa\xfdf\xdaL\xce\xd6\x1f@\xec,\xae\x17\xa6V\xbf^\x16\x8c\xdcp\xa56\xdbd\v\xd5\xe7{\xc5\xc0\xe7lk\xec\xd0\xbfi\x9b\x93xr\xe6\xa9\xf9\xf0bd\xc6\xf4\x87\xcc\xf3\xd0\xc9,\xf7R\x97\x03\xb3.\x8e7\xe1\x88\xea{\x9e=\x0e\xc4\x11\x96\xf3?\xe1\xb1\xe3\xab\xca^T\x90\'\'<\'49\xf3\xc8\x89n4\xb9.\xf2\x8a\xf9\x03]\xd7\xc3\xb4Q\x92l\xcc\xc3\xf7\x9bS\x1a\x98\f\x96t\xb5\x1anV\xdd~\x93Z\x12\b2\xa9\x01\xe6\xa0\xf6~-\xaf\xb4\xea\x17\x7f\xb4\xb0r$\x9b\xf5\x1c\x9d\xc7\xe3\xdb\x01\xa5\x90\xf6X\rOq\xa3g\xc9\x1e\x93l\x116h\xafM\xf6\xe864\xc9/\xcd\x95\xca\xd8\x85\xc4\x8f\x0e)\xa8\xca\xe4v\x94\xee\xdd*', 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='attr/keycreate\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 243.606880][ T9030] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 243.616561][ T9030] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9030, name: syz-executor.1 [ 243.626015][ T9030] 2 locks held by syz-executor.1/9030: [ 243.631518][ T9030] #0: ffffffff899951e0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 243.640468][ T9030] #1: ffff888089182bc0 (&(&sch->q.lock)->rlock){+...}, at: sfb_change+0x257/0xe90 [ 243.649894][ T9030] Preemption disabled at: [ 243.649918][ T9030] [] sfb_change+0x257/0xe90 [ 243.660380][ T9030] CPU: 0 PID: 9030 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 243.667844][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.678169][ T9030] Call Trace: [ 243.681545][ T9030] dump_stack+0x172/0x1f0 [ 243.685893][ T9030] ? sfb_change+0x257/0xe90 [ 243.690406][ T9030] ___might_sleep.cold+0x1fb/0x23e [ 243.695533][ T9030] __might_sleep+0x95/0x190 [ 243.700107][ T9030] __mutex_lock+0xc5/0x13c0 [ 243.704693][ T9030] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 243.711380][ T9030] ? save_stack+0x5c/0x90 [ 243.715712][ T9030] ? save_stack+0x23/0x90 [ 243.720047][ T9030] ? mutex_trylock+0x2d0/0x2d0 [ 243.724820][ T9030] ? fifo_set_limit+0x1a9/0x210 [ 243.729670][ T9030] ? fifo_create_dflt+0x90/0xf0 [ 243.734560][ T9030] ? sfb_change+0x18d/0xe90 [ 243.739084][ T9030] ? tc_modify_qdisc+0xfcf/0x1c50 [ 243.744117][ T9030] ? rtnetlink_rcv_msg+0x463/0xb00 [ 243.749286][ T9030] ? netlink_rcv_skb+0x177/0x450 [ 243.754230][ T9030] ? rtnetlink_rcv+0x1d/0x30 [ 243.758829][ T9030] ? netlink_unicast+0x531/0x710 [ 243.763782][ T9030] ? netlink_sendmsg+0x8a5/0xd60 [ 243.768779][ T9030] ? sock_sendmsg+0xd7/0x130 [ 243.773375][ T9030] ? ___sys_sendmsg+0x803/0x920 [ 243.778232][ T9030] ? __sys_sendmsg+0x105/0x1d0 [ 243.783005][ T9030] ? __x64_sys_sendmsg+0x78/0xb0 [ 243.787950][ T9030] ? do_syscall_64+0xfa/0x760 [ 243.792631][ T9030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.798704][ T9030] ? __kasan_check_read+0x11/0x20 [ 243.803731][ T9030] ? mark_lock+0xc2/0x1220 [ 243.808154][ T9030] mutex_lock_nested+0x16/0x20 [ 243.812927][ T9030] ? mutex_lock_nested+0x16/0x20 [ 243.817889][ T9030] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 243.824399][ T9030] ? __kasan_check_read+0x11/0x20 [ 243.829433][ T9030] ? mark_lock+0xc2/0x1220 [ 243.833857][ T9030] tcf_block_put_ext.part.0+0x2a/0x80 [ 243.839234][ T9030] tcf_block_put+0xbf/0x110 [ 243.843744][ T9030] ? tcf_block_put_ext+0x40/0x40 [ 243.848693][ T9030] ? sfb_destroy+0x80/0x80 [ 243.853123][ T9030] ? sfb_destroy+0x80/0x80 [ 243.857549][ T9030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.863801][ T9030] ? prandom_u32+0x7d/0xb0 [ 243.868231][ T9030] ? sfb_zero_all_buckets+0x20/0x20 [ 243.873440][ T9030] sfb_destroy+0x37/0x80 [ 243.877697][ T9030] qdisc_destroy+0x11f/0x630 [ 243.882306][ T9030] qdisc_put+0x85/0xa0 [ 243.886381][ T9030] sfb_change+0x3d8/0xe90 [ 243.890722][ T9030] ? sfb_graft+0x5f0/0x5f0 [ 243.895416][ T9030] ? nla_strcmp+0xe3/0x120 [ 243.899844][ T9030] ? sfb_graft+0x5f0/0x5f0 [ 243.904279][ T9030] tc_modify_qdisc+0xfcf/0x1c50 [ 243.909146][ T9030] ? qdisc_create+0x1210/0x1210 [ 243.914022][ T9030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.920277][ T9030] ? qdisc_create+0x1210/0x1210 [ 243.925136][ T9030] rtnetlink_rcv_msg+0x463/0xb00 [ 243.930098][ T9030] ? rtnl_bridge_getlink+0x910/0x910 [ 243.935488][ T9030] ? netlink_deliver_tap+0x22d/0xbf0 [ 243.940791][ T9030] ? find_held_lock+0x35/0x130 [ 243.945573][ T9030] netlink_rcv_skb+0x177/0x450 [ 243.950344][ T9030] ? rtnl_bridge_getlink+0x910/0x910 [ 243.955640][ T9030] ? netlink_ack+0xb50/0xb50 [ 243.960237][ T9030] ? __kasan_check_read+0x11/0x20 [ 243.965275][ T9030] ? netlink_deliver_tap+0x254/0xbf0 [ 243.970571][ T9030] rtnetlink_rcv+0x1d/0x30 [ 243.974990][ T9030] netlink_unicast+0x531/0x710 [ 243.979766][ T9030] ? netlink_attachskb+0x7c0/0x7c0 [ 243.984863][ T9030] ? _copy_from_iter_full+0x25d/0x8c0 [ 243.984901][ T9030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.984920][ T9030] netlink_sendmsg+0x8a5/0xd60 [ 243.984939][ T9030] ? netlink_unicast+0x710/0x710 [ 244.006306][ T9030] ? tomoyo_socket_sendmsg+0x26/0x30 [ 244.011604][ T9030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.017856][ T9030] ? security_socket_sendmsg+0x8d/0xc0 [ 244.023328][ T9030] ? netlink_unicast+0x710/0x710 [ 244.028292][ T9030] sock_sendmsg+0xd7/0x130 [ 244.032699][ T9030] ___sys_sendmsg+0x803/0x920 [ 244.032717][ T9030] ? copy_msghdr_from_user+0x440/0x440 [ 244.032742][ T9030] ? __kasan_check_read+0x11/0x20 [ 244.047859][ T9030] ? __fget+0x384/0x560 [ 244.052044][ T9030] ? ksys_dup3+0x3e0/0x3e0 [ 244.056481][ T9030] ? __fget_light+0x1a9/0x230 [ 244.061173][ T9030] ? __fdget+0x1b/0x20 [ 244.065255][ T9030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.071509][ T9030] __sys_sendmsg+0x105/0x1d0 [ 244.076112][ T9030] ? __sys_sendmsg_sock+0xd0/0xd0 [ 244.081163][ T9030] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 244.086625][ T9030] ? do_syscall_64+0x26/0x760 [ 244.091317][ T9030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.097402][ T9030] ? do_syscall_64+0x26/0x760 [ 244.102092][ T9030] __x64_sys_sendmsg+0x78/0xb0 [ 244.106900][ T9030] do_syscall_64+0xfa/0x760 [ 244.111416][ T9030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.117313][ T9030] RIP: 0033:0x459a29 [ 244.121225][ T9030] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.140839][ T9030] RSP: 002b:00007f91ccf1dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.149253][ T9030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 12:10:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 12:10:46 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000150600000fff07006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000400f9ffbd340100000000009500000000000000050000000000000095000000000c4a9a5be3fd8cf8000000a54302610000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = semget(0x0, 0x0, 0x10) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000040)=""/145) 12:10:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1000, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x36cc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9ad1e977240000002300290800000000000000dd13000100100000003f252f696a5c5f74"], 0x24}, 0x1, 0x1c689}, 0x0) 12:10:46 executing program 5: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="6046be8c352a98bde11ae2eb031a6ae8663b3c5636a7190387d08a34ef1627e84864a66a7b7ad2c095f46c4ebedb649e6c35fbf1adc59d3eae68887430e991b2d4fc0adda203d191b3a0cd1cdf793dc708f90a0e5987e4886938d23a55082845591579064c34c7958939f51ccafa7b6992c593cf5c6dde4dd674bf919853576ac3ece3152432656fb52dbcf0fb0c47", 0x8f) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff97, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000000500050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008002900510d0000e3f243edd2d4be19d167176e79738f292b0526903c1d94efd816b02f2f3aad244dd0f64db226928cd7547559b0ea8f786c2056c493aa56bb0e6bd9c64a064651ed7e957e46c4a785cfb8543cbff300a46361b42cec9e02485bc06c1f5525d63da581b66e80969521eda0bc602e91a35a72da4dda4a5824be28332401eb7de319a30c29bbcc676bfd649b79f0636f7dbd3122525e6d299fbd2e362354fb51827ec9b9f5d21e5a0e9375dfbc7e55830d4eb3a9e3eb66925a485427f5a30be219c1e9302ceb8cdfd011a85ea8481c2570844ba56b543e08a3a06357bf476afb5ad873ebebb034cd"], 0x3c}}, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x402, 0x400) [ 244.157335][ T9030] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 244.165340][ T9030] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 244.173319][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91ccf1e6d4 [ 244.181305][ T9030] R13: 00000000004c7979 R14: 00000000004dd398 R15: 00000000ffffffff [ 244.237283][ T9059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pig=9059 comm=syz-executor.5 12:10:46 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x80, 0xfb96ed89d0e59530, 0xba, &(0x7f0000ffc000/0x3000)=nil, 0x2}) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x4000000, 0x0, 0x0) [ 244.358093][ T9063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pig=9063 comm=syz-executor.5 [ 244.371708][ T26] audit: type=1400 audit(1569672646.933:74): avc: denied { prog_load } for pid=9065 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:10:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2e0100, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0x0, 0x20, 0x6}, 0x6) 12:10:47 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) write$cgroup_pid(r0, &(0x7f0000000440)=r2, 0x12) creat(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_GET_SECUREBITS(0x1b) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x9, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f04a86f2e6f320813002bbfc9360bbbf05ab056504e959244b6f9b440b8daeaa7e77850ffa8c760b3ff2af13ae9b4946442212f551a73bf8e4d8e186115155741420b55c3dce5152da6adccc6c79bb217339a60ce4b422d44f68add936c284807b28b7417314e3b4f7f7437c8b4a0ca7f1ee32df285b66ea494997e51b7f5c6946782c92256fa3ed4c5", @ANYRES16=r4, @ANYBLOB="11000000000000000000150000001c000100180001000374663a626f"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d4010000", @ANYBLOB="07000000580004001400010062726f6164636173742d6c696e6b00002c0007000800030005000000080003000d510000080001000c0000000800040001000000080001000c49638c21000000140007000800030006000000080001001d0000002c0005000c00020008000100180000001c000200080004008a0d0000080003000400000008000100200000003c00040014000700080002000700000008000100130000000c00010073797a30000000000c00010073797a31000000000c00010073797a310000000038000200080001000180000008000200810000000800020000300000080001000900000008000100080000000400040008000200ffff0000a80004000c00010073797a3100000000140007000800040080000000080001000c00000014000700080001000800000008000200040000000c00070008000400ffffffff4c0007000800020009000000080001000a00000008000300a60000000800030005000000080001001e003d140000080001000100000008000300fffbffff08000200ceda000008000400030000000c00070008000200080000000c00010073797a30000000002000020008000100060000000800020000040000080002000800000000000036446b5228368c8c2951b751684ef850e013ea3591364d6513a64247d7834efb0fcad4eab8f9a557398c2ae5af668822d0be18ae19c2e26fa90a8db040b70ab57fc4af9f89361bc82ff4259b366b11b56ed189b7d0cb5344862afb924ee78aa5f358d553c7a2dcf4df3c448523d401d330da6eb27b797d8d2a0c027fe54d086d5080a7abb29209957a1bd7f6e81f38a1e39872c3508b8d894f9ad4a818d90cd22e0c62ded3c4c07fef82d34cb740b0ca32c4667e4ba9b945547c1723a9a7d824cf5bc86154918d25fb28b971199e7c6310ed956723af226103739154481239813eac788dfc32c0f51295c98da4f2bc2b"], 