[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 31.626309] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.942756] kauditd_printk_skb: 10 callbacks suppressed [ 31.942765] audit: type=1400 audit(1574267155.799:35): avc: denied { map } for pid=6914 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.033322] random: sshd: uninitialized urandom read (32 bytes read) [ 32.679478] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. [ 38.356992] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/20 16:26:02 fuzzer started [ 38.548124] audit: type=1400 audit(1574267162.399:36): avc: denied { map } for pid=6925 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.317766] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/20 16:26:04 dialing manager at 10.128.0.105:42857 2019/11/20 16:26:04 syscalls: 2529 2019/11/20 16:26:04 code coverage: enabled 2019/11/20 16:26:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/20 16:26:04 extra coverage: extra coverage is not supported by the kernel 2019/11/20 16:26:04 setuid sandbox: enabled 2019/11/20 16:26:04 namespace sandbox: enabled 2019/11/20 16:26:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/20 16:26:04 fault injection: enabled 2019/11/20 16:26:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/20 16:26:04 net packet injection: enabled 2019/11/20 16:26:04 net device setup: enabled 2019/11/20 16:26:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/20 16:26:04 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 41.301480] random: crng init done 16:30:04 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80640) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000140)=r2) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0xfffffffffffffffd}, 0x28, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x5d0003, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000240)=0x1, 0x4) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x4440, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x95, {0x2, 0x4e20, @rand_addr=0x401}, 'ip6gre0\x00'}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x200000, 0x0) setsockopt$inet_dccp_buf(r6, 0x21, 0xc7, &(0x7f00000003c0)="ed7cbc0292fb9472182ff299e4cfc5c85fbd3c30115ab06dfe84c1bc33dfc2ff32ba7276cdccf7601a799b555289389cc9cc5ef2c835985510277074666f2c88480a605ee1e5235c509c7054d206c44a7dcdeb59ecc414068c9840abb86d9d2ccc14692154e6a8eff05b7085c57d25a5e4cb10c7ba9a9ae001d74cc0297398c368d477bc3dec559fa9acba5bde9696cd342386db6102a038cfc96c0f3bbdfd6c9732aa04bf2d6b23610c45e70f6ba8b0f18e205fcc97c74fa290d0a494165076184f02dfae2cfc912b681750a9d5a85fb06b7b42ddeba548dba555c3932a68089b29f80a9dd68db144", 0xe9) r7 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r7, 0x4008ae73, &(0x7f0000000500)={0x6, 0x4}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) r8 = socket$l2tp(0x18, 0x1, 0x1) readahead(r8, 0xa29, 0x3) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000005c0)) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000600)='/dev/cachefiles\x00', 0x248382, 0x0) dup(r9) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000640)={0x0, 0xd5}, 0x8) r10 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0x3, 0x60401) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r10, 0xc0bc5310, &(0x7f00000006c0)) write$binfmt_elf64(r6, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x3f, 0xbd, 0x100000000, 0x2, 0x3, 0x1, 0x3ba, 0x40, 0x9, 0x81, 0x488, 0x38, 0x1, 0x3f, 0x6, 0x5}, [{0x2, 0x27, 0x7fff, 0x9, 0x3, 0x3, 0x80000000, 0x5}, {0x1, 0x49, 0x8, 0x1, 0x10000, 0x6, 0x2, 0x6}], "1acac5", [[], [], [], [], [], [], []]}, 0x7b3) 16:30:04 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@mcast2, 0x18, r1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x202000, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x88002, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='(posix_acl_accessnodev}]mime_typevmnet0\x00') r3 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x40, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000400)={0x20, 0x2, 0x9, 0x1f, 0x7fff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) mount$9p_xen(&(0x7f0000000440)='/dev/audio\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x200000, &(0x7f0000000640)={'trans=xen,', {[{@cache_mmap='cache=mmap'}, {@aname={'aname', 0x3d, '{securitymd5sum'}}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0xd}}, {@aname={'aname', 0x3d, 'posix_acl_access)\\nodev*cpuset@'}}, {@cache_loose='cache=loose'}, {@debug={'debug', 0x3d, 0x800}}, {@uname={'uname', 0x3d, '/proc/self\x00'}}, {@cachetag={'cachetag'}}], [{@audit='audit'}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r5}}]}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900)='/dev/net/tun\x00', 0x40400, 0x0) dup2(r7, r2) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r9, 0x3a52, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0xfff, {"aff690c92408ee2edd7a8ac3f6b07d6a"}, 0x60cc, 0x9, 0x6}, @in={0x2, 0x4e23, @rand_addr=0x8}}}, 0x118) r10 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x200, 0x5c) ioctl$TCGETX(r10, 0x5432, &(0x7f0000000b80)) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x18c, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2bec}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeccb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74b3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r12 = syz_open_dev$audion(&(0x7f0000000f00)='/dev/audio#\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000e80)={0x0, 0x70, 0x40, 0x9, 0x2, 0x2, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0xb66}, 0x8, 0x4, 0x9, 0x0, 0x80, 0x7fffffff, 0x5}, 0x0, 0x3, r12, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x20) 16:30:04 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x6, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x3, 0x1000, 0x87, &(0x7f0000000040)="463274c696b93cf3c2c2f48ed6c7bf5793efbcc02b587678e0e9fdb1be2d829d44b7c7006eadd0dee345645baf23d453a97d7bee0ee6df8f83e9d923fd443d3d804955b5c84145f4dab34437e4c72cb7fe50280a2a5f5f42aba638017415603187bc913fefb67a64cd12a47e5f0131e766e3bf19e426cf93f0b001ae29b5fdd8cbe12028d4ac0a", 0x2c, 0x0, &(0x7f0000000100)="240520e0b3abefeb9edc4d35f473f3888caa3f832cb452f3f0a05c3bd85e3defb6443143b9cf3574c2039cf2"}) r1 = semget$private(0x0, 0x0, 0x2e2) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000001c0)=""/202) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000002c0)={0x0, 0x8001, 0xff, 0x1, 0x7, "f3ee24e8d4b6a15c1d9e9ebbdf1d5fcb649ad4", 0x6, 0x2}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000300)=0x4) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='configfs\x00', 0x2000010, &(0x7f0000000400)='*cgroup\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0xff, 0x8}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={r4, @in={{0x2, 0x4e20, @broadcast}}, 0x6, 0x1, 0x7, 0x3, 0x80000000}, &(0x7f00000005c0)=0x98) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000840)=""/220, 0xdc}], 0x3, &(0x7f0000000980)=""/73, 0x49}, 0xffffffff}, {{&(0x7f0000000a00)=@nl=@proc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a80)=""/36, 0x24}, {&(0x7f0000000ac0)=""/13, 0xd}, {&(0x7f0000000b00)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/126, 0x7e}], 0x4, &(0x7f0000000c80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/93, 0x5d}, {&(0x7f0000002d80)=""/63, 0x3f}, {&(0x7f0000002dc0)=""/23, 0x17}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x5, &(0x7f0000003e80)=""/46, 0x2e}, 0x401}, {{&(0x7f0000003ec0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003f40)=[{0xfffffffffffffffe}], 0x1}, 0x7}, {{&(0x7f0000003f80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/89, 0x59}], 0x1, &(0x7f00000040c0)=""/89, 0x59}, 0x6000000}], 0x5, 0xa963510ca929d5f6, 0x0) bind$nfc_llcp(r5, &(0x7f0000004280)={0x27, 0x0, 0x0, 0x5, 0x0, 0x37, "98fd38f7bd0f43b91e2b6b3bc03ac17f690b71d2126abfa3e80c9ba199f3e2913383d93b05594b961b177d0e2a3f85a4ca397d2522c1030c93f616e108d3e6", 0x31}, 0x60) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) write$FUSE_OPEN(r3, &(0x7f0000004300)={0x20, 0xfffffffffffffff5, 0x2, {0x0, 0x8}}, 0x20) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000004340)='/proc/self/net/pfkey\x00', 0x40480, 0x0) write$FUSE_GETXATTR(r6, &(0x7f0000004380)={0x18, 0xfffffffffffffffe, 0x1, {0x8}}, 0x18) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) accept4$x25(r7, &(0x7f00000043c0), &(0x7f0000004400)=0x12, 0x80000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000004440)='/proc/self/net/pfkey\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000004480)=0x4ba6, 0x4) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000044c0)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r9, 0x4c03, &(0x7f0000004500)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000045c0)='/dev/kvm\x00', 0x2, 0x0) vmsplice(r10, &(0x7f0000004840)=[{&(0x7f0000004600)="7179ed39aca7d92b7edd0903f4d967c5c41d9df96b0c0d496562495171c15db27634173c25005ffa3257455975e86964c1365393598a69b83f37afc1af934e3dd5d92f06f4bcdd50f012ed2ead", 0x4d}, {&(0x7f0000004680)="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", 