0x2}, 0x1, 0x0, 0x0, 0x8}, 0x80) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x8}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r5, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={0x2d8, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xe4}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfff, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd14, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x89f, @mcast1, 0x51}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x80840}, 0x881) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) link(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600)="0e0b27f588388279c8994370b602a31e8a8c91d21e485b9fbc8eb21bcaa2c3c76cc8eeb4e5a27a4490266f3828145eead532e5464a93f9219bfb3df1a1a8e272075a26e00fed383c8aaea0da70e33e03a8420af50297473e02d27ae4a8dca848d7c67b1aa7a7045b07a3fc12e3359464fe97ba7816774d64f6ae91150af6144314a4a85f389885ef7ae410f0f055713485d6e204dcb121965161124f1c9bc2911680653ece865b30e1cd0059883c619717435aa61247ce77e2ea7c90c4e484725b189d4f2c3cdf73f7b9c84ca024edd5", 0xd0) 12:10:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400240) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x9800, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0xe4ffffff}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 12:10:47 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x101100, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) 12:10:47 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 244.989921][ T26] audit: type=1400 audit(1569672647.533:75): avc: denied { sys_admin } for pid=9075 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:10:47 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@afid={'afid', 0x3d, 0x101}}, {@aname={'aname', 0x3d, 'trans=fd,'}}, {@noextend='noextend'}, {@fscache='fscache'}, {@aname={'aname', 0x3d, 'overlay\x00'}}, {@posixacl='posixacl'}]}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000440)=r4) perf_event_open(0x0, r4, 0xf, r1, 0x8) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0xc050}, 0xc4090) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="08002cbd7200fddbdf250769420081000000ff010000"], 0x1c}}, 0x100) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000500)=0x2, 0x4) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000580)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 245.252739][ T26] audit: type=1400 audit(1569672647.813:76): avc: denied { prog_run } for pid=9077 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:10:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 12:10:47 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x101100, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) 12:10:47 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) write$cgroup_pid(r0, &(0x7f0000000440)=r2, 0x12) creat(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_GET_SECUREBITS(0x1b) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x9, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3f04a86f2e6f320813002bbfc9360bbbf05ab056504e959244b6f9b440b8daeaa7e77850ffa8c760b3ff2af13ae9b4946442212f551a73bf8e4d8e186115155741420b55c3dce5152da6adccc6c79bb217339a60ce4b422d44f68add936c284807b28b7417314e3b4f7f7437c8b4a0ca7f1ee32df285b66ea494997e51b7f5c6946782c92256fa3ed4c5", @ANYRES16=r4, @ANYBLOB="11000000000000000000150000001c000100180001000374663a626f"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d4010000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x8}, 0x80) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x8}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r5, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={0x2d8, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xe4}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfff, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd14, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x89f, @mcast1, 0x51}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x80840}, 0x881) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) link(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600)="0e0b27f588388279c8994370b602a31e8a8c91d21e485b9fbc8eb21bcaa2c3c76cc8eeb4e5a27a4490266f3828145eead532e5464a93f9219bfb3df1a1a8e272075a26e00fed383c8aaea0da70e33e03a8420af50297473e02d27ae4a8dca848d7c67b1aa7a7045b07a3fc12e3359464fe97ba7816774d64f6ae91150af6144314a4a85f389885ef7ae410f0f055713485d6e204dcb121965161124f1c9bc2911680653ece865b30e1cd0059883c619717435aa61247ce77e2ea7c90c4e484725b189d4f2c3cdf73f7b9c84ca024edd5", 0xd0) [ 245.442312][ T9095] overlayfs: workdir and upperdir must reside under the same mount [ 245.643427][ T9095] overlayfs: workdir and upperdir must reside under the same mount 12:10:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000440)=r4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="521370c5bfc4e3a5ab937e1836ca1739f006ca70d1b762cdf97fbc5e334e385ef6bde15f55c33ef60045cea71476b8b3b98336bc217c8285a650c71c60d08f7959dce1077e7109ceba05f99ff399649139cf89ea54cd6336a42bb0c026892c752da901f98128b354a96688df19168e6f319027e3d10a42296e56df723b3c5b913fc9cd02892cd5edfdf8a3cd3804f1e29c4c571e9caaa3684a704d185138125820413baa626f05ea4540849cd7623bf6737688f5b089a92bbaaff2dacbd44bfa8337a0", 0xc3) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000036c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000037c0)=0xe8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r7, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e24, @empty}}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x5, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', r6}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) getsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00001d00ffffffff00000000"], 0x24}}, 0x0) 12:10:48 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x1, 0x0, 0x3, 0x0, 0x3, 0x1c023, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x7, @perf_config_ext={0xb024, 0x4}, 0x80, 0x310, 0x0, 0x8, 0x1000, 0x4}, 0x0, 0x0, r0, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() socket$inet_tcp(0x2, 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 12:10:48 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:48 executing program 4: r0 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r2, 0x409, 0x8) dup2(r2, r0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='syz_tun\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000140)=0x81, 0x4) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) r5 = memfd_create(&(0x7f0000000200)='/dev/radio#\x00', 0xa) fcntl$addseals(r5, 0x409, 0x8) lseek(r5, 0x0, 0x0) write$selinux_create(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="d1797374656d5f753a6f626a6563745f723a73797374656d3a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6e2d636f8200726f6c2d35203030303030303030303030303030303332373637202e2f66696c653000"/109], 0x6d) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0xcda, 0x901) 12:10:48 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000240)={0x0, @motion_det}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'ip6_vti0\x00', 0x2}, 0x18) sendmsg$inet(r0, &(0x7f00000084c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704e0000002001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x0) 12:10:48 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x0, &(0x7f0000000080), 0x0) rt_sigpending(&(0x7f0000000280), 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xdc93b0e9192747e4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x2b, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)=""/43}, &(0x7f0000000180)=0x78) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000240)={0xfffffffffffffffc, 0x8}) sendfile(r2, r1, &(0x7f0000000200), 0xffffffffffffffff) 12:10:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000092d8) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000580)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x0, 0x100, 0xffffffff, 0x4}) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 12:10:48 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa9, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000900)='/dev/midi#\x00', 0x3, 0x18002) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fd4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ed}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x84b8486f5540a679}, 0x10) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xf35c1c8b4038bca8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cff030000e60e", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/51) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400000) 12:10:49 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sendmmsg$inet6(r2, &(0x7f0000003b40)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x400000000000063, 0x0) 12:10:49 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x4, 0x1009}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1d, 0x40000020, r0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000001c0)={@initdev, 0x0}, &(0x7f0000000240)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = openat$cgroup_type(r4, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x5) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x6, 0x6, 0xffffffff, 0x400}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) 12:10:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x6, 0xfffffff8, 0x0, 0x2, 0x6, 0x20, 0x4, 0xd13, 0x800, 0xfffffffe, 0x401, 0x8, 0x4, 0x2, 0x4, 0x1}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 246.626269][ T26] audit: type=1800 audit(1569672649.183:77): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16617 res=0 12:10:49 executing program 4: r0 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r2, 0x409, 0x8) dup2(r2, r0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='syz_tun\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000140)=0x81, 