0xfc}, {&(0x7f0000004780)="c8b4fb4924", 0x5}, {&(0x7f00000047c0)="233d6ed242fb2e20a37b7434a5f6c3212bdffb5a64d3e4ead8de44bddc18eec4234638c785a375a9400deb9e7ccab7f0be31a185d23433547238a9e882c8942cee0fdb73e3867179c77c8e54bf2328a04a36bfc2b1883cabd782ea", 0x5b}], 0x4, 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000004880)=0x2) sendmsg$kcm(r3, &(0x7f0000005e40)={&(0x7f00000048c0)=@llc={0x1a, 0x313, 0x5, 0x0, 0x5d, 0x7, @broadcast}, 0x80, &(0x7f0000004940), 0x0, &(0x7f0000004980)=[{0x30, 0x116, 0xd2, "9035345a3bb52b41a165062e1650316cfb4d638d16c386096c"}, {0xb8, 0x0, 0x6, "7eb2432378ae1db03e2d386d05f3d7b602b6c317560a4397ede276684d1924c58e699bcd1986224f87e133b1f7ef496dfd17f1897741a235f6cc81f0d9004771c71b62f4e4c0186da0b1040d878d294ccb253096600df681e3dd78e8f67a8b913d6e0dd96b77607ff70634702ff5e063346682712a4c68b0dc3ea6e51c01fd092080736de3a812e82edbf4fcfaeb02956ea3a30bacdb40d71de24e25cbe310a26cdf9153aa"}, {0x1010, 0x102, 0x1ff, "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"}, {0x68, 0x113, 0x6e7, "43faa52bc148b27803d714e4905a921c4583d0b70be4a5f85ab8905a450405e3e16d78afe06c2c99715f0e6861010e16f5c510bd76742bef42f70554f4ebab48118c48b8204fa7008ce8e8590fb8e223542ca2"}, {0xa0, 0xb, 0x101, "6b55dca671e8a4d79fe461ed0ee2c2ccafae98c709d9a15a17d5c4de1024ad45247123c31746ce3c9195b1909a61a4c22e8fbdd42177201334bf06367aaa66e9e8f4be1ba163422a5214ce16d50fe1a43a34bde04570d9b1c72a887f328be01a884deda840f283f762355bd087188846dfe78888e1fcb3a897b4867cf5094185358ef22f6ec99e7021c6fb"}, {0x80, 0x101, 0xfa, "8e73cde97b9d3be83fd47b1d7c5e6815ac7ddb232d82f49fe639d35c9e43e08e68536dab2bf6cec26008baf89a2e0f41d1d482720e921a4e574b0bfcc081158b810e33aac0d74704d04623f81de2009d79758ef07f8f2b5744fe2b4442bb9ef60ecee58b30de676628a72d6e01981e"}, {0x98, 0x10f, 0x7fff, "b58bbb2aa67761ed1255ccb4075fffb81fd850d0c0dd5418242dfd6ca03f71c47556dc013b5a457090de9bf817b59f045549a04e858a0966e169487639c7c1d5c89d4b7cdc60daea041e7857e40f698655369ea3709731b1d8d160f4729068e97abb3ae81b4379613e608ede107efa99cdcbd8a4d2a743c882ec7337f62e8df67b"}, {0xc8, 0x105, 0xc7, "4742298472cc7d0df9e97dd0a17aa554f514ccd5eb9234e8f95b47a78f414cb8122b56712783327c02d6e150f3049db55b0f28be30e9ffb5ef4e4bade3ef68e81f9f4ff665add7d333873681d5bbd75f6263697bed990b811e6ee8a910ea705c4ae10db1ba6a7e623b6756eb3f46c96736be233311559526ac09ef689c9883e01bbcdb0efe43dc7a4e77edd5fbaedc6de98254e4c116d2b65ae07b2db6d35109bc590b5baafe1ea200f8b49fc393819492dec1"}, {0xe0, 0xff, 0x9, "e3d4e28fa46747b141221bc1c2c7f9e6e1440693a730902ed8f8ba465b10c1fd7ea518e4b42b00c0897779b1f409fb9f04500c9f3bcfba44ebecd992ad79422d525d20ebeda997dfd7ce48aedbaf5497c60831e805226ef44c7d45388169af5c81942ea1e2bc0dc76f89971e552bcfbf17872ca09ab4376dda2cca308853d759358ad3444d3e9687ce59217ceaa6ba5f7921a8a5641f6484d53b4aa11d02d4bcbdfbacdb7fdfc7e40346885c429c6b9eafd0aa30a680509249d3d1d0e6924db901a7d1212f59524253266a"}], 0x14c0}, 0x4000) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000005e80), 0x10) 16:30:04 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xfffffffa, 0x9}, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x280, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0xfff, &(0x7f0000000080)="bfc937efa2fa86b10c81c2a9fea589329444445fb817e43ddb1d2809abd868fe9294a37ebf87d8f9f0494d262338f9333c7badf57c9b342f2e2e7e9ee487fcf3af58fc7f8bd45106c822541179116422efc09b0c70d8abfca78cfaa44a65f2be351cfde39976c538a5410fb703353b609d3afe932d324446881aa9d403fcbeb61936d3ce87b85c545743b31f4ff4c0e4502fedb09ba0cce81a833c085fecf0"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40200, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000200)=0xe61) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x69653980, 0x0, 0x6, 'queue1\x00', 0x20}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x800080, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000340)={0x2d, 0x6, 0x0, {0x5, 0x4, 0x4, 0x0, '-%$#'}}, 0x2d) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0xfff) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x80) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@loopback, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_newneigh={0x24, 0x1c, 0x10, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x0, r4, 0x1, 0xd, 0x2}, [@NDA_VNI={0x8, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020801}, 0x4) inotify_init1(0x80800) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000005c0)=0x4) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000600)) r5 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x0, 0x80000) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000006c0)=0x4) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000700)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000740)=r7) setxattr$trusted_overlay_upper(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.upper\x00', &(0x7f0000000800)={0x0, 0xfb, 0xe0, 0x1, 0x3f, "b903f71af1386fac6cc5efe670577e28", "3bcc1f8cab5827b4d6d0ec2d7209c72c89ed9e4667d125234b2e7ea98a919b479fcda26142139ea328ab2ddfd73d4acc765ff91bb83fb840a2cb73ea698c7da972285d612525249fc8681f6580b438188e6c651ec5818361339e52496a749168887a4aee8ec51aac43eb73f9d61094a1e8fc56f7530c668e98eef298ebcf74ede3abb1eaadac89f62ded0f046ad30eb59effe263285aedb8cc70079b70c71305a0e0a908f274e2b7b1b607615eae935ca17e600b7c3f65b152c98055a28555577909a4318dba179f60e8dc"}, 0xe0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x680, 0x110, 0x390, 0x110, 0x110, 0x0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5, &(0x7f0000000940), {[{{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @gre_key=0x9}}}, {{@ipv6={@remote, @loopback, [0xff, 0xff, 0xffffff00], [0x7f, 0xff, 0xffffff00], 'tunl0\x00', 'eql\x00', {0xff}, {0xff}, 0x0, 0x7, 0x2, 0x40}, 0x0, 0x238, 0x280, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x5a, 0x8}}, @common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0x4e21, 0x4e24, 0x4e20, 0x4e20, [0x5, 0xf9, 0xfffffffe, 0x5, 0x759c, 0xe6c9, 0x3, 0xfffffffc, 0xe2000000, 0x6a, 0xffffff7f, 0x2, 0x3e, 0xace, 0x821a, 0xfffffff8, 0x8000, 0x1eae, 0x8, 0x7, 0x0, 0x3, 0x200, 0x5, 0xd, 0x6, 0x9, 0x1, 0x6, 0x7, 0x3, 0x2, 0x8, 0x5, 0x10001, 0x7, 0x400, 0x8, 0x4, 0x79e6, 0x8000, 0xaa9, 0x73, 0x1, 0xb5, 0x0, 0x634, 0x7, 0x1f, 0x9, 0x73d, 0x5, 0x9, 0x0, 0x4, 0x6, 0x0, 0x92, 0x5, 0x7, 0x2, 0x6, 0x8000, 0x1000], 0x1, [{0x0, 0x7, 0x40}, {0x9, 0x7, 0x3f}, {0x0, 0x40, 0x6a}, {0x1, 0xcd, 0x5}], 0x1, 0xa, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@loopback, @ipv6=@local, @icmp_id=0x65, @port=0x4e20}}}, {{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xffffffff, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'gre0\x00', 'bpq0\x00', {}, {0xff}, 0x3b, 0x3, 0x8, 0x4}, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv4=@remote, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffff00, 0x8000007f], [0xff, 0xffffff00, 0x8481286a4a4a708a, 0xff000000], 'sit0\x00', 'bond_slave_1\x00', {}, {0xff}, 0xbb006d1b3c96355c, 0x2, 0x0, 0x50}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x9, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4=@broadcast, @icmp_id=0x66, @icmp_id=0x68}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000002280)={0x0, 0x1, &(0x7f00000010c0)=""/141, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=""/231, 0x6000}) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f00000022c0)) nanosleep(&(0x7f0000002300)={0x0, 0x989680}, &(0x7f0000002340)) fstat(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) 16:30:04 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2, r0}) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)='^\x00', 0xffffffffffffffff}, 0x30) fcntl$setown(r2, 0x8, r3) r4 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x76, 0x440b00) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000200)={0x6, 0x7, 0x1}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="293a43096c1ea83535da58e30afac49f799665701953bf7d0d941e9d18242033bf733a2eeddfee", 0x27, 0x80, &(0x7f0000000340)={0xa, 0x4e20, 0x8000, @local, 0x2}, 0x1c) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000380)) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000400)={0x7, 0x6, 0xfffffff7, 0x3}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x680200, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000000500)={0x71, &(0x7f0000000480)=""/113}) r9 = syz_open_dev$media(&(0x7f0000000540)='/dev/media#\x00', 0x1, 0x4482) ioctl$KVM_GET_FPU(r9, 0x81a0ae8c, &(0x7f0000000580)) recvmsg$can_bcm(r8, &(0x7f0000001d00)={&(0x7f0000000740)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/189, 0xbd}, {&(0x7f0000001880)=""/24, 0x18}, {&(0x7f00000018c0)=""/78, 0x4e}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f00000019c0)=""/14, 0xe}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/41, 0x29}], 0x9, &(0x7f0000001c00)=""/210, 0xd2}, 0x12160) syz_open_dev$admmidi(&(0x7f0000001d40)='/dev/admmidi#\x00', 0x7, 0x2100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x41a) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001d80)={0x0, 0x2, 0x40}, &(0x7f0000001dc0)=0x8) syz_open_dev$usbfs(&(0x7f0000001e00)='/dev/bus/usb/00#/00#\x00', 0xd34, 