0x4) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) r5 = memfd_create(&(0x7f0000000200)='/dev/radio#\x00', 0xa) fcntl$addseals(r5, 0x409, 0x8) lseek(r5, 0x0, 0x0) write$selinux_create(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="d1797374656d5f753a6f626a6563745f723a73797374656d3a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6e2d636f8200726f6c2d35203030303030303030303030303030303332373637202e2f66696c653000"/109], 0x6d) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0xcda, 0x901) [ 246.878686][ T26] audit: type=1804 audit(1569672649.433:78): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir368573269/syzkaller.brKwbi/14/file0" dev="sda1" ino=16617 res=1 12:10:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x40, 0x1f, 0x1, 0xf8, 0x4, 0x1}, 0x2a}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 12:10:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000000c0)={{0x0, 0x0, @descriptor="d6be632830c289c7"}, 0xca, [], "0c52d81c5887cd7db67fa962e7627d96c05910a492718b54cb84c2c056e47cb889dea36caf9183906bf596e9609170831899fa7afcb22aa42ac15e01e29979145dfa7dca10dad915c0b718679e9fe1282fcdcc309b999bf0ba6c75868a9b72e9b201c7f20b853cf0885ab0433d05ce9e3cac475399f08ebaa021f364bbb4c5c56e104919da46d78d5b030307fa5aa92057dc216c678725b47ae643c6e0ce14518090f10ea8ecd8e0255609f4be3f2595c3c68888c6f2dab9e89330ce029b597f4b84f640c4f7a199e38d"}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x81) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x400001, 0x84242) [ 246.993761][ T26] audit: type=1804 audit(1569672649.433:79): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir368573269/syzkaller.brKwbi/14/file0" dev="sda1" ino=16617 res=1 12:10:49 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0xe0003f01, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="020300030c00000000000020000000000200b5a65755000000412d1fbc0000000300060000000000000000fae0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f010000000000fca0d971e9fd2bb4b88e524ae03e6521c84c1d7afa5cac81f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d95dfcc7e08e6dc8bbcceb36c8"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000000)="2f717bdabcb47433d23420d16dbf59c4cccbb39e43e05054a3ff01bcff1fa947b90498972c0a63dc254f7ea7b6263b23d412205bacc74ae9b7003f81babdea9606b8c001af0a55e4680a56bcfd029e3b2285271afaa7a0656252caef7385b9c5c4672c20470b5b2117c89df6053b99ebf66486ffdef4385ea7acb03247001299f08545aa639c1059a0791b5846a1081f7dd9a8857112b03c6fc4b9d9bbfd00f1d7402de947886f06f54e0eacd6970b53", 0xb0}, {&(0x7f00000000c0)="a91d1094924312a9bac2d408a0aaa20f", 0x10}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="b2a21fb8885b40f58b87be19a34a9b10888f19b99c4c9323b358cb9c202111f0cf4e7491f6726d3259246d7c6671ec00edfd668ac0950625c2af8a5b28070b199633bf206821cf7f86c58421b4fa5f0992433bc8374523d6a419d41d58b808de3b37dd01026efe61b3f19a5baf77658f93711cd13088b7c3740e3523d972262cf135dc7e06bc545b84c3e1a674bd9effb5896c8f3622b9265d08524cca4d0716ca4c96105ecee5bd2ee663dac8c2b32f84c4011f09b4cf73ac81931ae8b1ebeb462ab27bbd9cb3c5cba0cfab", 0xcc}, {&(0x7f0000000100)="f576bda44984ee6164f03e099abef5026ef297ad19118576fddeb134b748c92abb09f29f1079fc551f42528f1f615ee7ca29072c08787221981df5b98ad14c1cd619c6b8ad3fff4e377449906d9b08bb13d1a0853816128406f93376a67d76caed48e32bdb26f10b8e47df4c4c565cd77682ea207722ac9dd464", 0x7a}, {&(0x7f00000012c0)="49afedf7ac75cad09419967bbaf33461c44073ddd6a03d98298cef6ea0d06fb1e0b9edb2f995e5a2d716006654fd58e9a5134cbc60c383d0fe34b9eb897dbb4694968eafebf585c549f02e67c1d59b53", 0x50}, {&(0x7f0000001340)="7dee74fcff0416bcd7967d06e3fd0415", 0x10}, {&(0x7f0000001380)="347c92fbc55e4de20c60e612a0774904c5cf692a78a2a2dc6570d394ab5999244262c3244e6fc7ee10ff784f98d213f720a6cd15e87a87b7f0dd21b39a3a8c2aab", 0x41}, {&(0x7f0000001500)="169b9a91bed1b7c6edd58da660dfc87bad6598299681fa6510361f06622ef3b96804f632f94874770bdbf3ed2f0f7959b61f14c8037fb473208599f1b8310968e4a364679512cea3e62fa09f783f9bcd0854c71c65dd13b4ddc09ee9c1c079e3ee173b2a8e5462d57ca0", 0x6a}], 0x9) 12:10:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x4, 0x3f) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x229000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="7bf512db1771039465a1a3e8d77c52dd", 0xfffffe44) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="11dca50d5e0bcfe47bf070") syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid/') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x800000) 12:10:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8010, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="06", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb9d0200e40e4f82d3b8ccc7450038b06cd9b56774c278f488e4d8053afe94b8d2c749ef3cdd492469aa443ec0a970b71e1317c31f63b1e9297761dad8368fd25102d6f2c2bcb7cb67f81bab416384043bfb4677c3efd24c179a65813b41ce1d4b4ff8f39fdb66538d00001cb181210a165551916f8810fee6229deb7f8bd114105a48f63aecfcbb4b"], 0x1, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) sendfile(r1, r0, 0x0, 0x20002000005) 12:10:50 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) setresgid(0x0, 0xee01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 12:10:50 executing program 4: r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) signalfd4(r3, &(0x7f00000002c0)={0x9}, 