0x200900) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f) fsetxattr$trusted_overlay_opaque(r10, &(0x7f0000001e40)='trusted.overlay.opaque\x00', &(0x7f0000001e80)='y\x00', 0x2, 0x2) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffc) ioctl$KDSKBLED(r11, 0x4b65, 0x1) 16:30:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r2 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) semctl$IPC_INFO(r2, 0x0, 0x3, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB='#! ,'], 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 280.578743] audit: type=1400 audit(1574267404.429:37): avc: denied { map } for pid=6942 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13831 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 281.021057] IPVS: ftp: loaded support on port[0] = 21 [ 281.789548] chnl_net:caif_netlink_parms(): no params data found [ 281.801432] IPVS: ftp: loaded support on port[0] = 21 [ 281.829224] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.836283] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.843334] device bridge_slave_0 entered promiscuous mode [ 281.850422] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.856790] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.864170] device bridge_slave_1 entered promiscuous mode [ 281.885925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 281.898228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 281.920981] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.928201] team0: Port device team_slave_0 added [ 281.935498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 281.942578] team0: Port device team_slave_1 added [ 281.952828] IPVS: ftp: loaded support on port[0] = 21 [ 281.962671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 281.976494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 282.041915] device hsr_slave_0 entered promiscuous mode [ 282.080427] device hsr_slave_1 entered promiscuous mode [ 282.136193] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 282.148728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 282.156140] chnl_net:caif_netlink_parms(): no params data found [ 282.162301] audit: type=1400 audit(1574267406.009:38): avc: denied { create } for pid=6949 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 282.186943] audit: type=1400 audit(1574267406.009:39): avc: denied { write } for pid=6949 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 282.211450] audit: type=1400 audit(1574267406.009:40): avc: denied { read } for pid=6949 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 282.269511] IPVS: ftp: loaded support on port[0] = 21 [ 282.275623] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.282486] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.290527] device bridge_slave_0 entered promiscuous mode [ 282.297517] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.304687] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.311607] device bridge_slave_1 entered promiscuous mode [ 282.333877] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.343747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.366209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.373477] team0: Port device team_slave_0 added [ 282.379409] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 282.386782] team0: Port device team_slave_1 added [ 282.392289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 282.405290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 282.413763] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.420187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.427007] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.433606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.501914] device hsr_slave_0 entered promiscuous mode [ 282.540292] device hsr_slave_1 entered promiscuous mode [ 282.582292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 282.600087] IPVS: ftp: loaded support on port[0] = 21 [ 282.626009] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 282.696978] chnl_net:caif_netlink_parms(): no params data found [ 282.714647] chnl_net:caif_netlink_parms(): no params data found [ 282.746537] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.752917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.759490] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.765846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.813849] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.820733] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.827893] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.834581] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.843019] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.849362] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.856688] device bridge_slave_0 entered promiscuous mode [ 282.869446] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.876406] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.883671] device bridge_slave_1 entered promiscuous mode [ 282.884364] IPVS: ftp: loaded support on port[0] = 21 [ 282.905295] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.911745] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.918567] device bridge_slave_0 entered promiscuous mode [ 282.945113] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.951706] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.958487] device bridge_slave_1 entered promiscuous mode [ 282.987339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.996334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.005341] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.015614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.064007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.086007] chnl_net:caif_netlink_parms(): no params data found [ 283.094355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.102177] team0: Port device team_slave_0 added [ 283.117103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.124871] team0: Port device team_slave_1 added [ 283.131018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.142138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.152850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.159856] team0: Port device team_slave_0 added [ 283.169115] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.176244] team0: Port device team_slave_1 added [ 283.186501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 283.193446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.212532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.225751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.233527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.247997] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 283.255004] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.263721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.286012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 283.333593] device hsr_slave_0 entered promiscuous mode [ 283.370431] device hsr_slave_1 entered promiscuous mode [ 283.450161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.458193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.467815] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.474174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.492861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 283.501295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 283.507959] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.515429] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.522453] device bridge_slave_0 entered promiscuous mode [ 283.562349] device hsr_slave_0 entered promiscuous mode [ 283.600550] device hsr_slave_1 entered promiscuous mode [ 283.641789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.649511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.657164] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.663518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.674949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 283.683988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 283.692448] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.698789] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.707605] device bridge_slave_1 entered promiscuous mode [ 283.714043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 283.725599] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 283.734586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.745508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 283.766732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.776817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 283.787967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.832879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.842681] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.853006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.860858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.868319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.877147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 