0x8, 0x80800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="96a5ba93e1a8d79e9d11ac00"]) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000200)={0x8000, 0x42d}) socket$unix(0x1, 0x5, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73795a7c9b14d8e44d9fb025e3aa15eee7186fb52d46f64f4e901ea2c0293d344427ed61f16a9b5f9b05e35053ab4336ea905d7850e73ebcd74ba133e865d5f55821eeecb1d7ff3fe3fac09c8f76a3491e187fd333a89584bd174f4e5c808756c8873c4583da04bb2b29c96487223a0a8170284482fe6b87946bf572998fc56a9398ee5ae62c437f33e6515661d2821fcba77e34a4c6dee96fee6d81989837b3fddabda75d1e63c175b7e11200"/203], 0xcb) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) r5 = socket$inet6(0xa, 0x5, 0x9) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x404102, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f00000001c0)) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000140)={0x9}, 0x4) fadvise64(r0, 0x0, 0x0, 0x4) [ 247.513973][ T26] audit: type=1400 audit(1569672650.063:80): avc: denied { create } for pid=9196 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:10:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0xfffffffe, 0x5, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/92, 0xff72) recvmsg(0xffffffffffffffff, 0x0, 0x40002040) socket$rds(0x15, 0x5, 0x0) io_uring_setup(0xa4, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x20, 0x20000) sendmsg$nl_generic(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x004\x05\xbde\ag\x98\xa7') recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/152, 0x98}], 0x3}, 0x40002040) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@remote, r4}, 0x14) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x9000200}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="28ee4c526b00000080800000000000ec44734f2f8f4799a7f612ebe1f5444e1cdc673ec18d468aa22b9c765e95731440cf7dd632c198", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x4140) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="78d6cabf040b672689d6fd29a9333ae54d11c41252cb4cd80efc983558771bbfc082ee77cb1924034ae3a770b5b5f468104de2312deb8b797f6a9ead4cab7c251855dacc9d0eeff33a3fffc411c17ee120537e8a566f3cee5e36dba16f53aa81d419d63ebbf6a3f7e2124fa22263d9e200a3bf31a45bdf1ef35718c32f8b72cb8603fbeb3c72210fab1686a09c28279e5960ff244b8dde1c37f5b7f2b620d010", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socket(0x0, 0x0, 0x0) 12:10:50 executing program 0: mkdir(0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000001c0)="c1d06d74fa6d44819ee4f029fdecdc995adc88edb578571d9a60355b3054f759bd01a424a148e2e7dcf27faf473c554eb3586f0185", 0x35}, {0x0}], 0x2, &(0x7f0000002980)=ANY=[@ANYBLOB="30000000000000008400000001000000c1ff51", @ANYBLOB, @ANYRES32, @ANYBLOB="1800000000000000840000000600000003000000000000001800", @ANYRES32, @ANYBLOB, @ANYRES32], 0x39, 0x4}, {&(0x7f0000000840)=@in={0x2, 0x4e24, @rand_addr=0x7b}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000980)}], 0x1, &(0x7f0000000a80)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4}}, @init={0x18, 0x84, 0x0, {0x9}}], 0x38, 0x80}, {0x0, 0x0, 0x0}, {&(0x7f0000001000)=@in6={0xa, 0x4e21, 0x1, @loopback, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000001400)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002780)=[{&(0x7f0000002640)}, {&(0x7f0000002680)="2f5e4c478b9c4d9195f7fa3f637a8fb5c55d02c9a1711cec88d136a13b48ff2b50fa5411d78ba692ae9d80dad51a5fe92da0a69dcf1c449578224e544a6c055c4356aa8286274a71c0639d5035ab6e4b43adb299e937a5e65e2fa4b337db2a41d52f00dcfb232c75b8173179c769be0f86f65dc7b298e6ce1dad05a3811f5c910449bd331d792a208a74fcb0cb99201324acfe4f4384130fac889f7687e8a31ccc07adbef0fec603c3b1889a9cb8124be36ed1d3268d0e0f43fa254778", 0xbd}], 0x2}], 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x2, 0xc) write(r8, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x381) write(r8, &(0x7f0000000000)="1f0000000104fffffd3b000007110600f30501000b000500020423ca0300cf", 0x1f) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/124) [ 247.991082][ T9222] 9pnet: Insufficient options for proto=fd 12:10:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x40, 0x1f, 0x1, 0xf8, 0x4, 0x1}, 0x2a}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) [ 248.040294][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 248.040310][ T26] audit: type=1400 audit(1569672650.593:84): avc: denied { write } for pid=9220 comm="syz-executor.0" path="socket:[32266]" dev="sockfs" ino=32266 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 248.083458][ T9221] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.134302][ T9226] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.173710][ T9226] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 12:10:50 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 248.237745][ T9221] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.336926][ T9231] 9pnet: Insufficient options for proto=fd 12:10:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x40, 0x1f, 0x1, 0xf8, 0x4, 0x1}, 0x2a}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 12:10:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) fremovexattr(r3, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') dup3(r2, r1, 0x0) 12:10:51 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0xf000) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687ecb86a5c883fa9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760653ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='commit=0x0000000008000006']) [ 248.892233][ T9255] debugfs: Directory 'pts0' with parent 'caif_serial' already present! 