283.887294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.903759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.912226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.922779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 283.935202] chnl_net:caif_netlink_parms(): no params data found [ 283.952137] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.959258] team0: Port device team_slave_0 added [ 283.965032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.972804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.981835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 283.989268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 284.004802] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 284.014309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.021987] team0: Port device team_slave_1 added [ 284.027689] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 284.034429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.042544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.049919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.056901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.065805] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 284.071893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.080715] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 284.086777] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.093508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 284.119510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.147948] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.155067] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.162339] device bridge_slave_0 entered promiscuous mode [ 284.171942] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 284.179629] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 284.224026] device hsr_slave_0 entered promiscuous mode [ 284.260408] device hsr_slave_1 entered promiscuous mode [ 284.301543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 284.309903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.316897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.323742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.331506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.339017] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.345402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.352634] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.358974] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.367268] device bridge_slave_1 entered promiscuous mode [ 284.386343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 284.395385] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 284.406050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 284.418490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 284.434180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 284.448069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.457754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 284.471602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.479330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.487882] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.494258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.506625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 284.520228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 284.527282] team0: Port device team_slave_0 added [ 284.545297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.556337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 284.567062] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.574720] team0: Port device team_slave_1 added [ 284.582717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.590346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.601633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.609659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.619524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.629645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 284.637859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.650007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.658806] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 284.669302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.677551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.684749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.694167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.703032] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.722192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.735348] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 284.746077] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.753153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.765789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.782562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 284.813680] device hsr_slave_0 entered promiscuous mode [ 284.860334] device hsr_slave_1 entered promiscuous mode [ 284.903687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 284.914639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 284.921700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.929814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.937780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.946056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.954061] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.960438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.967229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.974118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.984025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 284.994264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 16:30:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)={0x3, 0x0, 0x0, 0x0, 0x2a, 0xffffffffffffffff, 0x400, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000206005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000040000000000000000e1e8154f707c51bf00000000000000000800000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r6, &(0x7f0000000440)=""/46, 0x2e) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000001a40), &(0x7f0000000340)=0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000017c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r8}) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102002}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@ipmr_newroute={0x4c, 0x18, 0x100, 0x70bd2b, 0x25dfdbfd, {0x80, 0x80, 0xa0, 0x1f, 0x80, 0x0, 0xc8, 0x5, 0x1800}, [@RTA_PRIORITY={0x8, 0x6, 0xbffe}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_SRC={0x8, 0x2, @local}, @RTA_OIF={0x8, 0x4, r8}, @RTA_IIF={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 285.002132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 285.010585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.017610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.045950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.053861] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.060242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.067135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.075376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.085547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.094422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 285.107465] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 285.115600] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.128028] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 285.136904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.149257] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 285.158112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 285.178097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.195688] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 285.208111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.216618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.229044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.236903] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.243278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.250036] hrtimer: interrupt took 31113 ns [ 285.256463] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.266836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.280291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 285.299465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.308452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 285.319255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.327127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.338429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.345381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.357630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.367111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.379606] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.385992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.397053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.403842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.417133] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 285.424178] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.436445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 285.452306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 285.468716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.475943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.488701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:30:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f00000004c0)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000140), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) [ 285.496745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.514085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.527492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.538239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.545806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.553979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.554058] [ 285.561834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.563116] ============================= [ 285.570937] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.574505] WARNING: suspicious RCU usage [ 285.580857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.584933] 4.14.154 #0 Not tainted [ 285.591843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.595006] ----------------------------- [ 285.602632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.606302] include/linux/radix-tree.h:238 suspicious rcu_dereference_check() usage! [ 285.613925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.621238] [ 285.621238] other info that might help us debug this: [ 285.621238] [ 285.621245] [ 285.621245] rcu_scheduler_active = 2, debug_locks = 1 [ 285.621251] 2 locks held by syz-executor.2/6991: [ 285.621255] #0: (&sb->s_type->i_mutex_key#12 [ 285.629733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.636564] ){+.+.}, at: [] shmem_add_seals+0x15e/0x1060 [ 285.636753] #1: (&(&mapping->tree_lock)->rlock){-.-.}, at: [] shmem_add_seals+0x334/0x1060 [ 285.670729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.676516] [ 285.676516] stack backtrace: [ 285.686873] CPU: 0 PID: 6991 Comm: syz-executor.2 Not tainted 4.14.154 #0 [ 285.690831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 285.693790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.702560] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.709200] Call Trace: [ 285.717921] dump_stack+0x142/0x197 [ 285.718966] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 285.721612] ? vprintk_func+0x65/0x159 [ 285.721653] lockdep_rcu_suspicious+0x153/0x15d [ 285.727759] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.731535] shmem_add_seals+0x9e0/0x1060 [ 285.731553] ? shmem_put_link+0xe0/0xe0 [ 285.739826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.742077] shmem_fcntl+0xf7/0x130 [ 285.742151] do_fcntl+0x190/0xe10 [ 285.748614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.750198] ? f_getown+0xb0/0xb0 [ 285.750245] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 285.750334] ? selinux_file_fcntl+0x66/0x110 [ 285.760510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 285.760827] ? security_file_fcntl+0x89/0xb0 [ 285.766586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.771133] SyS_fcntl+0xd5/0x110 [ 285.771142] ? do_fcntl+0xe10/0xe10 [ 285.771206] do_syscall_64+0x1e8/0x640 [ 285.771217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.777903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 285.779585] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.786328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.790684] RIP: 0033:0x45a639 [ 285.790690] RSP: 002b:00007fc349332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 285.790701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 285.790706] RDX: 0000000000000008 RSI: 0000000000000409 RDI: 0000000000000004 [ 285.790713] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.798457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 285.801836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3493336d4 [ 285.801842] R13: 00000000004c1068 R14: 00000000004d3c60 R15: 00000000ffffffff [ 285.902949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 285.915053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.925680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.938720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.947036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.955253] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.961630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.968930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.981869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.989455] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.995823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.007703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.015543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.025682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.033518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.041182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.048665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.056146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.063825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.071312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.078790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.090461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 286.097540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.104764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.111956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.119676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.132629] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.138978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.149772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 16:30:10 executing program 2: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x1b1, 0x8}, {0x0, 0x8}]}, 0x14, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000904000a000000000000000000000008000f0000000000", 0x24) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r1, &(0x7f0000000080), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r3, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x10) shmctl$IPC_SET(0x0, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r4, &(0x7f0000000080)="200000001a00010000000066835f7f081c1400"/32, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r5, &(0x7f0000000080)="200000001a00010000000066835f7f081c1400"/32, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r7, 0x8, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24005014) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x1e, "48373ee7f1efdbf4b12cdb11b22c651eea48fe6b0b495172220a0305cc06"}, 0x0) [ 286.164313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 286.175558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 286.194397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 286.204273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.221877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.229446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.242908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.252156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.259872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.267649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.278106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 286.287973] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.295013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.308027] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.314870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:30:10 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x23102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0xfbffffffffff7fff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) write$P9_RCLUNK(r1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 286.324445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 286.334575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.341165] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 286.350506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.359581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.367983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.379412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 286.386687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.404173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 286.409136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=7008 comm=syz-executor.2 [ 286.412345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.433275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.441694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.442060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.442583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:30:10 executing program 0: setpriority(0xb80bfb92b1cacad2, 0x0, 0x0) [ 286.444878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 286.446618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.447037] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.447056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.463441] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 286.513598] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready 16:30:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x3f, 0x9, 0x7, 0x80, 0xffffffffffffffff, 0x7, [], 0x0, r2, 0x3, 0x5}, 0x3c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'tunl0\x00', @remote}) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000340)) socket$kcm(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x660c, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d5962e073205e241718b45a17978ee384b79e766f95744922c48e208a7fa6c3b3be59067fdaa17b8c6dff5637ccc355a817fd68df1ad30a8e128e6d225619aabc7b2daec8f2d8"], 0x47) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='pids.current\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2b, 'pids'}]}, 0x6) [ 286.531659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 286.545470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 286.556842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 16:30:10 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) [ 286.567454] audit: type=1400 audit(1574267410.419:41): avc: denied { setopt } for pid=7002 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 286.597650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.607197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.614772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.622846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.631671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.639118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.653032] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 286.664880] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.674631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 286.683310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.692009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.701835] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.714943] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.722597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.729252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.736102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.743626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.751122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.757810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.764512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.771225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.782961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.793034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.809480] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.818890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.838267] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 286.850350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.857779] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.869669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.876728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.894175] 8021q: adding VLAN 0 to HW filter on device batadv0 16:30:11 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000640)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f000000bb40)=[{{&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)='6', 0x1}], 0x1}}], 0x1, 0x0) open(0x0, 0x8510afe488331d53, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002bc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002dc0)=[{0x0}, {0x0}], 0x2}, 0x1}, {{&(0x7f0000002e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000002ec0)=""/181, 0xb5}}, {{0x0, 0x0, &(0x7f00000058c0)}}], 0x5, 0x20, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r2) ioctl$void(r2, 0xc0045878) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x14}, 0x0) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(r1, 0x0, 0xfffffffffffffdc4) 16:30:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nlmon0\x00', 0x1}, 0xfffffe20) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) 16:30:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 16:30:12 executing program 2: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)="238bc7d79cb9f5236b8c9e159efb109450b6777aae37b9535341ab56950aa8b5a6083f6b31ef49926f3760c122b4c2644836b52011beb75d35bc89f4d8d7f5078cd81e46d0cbfa62f32b1253ead41aa34ac71e0699aab4a8d39976ec53cd6ee99790a5b40f3d31361fcb9cfc30") 16:30:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000280)='vboxnet1proc\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r2}, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xbcb}, 0x100) r4 = syz_open_dev$media(0x0, 0xfff, 0x400) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) io_setup(0x4, &(0x7f0000000180)=0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='veth1_to_bridge\x00', 0x40, 0x9, 0x800}) io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={{0x1f, 0x2, 0x4, 0x80, 0x9f, 0x8}, 0x1}) 16:30:12 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x7f) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'rose0\x00', @local}) socket$packet(0x11, 0x0, 0x300) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:30:12 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002400000000002f9078ac002a009078ac14ffaaae13cd2400"/50], 0x0) 16:30:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="35a75e0eda74a9d2"], 0x2}, 0x1, 0x0, 0x0, 0x44044}, 0x40040) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 16:30:12 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) 16:30:12 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r1) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14}, 0x14) close(r2) 16:30:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640), 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:30:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x44044}, 0x40040) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, &(0x7f00000001c0)=0xfffffffffffffd9e, 0x40000) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 16:30:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) capget(0x0, 0x0) 16:30:12 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0x0) [ 289.025644] audit: type=1326 audit(1574267412.879:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7146 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 [ 289.053612] XFS (loop0): Invalid superblock magic number 16:30:13 executing program 4: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 16:30:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:30:13 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0xdb, 0x20, 0xbc, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x5, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x11b, 0x0, 0x0, 0x100000001, 0x0, 0x8}, r3, 0x8, r4, 0x1) 16:30:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) read$FUSE(r2, &(0x7f0000000880), 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="0f22270f606ca7baf80cf30fe6b1020066efbafc0c66ed43ed66b91e0100000f320f20d80f22d8aeb800008ed83abc1fbc1f81d90c0066f2ba5f57160fc766b9bc0208000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20}, 0x20}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 289.253193] audit: type=1326 audit(1574267413.099:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 [ 289.313052] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:30:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x44044}, 0x40040) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, &(0x7f00000001c0)=0xfffffffffffffd9e, 0x40000) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 289.410214] syz-executor.2 (7136) used greatest stack depth: 24080 bytes left [ 289.546320] kvm: emulating exchange as write 16:30:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsf0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) [ 289.772760] audit: type=1326 audit(1574267413.629:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7146 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:13 executing program 5: execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000003ac0)=""/193) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0xa}]}, 0xfffffffffffffcf1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='4', 0x1, 0x4080, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00fbd602001829f3f9eeb30f2e48e24fa675e35da72584b5721a0ba2d1f249475346811d13a8c88f56dd7c6ede404fa9d4604a61d3af4f0ccefd3b4e92f660790ba1ea177042fd26581ad9165ab9a000f7ff680ffe366c6f58f714a4a4243d07c8bf3fc77dc10051635971fb559594b237deaa8d7389f71cee93301e62ee58725cea84f53a9456c31e9dadad7ff195a7479a0f67d1a1d267f74431209e8f36c9aafa5bda1dafc4b3a3066fa60cf90786e40db6a4e45aea36e6e8cd12e92f1ee8b634b4fc3696467525b78e708486dc0c6d10e3934166"], 0x1, 0x0) open(0x0, 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac05e11}) sendmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000003940)=@l2={0x1f, 0x1ff, {0x0, 0x4, 0x0, 0x81, 0x0, 0x2}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000004000)}}], 0x2, 0x0) 16:30:13 executing program 1: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) [ 290.031732] audit: type=1326 audit(1574267413.889:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x67bc0, 0x0, 0xffffffd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:30:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000002000000000004000000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) 16:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='\x00\x00\x00\r\x9cc\xef\xa1\x009\xf8\xd5\xe2\x84\ry\x82r(\x1d[\x81\xbf\xf1\xfb\xab\xcdq@\x10\x00\x00') getdents64(r0, &(0x7f00000001c0)=""/4096, 0x18) 16:30:14 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) 16:30:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) semget$private(0x0, 0x4, 0x40) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000000)=""/113) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000400)=""/218) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000600)=""/4096) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB='#! ,'], 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) 16:30:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8005, 0x0) 16:30:14 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = getegid() r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r2 = geteuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x0, 0x8}, 0x58, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0xf97d, 0x5, 0x0, 0xc474, 0x0, 0x2}}, 0xa0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x5) setresuid(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r4, 0x8004552d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r5 = socket(0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 16:30:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) 16:30:14 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = getegid() r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r2 = geteuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x0, 0x8}, 0x58, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0xf97d, 0x5, 0x0, 0xc474, 0x0, 0x2}}, 0xa0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x5) setresuid(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r4, 0x8004552d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r5 = socket(0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 16:30:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) request_key(0x0, 0x0, 0x0, 0x0) 16:30:14 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x4c2) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x65, 0x0}}], 0x400000000000039, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8000, 0x121) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000001100), 0x11e5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x44f7d067, 0x4) [ 290.530382] audit: type=1326 audit(1574267414.379:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7266 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:14 executing program 4: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) dup2(r0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x2000002) openat$zero(0xffffffffffffff9c, 0x0, 0x430300, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) fallocate(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 16:30:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) getegid() [ 290.774326] audit: type=1326 audit(1574267414.629:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7284 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:14 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = getegid() r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r2 = geteuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x0, 0x8}, 0x58, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0xf97d, 0x5, 0x0, 0xc474, 0x0, 0x2}}, 0xa0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x5) setresuid(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r4, 0x8004552d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r5 = socket(0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 16:30:14 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000085b06c8d422dbdd22dc8d6b898a4672cfd00ae0300000055aa5b7b63d8cc7d081970f827d376e3d8e9cbcb652a07c6cf4f726791a526e5fa511934c4fe3f33f1ccb3388829372f6ea39668b6d8ce4e"], 0x54}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:30:14 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x84, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) 16:30:14 executing program 5: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = getegid() r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r2 = geteuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x0, 0x8}, 0x58, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0xf97d, 0x5, 0x0, 0xc474, 0x0, 0x2}}, 0xa0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x5) setresuid(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r4, 0x8004552d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r5 = socket(0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 16:30:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16:30:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) [ 291.124682] EXT4-fs (loop2): filesystem too large to mount safely on this system 16:30:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r2, 0x0, 0x0) 16:30:15 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 16:30:15 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x84, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) 16:30:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="0f22270f606ca7baf80cf30fe6b1020066efbafc0c66ed43ed66b91e0100000f320f20d80f22d8aeb800008ed83abc1fbc1f81d90c0066f2ba5f57160fc766b9bc0208000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 291.314296] audit: type=1326 audit(1574267415.169:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7266 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:15 executing program 3: setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 16:30:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:15 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r0, 0x0, 0x17326a56bc819c21) r1 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x2) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x240040, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a2809302062c0000a84309c025244d2500080008000c0008ce3f00631f000000faa7b970caafdc1317d54400009b84136ef75afb83de44", 0x44}], 0x1}, 0x0) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) getpid() r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) 16:30:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, &(0x7f0000000180)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 291.565072] audit: type=1326 audit(1574267415.419:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7284 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:15 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) 16:30:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="35a75e0eda74a9d2"], 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x40040) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, &(0x7f00000001c0)=0xfffffffffffffd9e, 0x40000) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 16:30:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) [ 291.883505] audit: type=1400 audit(1574267415.739:50): avc: denied { create } for pid=7351 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 292.000398] protocol 88fb is buggy, dev hsr_slave_0 [ 292.006115] protocol 88fb is buggy, dev hsr_slave_1 [ 292.024281] bond0: Releasing backup interface bond_slave_1 16:30:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) [ 292.056556] audit: type=1400 audit(1574267415.769:51): avc: denied { ioctl } for pid=7351 comm="syz-executor.5" path="socket:[27734]" dev="sockfs" ino=27734 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:30:16 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) open(0x0, 0x8510afe488331d53, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000002bc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000005300)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000005380)=""/121, 0x79}, 0x2}, {{&(0x7f0000005400)=@can, 0x80, &(0x7f00000058c0), 0x0, &(0x7f0000005940)=""/109, 0x6d}}, {{&(0x7f00000059c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0}}], 0x4, 0x20, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r2) ioctl$void(0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x14}, 0x0) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) set_tid_address(0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f0000001080)=""/246) write$binfmt_script(r1, 0x0, 0xfffffffffffffdc4) 16:30:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:16 executing program 4: syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 16:30:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x801, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="5a86bd0d800f18c4313e838a7bb1a6d4971e3498bb31fefedba6a6bd37d851a200ed24976914bad188e2a39cb4bfa443882c64d754d05f724d8d5d57629da1fc88fd97c3782dd22ee056e7135a511e4db6f7d3b988df1e1b69294299affafd4345f74c692a0f86ca7149423b49bcae373948c95863d57de2a24851b5586277c0c847f8f7c3ee7f3a6ecbb65b9f10c613db9f04dc4ed9af5cee607fc83e9b1db3d1ef2ed2a91e6fc7b93c6cf6af3c18f73b9ea0ce2edb2348a0ab0d616c40f4892e110a73660afb55f8bc16f448a243fb2d564956cc5c9ec62618456705350fc7d8edc3ae2db4e62d08f9411b12a067e2c8169c08670f169e13b123ce9696c1d6808c6ea8085cd685653c3563f8ba5a9176957a72e5ed193fcccf37a7f4253ecb2e26f8a336893142e977aa85b43009b416d5b3ef2ec0ea7ec0d9917be78a38963e170eb72d40cbd66584fc1116522c18eb2b0f6606a2b21b9b6b205e44ff9b4262c2286de05ebf1693e38dbd0e9360222a9c8b1accdc847cc202298251d4e005b8c0760b0160aa2296903a6a92a68d85d1baede04b5cd88f42091687e4822e08cfcb83fa1ea127537657a3bf20dfa1b0d28f9f51cd6b266d8396715943601979cfb7fbd771c0c140577caa39b2d6df633d422e210a1ac2881920e086171163a257704d68ed30724d6d98d111d657e1dcd67acc43ffaa7f6f4969441dd1a02777e230e320b51bb807983c398a7b7f8534978725110e946ab5a61a1fc7eeca9509d3f349088458006237c4179a00339276c5591f34967cb3201126ee56e24ae56943ef80e39557fc164b252f005a8e2bcd376817048f3d4d2ee6f2b7d4b9cdef879fa8388f751f66e35a1ff59b0fead33261965be39fdf5d9bbd39a1c5966036600f4f33f52e86ad0c5f659edd41f61769321d97cbdb61d3f7aff4e79d0734a21682687e660d1e8bb8e6291c70d902cfe400a3850cda3dbc917db9f052ba1e22e6a81ef8c960533697b7c6d1bb15f19752c198105eadeea36488a832029b2996a7ab363af10f89553153cf7c7f96dd253e425c4c9c429c8c60adec6010adf40ab3cb054d75626f7138abb65ff45aea98631683fe12fbd86359b3a69ea6cb6f09b446a2fb8b1b0aea6372bc0f676a31c5c2601d491665221e267a7d2b1dcf10fa6b6488084de87daa2975534100f6492dae7fe0f7e8f2acf50fc76ff4c5961b64ab5aa611206166c3b26b1c56af8f145e661c191a1e7d8f5e33b291c6eac04db601585a39916dd021461267bf55f6a0144d36c33e61b618046ee5f0e18567798c568040d4c50ca737397cac05fdef344c8e4191cf8408c03926230687616f744531a72911656a9a5350750a76ffe51a404d823439c4a6e4d0f99ae048238ff6f7501337a411bf58103af4c313c5a829af67629916864ee819973a69566002c4e6f50ac5566a3d6aef02b850ac81ef4ea5dc426b561be189dcf5cf1c0fa3557363671b115a6fd2bd19bbd55ddf507caad347f675c305a6de92038453422678cdd41d33ae863646d76f8cbf4c8e0274b1ecd1e530cc08f767ecf3255e7113a11ec110de6301ad03aab48e4c01fa6f451c4ffc337fb720b5cb1c69cd8ae4447a241d325966229f767df196f7ca2bc71d53c47b5b788ed00e20f0336d01bea1a0db09583cb6a6d4b8b22f509314f13b149247c4bf9745640259d61e2b3381becbdebcec377a2145a46fa3934619a1974c42a6a7c8020db045c735118a17d00d5f1c7b4f9db62a684a53f12f5f39be8919a75f2a6eaa0380739250c02edc601bf94b3f32d0e00023a4daa0ffc157d93063d1a9e6988fd130a7fafb6dbba9a266a012354efb3a35b66f172194bba1d82495edc624002b6f085d7621a264075f7b7a13527f7d3167d38ffb0fe6d300d3d9049e0c1679804ac8d3d3381d79205c3bf77e64b8d633a62f7769a097aa8553cbfd3982d793dc75fd8567036734eaa8c5df4ed0969e2f0ad32a9f2f8f26dcf14e7640e77d4fa37d87c195a46c1323e7fbd718be290463c5774db8dc0a86af02b5ebcd8a8839339e9880aec2f7c088da8857783ea16ad0b8a6cbc60c413a81e310d32945d80551989ed402a256240d0362e50243ff0101937a80670e4878496cc6ad7469b113db17e1814fc2d62040bf2503a6fedf6b436f0f27aacbcc6d34da505046d981c49f6509e3de01c40548b849a4a9035010aaf53ccafb4a717732a88881e060b88235ffdb9b3f10bb7404c4681a8d3ed95ca43d2e606eb0166577cd07a42a7bb41893b7b5bba99349502a60d59dea9316dcd0eb8832c3d6f16e26a24c8a9c5ba7232d4e87b8545e6fb4b929a83f60a19de8ee4c48bb9f22d9c4143b246fb395c70b6234b1b1bca3b3e268036a1b4a5d1a2cd5d9c45f312264b8a2265bacc4e9a459d06bbddf39ac0268f8c2a4d3acdd68eb3ae1a143353c0ef8baf81fa4a775722021f06d72e730d9cb1ec65d35f05b9e3f27f10f1cc599992150d421b5a97e9f7890d1a29a719a7c4a37eb0da2b6cca567b9b0d094b0a055eb117cd3b84a6abd77b0a77268fdc9f7ffeef3a52f0c3210fbe5e50978877147dea7df048b4b50cb521d5a3a03000cd488474008a5fc30fd6fad9d4a2f8c6e6ff4328dde0f7ab7ac845f24b0c1b02fdef2c693c652e45c4b9518b75c905ca854a0295ac4a647d12ca5ae0193822e30919a108c425fc0ea57e258e3bd9ed9e81a118cdebe960585a1c958f6aabedd4186e1238fb638c23212f97235c4acc1a376b3b54107092761d79b769dad97984e9b8415dd1dda117cc0d8ff00e3267fd05688bcc3c0dd5684714561376708479c71f8a07fd86e753d14a12bf51a0da17657b6bd6d3c9d1c6eab41bcafb2a4c032acbd", @ANYPTR64]}, 0x879) 16:30:16 executing program 3: sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 292.450363] syz-executor.3 (7375) used greatest stack depth: 23984 bytes left 16:30:16 executing program 5: keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) 16:30:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x62, 0x2, 0x80, 0x0, 0x80000001}, 0xc) pipe2(0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={0x0}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff00000000) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) creat(0x0, 0x100) pipe2$9p(&(0x7f00000000c0), 0x84000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) 16:30:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000140)) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xbcb}, 0x100) syz_open_dev$media(0x0, 0xfff, 0x400) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={{0x1f, 0x2, 0x4, 0x80, 0x9f, 0x8}, 0x1}) 16:30:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@empty, @in=@remote}}, {{@in=@local}}}, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r1, 0xb03, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 16:30:16 executing program 0: r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup2(r0, r1) open(&(0x7f00000000c0)='./file1\x00', 0x41040, 0x133) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 16:30:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 16:30:16 executing program 3: open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='!', 0x1}], 0x1, 0x81805) write$apparmor_exec(r0, 0x0, 0x0) close(r0) 16:30:16 executing program 2: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0x0) 16:30:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:16 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 16:30:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="35a75e0eda74a9d2"], 0x2}, 0x1, 0x0, 0x0, 0x44044}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, 0x0, 0x40000) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 16:30:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8005, 0x0) 16:30:16 executing program 2: open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='!', 0x1}], 0x1, 0x81805) write$apparmor_exec(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:30:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 16:30:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff86, 0xa}}}}}, 0x0) 16:30:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xbb0a}, [@typed={0x8, 0x0, @fd}]}, 0x1c}}, 0x0) 16:30:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) poll(0x0, 0x0, 0x0) 16:30:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="35a75e0eda74a9d2"], 0x2}, 0x1, 0x0, 0x0, 0x44044}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, 0x0, 0x40000) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 16:30:17 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e007000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0) 16:30:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 293.615969] audit: type=1326 audit(1574267417.469:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7544 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:17 executing program 0: getrlimit(0x89e864eb8c0557fe, 0x0) 16:30:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) [ 293.743853] Unable to read inode block [ 293.759710] MINIX-fs: get root inode failed 16:30:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="0f22270f606ca7baf80cf30fe6b1020066efbafc0c66ed43ed66b91e0100000f320f20d80f22d8aeb800008ed83abc1fbc1f81d90c0066f2ba5f57160fc766b9bc0208000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20}, 0x20}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.849617] Unable to read inode block [ 293.857263] MINIX-fs: get root inode failed 16:30:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) 16:30:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000cc0000000014000200fe8000000000000000000000000000aac069ef85af5243266c36af93f559936687f8916d31e5997f928055c56605dbde7e87db29f39f1090225c8119add01bb063062a98bc0057655dc00c690f4f339f46"], 0x40}}, 0x0) 16:30:18 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) [ 294.350809] audit: type=1326 audit(1574267418.209:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7544 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 16:30:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 16:30:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:18 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) 16:30:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:18 executing program 2: request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)='bdevcgroup@\'\x00', 0xfffffffffffffffe) 16:30:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:18 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000800)='.\x00', 0xa400295c) creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$unix(0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 16:30:18 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) 16:30:19 executing program 3: 16:30:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x3}) 16:30:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x100000000098f907, 0x0, [0x100000000000000]})