12:10:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa}, [@exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x80, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff7c}, 0x70) r0 = syz_open_dev$midi(0xfffffffffffffffd, 0x4b, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x33, @loopback, 0x4e21, 0x4, 'nq\x00', 0x30, 0x3, 0x50}, 0x2c) 12:10:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x40, 0x1f, 0x1, 0xf8, 0x4, 0x1}, 0x2a}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 12:10:52 executing program 1: gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) r1 = dup3(r0, 0xffffffffffffffff, 0xc0000) mq_timedsend(r1, &(0x7f0000000000)="1d93c6eb1671a96445415b4dbc27442d055cdcc4ccd51c8408c98188789467bedfbe63000b4cf4047ab1faf2b90678fb0b707fd3b7b7d4bc2d3189042a58324dfc1f8db701ef7097457b487c1d7af9b2a11ef6d248150b7595c3a7cf2dcba19f68442a2eaaf3a2d2196d54c9e912fe", 0x6f, 0x2, &(0x7f00000001c0)={0x77359400}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0x92) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) r4 = dup2(r3, r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x543a00, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000280)={0x7, 0x81, 0x1, 0x8001}, 0x8) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r6) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000006c0)="f6", 0xfffff, r7) r8 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000380)="1d46a1c89e6ad49fab785a288fcdf2b7def759f1a5e33a166d842f71a28b9e68a043ab1e882d466dccd882fb7428aa6de713e94eb1c4b7f319f3014ad9c87c8245cd1eab777474e4d8d1c1d24666a0de7e996541bc1ba899080d096bdb07f03e590063cc392b257b0f6d52ffb9a93d797a401cfa88cfe14e32", 0x79, r7) r9 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000001540)="1c875e987418989370adfa68f331de49ac12d2f55ebf8d729d04b096dd535c5e8061bf2eeb771f9a5b8e21e4c1e6c244a6081a28a1be45aebbcab8c1c2f0dfc5fa059fe4f92cacf3c92863edfb38275a44c81f4f4d4572f1033aa7f563499286c181ea73e7247536cfbdbb03c19485c693647220c8875da4615f43d03e670518ae8547dc62e62e9c09f1b04235ff56dddf62ea0f1facc5d070b1a3bda20e7d99f6ff7cfe8899d19458fad4f57b3e9dbe19c22a684791b7bbee0485bf079769ddca0cee2a0e", 0xc5, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r9}, &(0x7f0000001640)=""/210, 0xd2, &(0x7f00000017c0)={&(0x7f0000000500)={'sha256-ce\x00'}, &(0x7f0000001740)="b0fe706142266124f1ae9c84540f743102f3c841dbb90ca0a21a4af0612a6e5d7a8e6604da2746b18bd490d93ca010f1bdf6aafc8000f922102ea9dd46920f39437f9b255f1ef95661b977be81f104c98bdc8fc554b3774713ee65d29a0d60ecb9b656e495262d58258d294037accea848b1", 0x72}) 12:10:52 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r0 = userfaultfd(0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 12:10:52 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockname(r1, &(0x7f00000000c0)=@pppol2tp, &(0x7f0000000140)=0x80) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00006ed000), &(0x7f00000001c0)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="3a99cb3a9c9633", @ANYRESHEX=r2, @ANYBLOB=',\x00']) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x1, 0x6, 0xb}, 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x2800) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001440)) 12:10:52 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40040, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="c9523cc9792d09a2910a4346a30f5da5ad3f596d0f047ebe534b65beae81e7e7ae13f85c570301000000afe1eabeafb37249f48de46c766ac7c0f022657df3414a8621b49c56cea7b58d598cd4a94fb3ad1596a8cd04bc76f533279eae3e7414853f0287bfedf6c47f", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x9}}, {@privport='privport'}, {@noextend='noextend'}, {@privport='privport'}]}}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000180)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000000)) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x10) sendto$inet(r6, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/117, 0x75, 0x40010025, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x8, "ca8e2104e4c1", 0x1}, 0x80) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="74646e6f3d00740000002d51acbc3b", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000005ac0)={0x2710, 0x4, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) prctl$PR_SET_UNALIGN(0x6, 0x7) fcntl$addseals(r5, 0x409, 0x8) mlockall(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r9 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r9, 0x409, 0x8) fcntl$setsig(r4, 0xa, 0x16) dup2(r9, 0xffffffffffffffff) 12:10:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$video(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x866b], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:10:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x5bc, 0x8803) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x7ee4}) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x3, 0x8}}, 0x14) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="4b637c35876685a33c5bfef18ba779d8", 0x9}, @in={0x2, 0x0, @rand_addr=0x80000001}}}, 0x118) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)}, {&(0x7f0000000540)}, {0x0}, {&(0x7f00000001c0)}], 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 12:10:52 executing program 2: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0xdf60, 0x0, 0x22d3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a00100000c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 12:10:53 executing program 4: r0 = syz_open_dev$usb(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r1, 0x409, 0x8) r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0xe83, 0x400001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000180)=0x40) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xf3, 0x0, 0x8, 0x4}) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000740), 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x40fdf) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6) r8 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r8, 0x409, 0x8) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000380)={0x9, 0x6f38, 0x6, 0x80000}) r9 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r9, 0x409, 0x8) sendfile(r9, r5, &(0x7f00000000c0)=0x2003, 0x8000000000ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x91efd) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r11, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r11, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000140)={0x8}, 0x4) sendmmsg$inet(r10, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r10, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040), 0x4) [ 250.409984][ T26] audit: type=1400 audit(1569672652.953:85): avc: denied { ioctl } for pid=9312 comm="syz-executor.0" path="socket:[31582]" dev="sockfs" ino=31582 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 250.566820][ T9313] bond0: (slave bond_slave_1): Releasing backup interface 12:10:53 executing program 2: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x800, 0x0) r4 = syz_open_procfs(0x0, 0x0) gettid() r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) close(r5) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000680)={"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"}) close(r7) r8 = socket(0x10, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) close(r8) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)=0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0), 0xc) prctl$PR_SVE_GET_VL(0x33, 0xe40a) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x80001d00c0d0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) 12:10:53 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) mincore(&(0x7f00000f5000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/174) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:10:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$video(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x866b], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 250.882197][ T26] audit: type=1400 audit(1569672653.433:86): avc: denied { map } for pid=9327 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31610 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 12:10:54 executing program 1: gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) r1 = dup3(r0, 0xffffffffffffffff, 0xc0000) mq_timedsend(r1, &(0x7f0000000000)="1d93c6eb1671a96445415b4dbc27442d055cdcc4ccd51c8408c98188789467bedfbe63000b4cf4047ab1faf2b90678fb0b707fd3b7b7d4bc2d3189042a58324dfc1f8db701ef7097457b487c1d7af9b2a11ef6d248150b7595c3a7cf2dcba19f68442a2eaaf3a2d2196d54c9e912fe", 0x6f, 0x2, &(0x7f00000001c0)={0x77359400}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0x92) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) r4 = dup2(r3, r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x543a00, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000280)={0x7, 0x81, 0x1, 0x8001}, 0x8) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r6) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000006c0)="f6", 0xfffff, r7) r8 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000380)="1d46a1c89e6ad49fab785a288fcdf2b7def759f1a5e33a166d842f71a28b9e68a043ab1e882d466dccd882fb7428aa6de713e94eb1c4b7f319f3014ad9c87c8245cd1eab777474e4d8d1c1d24666a0de7e996541bc1ba899080d096bdb07f03e590063cc392b257b0f6d52ffb9a93d797a401cfa88cfe14e32", 0x79, r7) r9 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000001540)="1c875e987418989370adfa68f331de49ac12d2f55ebf8d729d04b096dd535c5e8061bf2eeb771f9a5b8e21e4c1e6c244a6081a28a1be45aebbcab8c1c2f0dfc5fa059fe4f92cacf3c92863edfb38275a44c81f4f4d4572f1033aa7f563499286c181ea73e7247536cfbdbb03c19485c693647220c8875da4615f43d03e670518ae8547dc62e62e9c09f1b04235ff56dddf62ea0f1facc5d070b1a3bda20e7d99f6ff7cfe8899d19458fad4f57b3e9dbe19c22a684791b7bbee0485bf079769ddca0cee2a0e", 0xc5, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r9}, &(0x7f0000001640)=""/210, 0xd2, &(0x7f00000017c0)={&(0x7f0000000500)={'sha256-ce\x00'}, &(0x7f0000001740)="b0fe706142266124f1ae9c84540f743102f3c841dbb90ca0a21a4af0612a6e5d7a8e6604da2746b18bd490d93ca010f1bdf6aafc8000f922102ea9dd46920f39437f9b255f1ef95661b977be81f104c98bdc8fc554b3774713ee65d29a0d60ecb9b656e495262d58258d294037accea848b1", 0x72}) 12:10:54 executing program 2: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioct