syzkaller login: [ 65.327875][ T38] audit: type=1400 audit(1575107696.553:41): avc: denied { map } for pid=7867 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:56389' (ECDSA) to the list of known hosts. [ 67.144403][ T38] audit: type=1400 audit(1575107698.373:42): avc: denied { map } for pid=7877 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/30 09:54:58 fuzzer started 2019/11/30 09:54:58 dialing manager at 10.0.2.10:40921 2019/11/30 09:54:59 syscalls: 2533 2019/11/30 09:54:59 code coverage: enabled 2019/11/30 09:54:59 comparison tracing: enabled 2019/11/30 09:54:59 extra coverage: extra coverage is not supported by the kernel 2019/11/30 09:54:59 setuid sandbox: enabled 2019/11/30 09:54:59 namespace sandbox: enabled 2019/11/30 09:54:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/30 09:54:59 fault injection: enabled 2019/11/30 09:54:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/30 09:54:59 net packet injection: enabled 2019/11/30 09:54:59 net device setup: enabled 2019/11/30 09:54:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/30 09:54:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:55:10 executing program 0: [ 79.624800][ T38] audit: type=1400 audit(1575107710.853:43): avc: denied { map } for pid=7900 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=20520 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 09:55:10 executing program 1: [ 79.760076][ T7901] IPVS: ftp: loaded support on port[0] = 21 [ 79.834988][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 79.843405][ T7903] IPVS: ftp: loaded support on port[0] = 21 [ 79.875718][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.883375][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.892559][ T7901] device bridge_slave_0 entered promiscuous mode [ 79.905314][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.912413][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.920162][ T7901] device bridge_slave_1 entered promiscuous mode [ 79.941628][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.953638][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.974541][ T7901] team0: Port device team_slave_0 added [ 79.982139][ T7901] team0: Port device team_slave_1 added [ 80.073382][ T7901] device hsr_slave_0 entered promiscuous mode [ 80.111433][ T7901] device hsr_slave_1 entered promiscuous mode [ 80.172112][ T7903] chnl_net:caif_netlink_parms(): no params data found [ 80.208463][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.216036][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.224839][ T7903] device bridge_slave_0 entered promiscuous mode [ 80.235919][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.243452][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.252005][ T7903] device bridge_slave_1 entered promiscuous mode [ 80.252609][ T38] audit: type=1400 audit(1575107711.483:44): avc: denied { create } for pid=7901 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 80.284333][ T38] audit: type=1400 audit(1575107711.483:45): avc: denied { write } for pid=7901 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 80.284350][ T38] audit: type=1400 audit(1575107711.483:46): avc: denied { read } for pid=7901 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 80.341804][ T7901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.417405][ T7901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.474623][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.485120][ T7901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.543862][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.553356][ T7901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.636144][ T7903] team0: Port device team_slave_0 added [ 80.645655][ T7903] team0: Port device team_slave_1 added [ 80.743086][ T7903] device hsr_slave_0 entered promiscuous mode [ 80.801466][ T7903] device hsr_slave_1 entered promiscuous mode [ 80.851508][ T7903] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.860449][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.867965][ T7901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.875256][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.882335][ T7901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.893124][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.900903][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.930265][ T7903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.004673][ T7903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.094740][ T7903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.153074][ T7903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.267732][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.283515][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.291564][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.302486][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.313251][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.321610][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.330035][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.337251][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.347407][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.356443][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.365018][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.372116][ T7909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.388327][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.397659][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.409342][ T166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.420384][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.428915][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.442416][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.453191][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.462466][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.470905][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.479317][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.488852][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.501994][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.510505][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.519032][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.526147][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.535129][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.543626][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.551958][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.560393][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.568826][ T3113] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.575974][ T3113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.585162][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.593473][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.602845][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.614828][ T7901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.623711][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.641829][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.650348][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.660241][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.668945][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.678051][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.686523][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.694728][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.706219][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.713982][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.722478][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.734513][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.748112][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.755610][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.767048][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.774922][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.784374][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.795546][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.805271][ T38] audit: type=1400 audit(1575107713.033:47): avc: denied { associate } for pid=7901 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 09:55:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 09:55:13 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980)='/dev/ptmX\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x801, 0x0) listen(r2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={r2, 0x0, 0x100000000, 0x5, 0x7ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 81.966286][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.976454][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.984245][ T7915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.000516][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.009461][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.017020][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.018576][ T38] audit: type=1400 audit(1575107713.253:48): avc: denied { open } for pid=7917 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 09:55:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 82.049165][ T38] audit: type=1400 audit(1575107713.253:49): avc: denied { kernel } for pid=7917 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 82.065712][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.066744][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:55:13 executing program 0: [ 82.066821][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:55:13 executing program 0: 09:55:14 executing program 0: 09:55:14 executing program 1: 09:55:14 executing program 0: 09:55:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) 09:55:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r0, &(0x7f0000000380)="240000001a00110214f9f407000904001100000000020000000200000800040003000000", 0x24) 09:55:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) 09:55:14 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) [ 84.456517][ T7975] IPVS: ftp: loaded support on port[0] = 21 [ 84.503181][ T7905] tipc: TX() has been purged, node left! [ 84.625045][ T7975] chnl_net:caif_netlink_parms(): no params data found [ 84.649976][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.657669][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.666439][ T7975] device bridge_slave_0 entered promiscuous mode [ 84.674363][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.681776][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.689565][ T7975] device bridge_slave_1 entered promiscuous mode [ 84.706247][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.717271][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.735762][ T7975] team0: Port device team_slave_0 added [ 84.742743][ T7975] team0: Port device team_slave_1 added [ 84.823029][ T7975] device hsr_slave_0 entered promiscuous mode [ 84.871566][ T7975] device hsr_slave_1 entered promiscuous mode [ 84.921340][ T7975] debugfs: Directory 'hsr0' with parent '/' already present! [ 84.937959][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.945047][ T7975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.952048][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.958753][ T7975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.992358][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.005195][ T3120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.014646][ T3120] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.022813][ T3120] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.030655][ T3120] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 85.044643][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.054617][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.064443][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.071688][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.081465][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.089704][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.096724][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.112721][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.121251][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.131707][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.145664][ T7975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.156616][ T7975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.168373][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.176813][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.186534][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.217308][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.225109][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.237114][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:16 executing program 1: 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 09:55:16 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 09:55:16 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\t']) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:17 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) 09:55:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) 09:55:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) [ 86.176187][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.186585][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.194316][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.204420][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.212048][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.212074][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.212320][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.227289][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.227302][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.227315][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.227328][ T3120] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.267761][ T3120] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz1 09:55:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980)='/dev/ptmX\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 09:55:17 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x42, 0xffffff1f, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420800a74, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000007000/0x8000)=nil, 0x8000, 0x0, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 09:55:17 executing program 0: 09:55:17 executing program 0: 09:55:17 executing program 0: [ 86.504714][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 [ 86.517895][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 [ 86.531315][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 [ 86.544605][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 [ 86.557547][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 [ 86.570588][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8057 comm=syz-executor.1 09:55:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) getpid() ptrace(0xffffffffffffffff, 0x0) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000006c46f0006000000070000003c9f0300000000000000c208010000000000000100000000676800000000000000000000007fffff"], 0x48) 09:55:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='lp\x00', 0x3) syz_genetlink_get_family_id$tipc2(0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x1f3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r4, 0x8, 0x3a, 0x10b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xffffffffffffff4d) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) ftruncate(r3, 0x10099b3) sendfile(r1, r3, 0x0, 0x88000fc000000) [ 86.608597][ T8068] SELinux: failed to load policy [ 86.622859][ T8073] SELinux: failed to load policy 09:55:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) 09:55:17 executing program 0: [ 86.656567][ T8079] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:55:17 executing program 0: 09:55:18 executing program 0: 09:55:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='lp\x00', 0x3) syz_genetlink_get_family_id$tipc2(0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x1f3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r4, 0x8, 0x3a, 0x10b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xffffffffffffff4d) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) ftruncate(r3, 0x10099b3) sendfile(r1, r3, 0x0, 0x88000fc000000) 09:55:18 executing program 0: 09:55:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='lp\x00', 0x3) syz_genetlink_get_family_id$tipc2(0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x1f3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r4, 0x8, 0x3a, 0x10b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xffffffffffffff4d) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) ftruncate(r3, 0x10099b3) sendfile(r1, r3, 0x0, 0x88000fc000000) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 87.494475][ T7905] device bridge_slave_1 left promiscuous mode [ 87.501314][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state 09:55:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='lp\x00', 0x3) syz_genetlink_get_family_id$tipc2(0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x1f3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r4, 0x8, 0x3a, 0x10b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xffffffffffffff4d) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) ftruncate(r3, 0x10099b3) sendfile(r1, r3, 0x0, 0x88000fc000000) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) [ 87.554003][ T7905] device bridge_slave_0 left promiscuous mode [ 87.560272][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) pipe(0x0) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:18 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:19 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2008045) 09:55:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x2008045) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) [ 88.112177][ T7905] device hsr_slave_0 left promiscuous mode 09:55:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 1: syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) [ 88.171765][ T7905] device hsr_slave_1 left promiscuous mode 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) [ 88.224936][ T7905] team0 (unregistering): Port device team_slave_1 removed [ 88.238860][ T7905] team0 (unregistering): Port device team_slave_0 removed [ 88.256160][ T7905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) [ 88.316232][ T7905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 09:55:19 executing program 0: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(0x0, 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(0x0, 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 0: r0 = open(0x0, 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) [ 88.459399][ T7905] bond0 (unregistering): Released all slaves 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:19 executing program 0: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:19 executing program 0: open(&(0x7f00000001c0)='./file1\x00', 0x40140, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0xc080661a, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() epoll_create1(0x0) getpgid(0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[]}}, 0x20004850) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8910}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) [ 88.723600][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.738374][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.748310][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.789913][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.801558][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.810197][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:20 executing program 0: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) r2 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$FUSE(r1, &(0x7f00000004c0), 0x1000) sendfile(r2, r1, 0x0, 0xffff7ffc) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 09:55:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x23, 0x845, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) [ 88.892637][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) [ 88.903562][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:55:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_script(r0, 0x0, 0x0) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, 0x0, 0x0) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, 0x0, 0x0) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, 0x0, 0x0) 09:55:20 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) geteuid() socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe2(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x18, &(0x7f0000000140)=@assoc_value, 0x8) 09:55:20 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000140)={@dev, @empty, [{}], {@generic={0x8100}}}, 0x0) 09:55:20 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) [ 89.548302][ T38] audit: type=1804 audit(1575107720.773:50): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir529169570/syzkaller.Gux3R9/79/bus" dev="sda1" ino=16574 res=1 09:55:20 executing program 1: syz_emit_ethernet(0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x400001f4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000100)=0x44e) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x562f, 0x0, 0x9ef, 0x1, 0x60, 0xd015faac4ad20153, 0x1, 0x0, r2}, {0x20, 0x80a2, 0x5, 0x1, 0x20, 0x100000001, 0x0, 0xcb}, {0x7, 0x1, 0x3, 0x7}, 0xbb5e, 0x6e6bbc, 0x1, 0x0, 0x1, 0x8bceafc6b446b5e3}, {{@in=@remote, 0x0, 0x2b}, 0x2, @in=@local, 0x3506, 0x3, 0x3, 0x1, 0x7, 0x1, 0x5}}, 0xe8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f00000005c0)=""/223, 0xfc61) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000400)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000080)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x5) [ 89.697031][ T8416] FAT-fs (loop1): invalid media value (0x00) [ 89.703592][ T8416] FAT-fs (loop1): Can't find a valid FAT filesystem [ 90.211133][ C0] hrtimer: interrupt took 25910 ns 09:56:17 executing program 1: syz_emit_ethernet(0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x400001f4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000100)=0x44e) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x562f, 0x0, 0x9ef, 0x1, 0x60, 0xd015faac4ad20153, 0x1, 0x0, r2}, {0x20, 0x80a2, 0x5, 0x1, 0x20, 0x100000001, 0x0, 0xcb}, {0x7, 0x1, 0x3, 0x7}, 0xbb5e, 0x6e6bbc, 0x1, 0x0, 0x1, 0x8bceafc6b446b5e3}, {{@in=@remote, 0x0, 0x2b}, 0x2, @in=@local, 0x3506, 0x3, 0x3, 0x1, 0x7, 0x1, 0x5}}, 0xe8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f00000005c0)=""/223, 0xfc61) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000400)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000080)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x5) [ 146.489145][ T8429] FAT-fs (loop1): invalid media value (0x00) [ 146.496649][ T8429] FAT-fs (loop1): Can't find a valid FAT filesystem [ 246.941505][ T1113] INFO: task syz-executor.0:8406 blocked for more than 144 seconds. [ 246.949870][ T1113] Not tainted 5.4.0-syzkaller #0 [ 246.957089][ T1113] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.967425][ T1113] syz-executor.0 D28160 8406 7901 0x00004004 [ 246.974385][ T1113] Call Trace: [ 246.977928][ T1113] __schedule+0x8e1/0x1f30 [ 246.982666][ T1113] ? __sched_text_start+0x8/0x8 [ 246.987953][ T1113] ? lock_downgrade+0x920/0x920 [ 246.993014][ T1113] ? rwlock_bug.part.0+0x90/0x90 [ 246.998145][ T1113] schedule+0xdc/0x2b0 [ 247.002525][ T1113] schedule_preempt_disabled+0x13/0x20 [ 247.008291][ T1113] __mutex_lock+0x7ab/0x13c0 [ 247.013231][ T1113] ? perf_event_ctx_lock_nested+0x296/0x4c0 [ 247.019305][ T1113] ? mutex_trylock+0x2f0/0x2f0 [ 247.024398][ T1113] ? find_held_lock+0x35/0x130 [ 247.029187][ T1113] ? perf_event_ctx_lock_nested+0x262/0x4c0 [ 247.035420][ T1113] ? lock_downgrade+0x920/0x920 [ 247.040606][ T1113] mutex_lock_nested+0x16/0x20 [ 247.045904][ T1113] ? mutex_lock_nested+0x16/0x20 [ 247.051085][ T1113] perf_event_ctx_lock_nested+0x296/0x4c0 [ 247.057186][ T1113] ? __perf_event_read+0xe10/0xe10 [ 247.062740][ T1113] perf_event_release_kernel+0x121/0xef0 [ 247.068456][ T1113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.075247][ T1113] ? __perf_event_exit_context+0x170/0x170 [ 247.081290][ T1113] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 247.087893][ T1113] perf_release+0x37/0x50 [ 247.092765][ T1113] __fput+0x2ff/0x890 [ 247.096848][ T1113] ? perf_event_release_kernel+0xef0/0xef0 [ 247.102768][ T1113] ____fput+0x16/0x20 [ 247.106939][ T1113] task_work_run+0x145/0x1c0 [ 247.112094][ T1113] exit_to_usermode_loop+0x316/0x380 [ 247.117589][ T1113] do_syscall_64+0x676/0x790 [ 247.122554][ T1113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.128688][ T1113] RIP: 0033:0x413d81 [ 247.132835][ T1113] Code: Bad RIP value. [ 247.137100][ T1113] RSP: 002b:00007ffd21138460 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 247.146023][ T1113] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413d81 [ 247.154541][ T1113] RDX: 0000000000000000 RSI: 0000000000000c65 RDI: 0000000000000004 [ 247.162969][ T1113] RBP: 000000000071c980 R08: 00000000e1114c65 R09: 00000000e1114c69 [ 247.171595][ T1113] R10: 00007ffd21138590 R11: 0000000000000293 R12: 0000000000000001 [ 247.180021][ T1113] R13: 000000000071c980 R14: 00000000007226b8 R15: 00007ffd21138570 [ 247.189382][ T1113] [ 247.189382][ T1113] Showing all locks held in the system: [ 247.197657][ T1113] 1 lock held by khungtaskd/1113: [ 247.203230][ T1113] #0: ffffffff895a4080 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 247.213192][ T1113] 1 lock held by rsyslogd/7719: [ 247.218200][ T1113] #0: ffff888023200860 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 247.227082][ T1113] 2 locks held by getty/7843: [ 247.231963][ T1113] #0: ffff8880205ea090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.241472][ T1113] #1: ffffc900040022e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.251379][ T1113] 2 locks held by getty/7844: [ 247.256413][ T1113] #0: ffff888024b01090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.265670][ T1113] #1: ffffc9000401a2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.275582][ T1113] 2 locks held by getty/7845: [ 247.280482][ T1113] #0: ffff88802997f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.289688][ T1113] #1: ffffc900040122e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.299659][ T1113] 2 locks held by getty/7846: [ 247.304679][ T1113] #0: ffff888025a85090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.314024][ T1113] #1: ffffc9000401e2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.323943][ T1113] 2 locks held by getty/7847: [ 247.328932][ T1113] #0: ffff88802a9eb090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.338317][ T1113] #1: ffffc900040222e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.348532][ T1113] 2 locks held by getty/7848: [ 247.353693][ T1113] #0: ffff88801455c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.364274][ T1113] #1: ffffc9000400e2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.377711][ T1113] 2 locks held by getty/7849: [ 247.384727][ T1113] #0: ffff888020219090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 247.397247][ T1113] #1: ffffc900026f22e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 247.407626][ T1113] 3 locks held by kworker/u16:2/7905: [ 247.413392][ T1113] #0: ffff88802c7e4d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x88b/0x1740 [ 247.424014][ T1113] #1: ffff888072ac7dc0 (net_cleanup_work){+.+.}, at: process_one_work+0x8c1/0x1740 [ 247.434118][ T1113] #2: ffffffff8a087e08 (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0xaf0 [ 247.444459][ T1113] 1 lock held by syz-executor.0/8406: [ 247.450016][ T1113] #0: ffff88802c54b8a0 (&ctx->mutex){+.+.}, at: perf_event_ctx_lock_nested+0x296/0x4c0 [ 247.460244][ T1113] 3 locks held by syz-executor.0/8408: [ 247.465960][ T1113] [ 247.468463][ T1113] ============================================= [ 247.468463][ T1113] [ 247.477353][ T1113] NMI backtrace for cpu 1 [ 247.481915][ T1113] CPU: 1 PID: 1113 Comm: khungtaskd Not tainted 5.4.0-syzkaller #0 [ 247.489955][ T1113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 247.491866][ T1113] Call Trace: [ 247.491866][ T1113] dump_stack+0x197/0x210 [ 247.491866][ T1113] nmi_cpu_backtrace.cold+0x70/0xb2 [ 247.491866][ T1113] ? vprintk_func+0x86/0x189 [ 247.491866][ T1113] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 247.491866][ T1113] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 247.491866][ T1113] arch_trigger_cpumask_backtrace+0x14/0x20 [ 247.491866][ T1113] watchdog+0xb11/0x10c0 [ 247.491866][ T1113] kthread+0x361/0x430 [ 247.491866][ T1113] ? reset_hung_task_detector+0x30/0x30 [ 247.491866][ T1113] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 247.491866][ T1113] ret_from_fork+0x24/0x30 [ 247.563288][ T1113] Sending NMI from CPU 1 to CPUs 0,2-3: [ 247.569295][ C3] NMI backtrace for cpu 3 skipped: idling at native_safe_halt+0xe/0x10 [ 247.569309][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 247.569845][ C2] NMI backtrace for cpu 2 [ 247.569850][ C2] CPU: 2 PID: 8408 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 247.569855][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 247.569857][ C2] RIP: 0010:native_write_msr+0x6/0x30 [ 247.569865][ C2] Code: d0 c3 0f 21 d8 c3 0f 21 f0 c3 0f 0b 0f 1f 84 00 00 00 00 00 0f 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 89 f9 89 f0 0f 30 <0f> 1f 44 00 00 c3 55 48 c1 e2 20 89 f6 48 89 e5 48 09 d6 31 d2 e8 [ 247.569868][ C2] RSP: 0018:ffff88802d409b48 EFLAGS: 00000082 [ 247.569873][ C2] RAX: 000000009441207a RBX: 0000000000000000 RCX: 00000000000006e0 [ 247.569876][ C2] RDX: 0000000000000075 RSI: 000000009441207a RDI: 00000000000006e0 [ 247.569880][ C2] RBP: ffff88802d409b60 R08: ffff888071a99200 R09: ffff888071a99a90 [ 247.569883][ C2] R10: fffffbfff146dba0 R11: ffffffff8a36dd07 R12: ffff88802d4227c0 [ 247.569887][ C2] R13: 00000000000000fa R14: 0000000000000000 R15: 0000000000000000 [ 247.569890][ C2] FS: 00007fa9578a7700(0000) GS:ffff88802d400000(0000) knlGS:0000000000000000 [ 247.569893][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.569897][ C2] CR2: ffffffffff600400 CR3: 00000000722b0000 CR4: 00000000003406e0 [ 247.569900][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.569904][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.569905][ C2] Call Trace: [ 247.569907][ C2] [ 247.569909][ C2] ? lapic_next_deadline+0x4d/0x80 [ 247.569912][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.569915][ C2] clockevents_program_event+0x25c/0x370 [ 247.569917][ C2] tick_program_event+0xb4/0x130 [ 247.569919][ C2] hrtimer_interrupt+0x369/0x770 [ 247.569922][ C2] smp_apic_timer_interrupt+0x160/0x610 [ 247.569924][ C2] apic_timer_interrupt+0xf/0x20 [ 247.569926][ C2] RIP: 0010:kmem_cache_free+0xab/0x320 [ 247.569934][ C2] Code: e8 ba 26 00 00 84 c0 74 77 41 f7 c6 00 02 00 00 74 4f e8 08 a4 c8 ff 48 83 3d 58 70 a1 07 00 0f 84 fa 01 00 00 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 8b 6d 08 0f 1f 44 00 00 65 8b 05 38 ef 4f 7e 83 [ 247.569936][ C2] RSP: 0018:ffff88802d409d70 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 247.569942][ C2] RAX: 0000000000000007 RBX: ffff888026f25580 RCX: 0000000000000002 [ 247.569945][ C2] RDX: 0000000000000000 RSI: ffff888071a99ae8 RDI: 0000000000000282 [ 247.569949][ C2] RBP: ffff88802d409d90 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 247.569952][ C2] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff888078642e00 [ 247.569955][ C2] R13: ffffffff860de8de R14: 0000000000000282 R15: ffff888026f255b8 [ 247.569958][ C2] ? apic_timer_interrupt+0xa/0x20 [ 247.569960][ C2] ? dst_destroy+0x29e/0x3c0 [ 247.569962][ C2] dst_destroy+0x29e/0x3c0 [ 247.569964][ C2] ? dst_destroy+0x3c0/0x3c0 [ 247.569966][ C2] dst_destroy_rcu+0x16/0x19 [ 247.569968][ C2] rcu_core+0x570/0x1540 [ 247.569971][ C2] ? __rcu_read_unlock+0x6b0/0x6b0 [ 247.569973][ C2] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 247.569976][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 247.569978][ C2] rcu_core_si+0x9/0x10 [ 247.569980][ C2] __do_softirq+0x262/0x98c [ 247.569983][ C2] ? sched_clock_cpu+0x14e/0x1b0 [ 247.569985][ C2] irq_exit+0x19b/0x1e0 [ 247.569987][ C2] smp_apic_timer_interrupt+0x1a3/0x610 [ 247.569989][ C2] apic_timer_interrupt+0xf/0x20 [ 247.569991][ C2] [ 247.569993][ C2] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 247.570001][ C2] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 247.570003][ C2] RSP: 0018:ffff888071b1fa40 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 247.570009][ C2] RAX: 1ffffffff12a668d RBX: ffff888071a99200 RCX: 0000000000000006 [ 247.570012][ C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888071a99a94 [ 247.570016][ C2] RBP: ffff888071b1fa48 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 247.570019][ C2] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d437380 [ 247.570022][ C2] R13: ffff88802c5e86c0 R14: ffff888020e2c700 R15: 0000000000000001 [ 247.570025][ C2] finish_task_switch+0x147/0x750 [ 247.570027][ C2] ? finish_task_switch+0x119/0x750 [ 247.570029][ C2] __schedule+0x8e9/0x1f30 [ 247.570031][ C2] ? __sched_text_start+0x8/0x8 [ 247.570034][ C2] ? preempt_schedule_irq+0x8d/0x160 [ 247.570036][ C2] ? lockdep_hardirqs_on+0x421/0x5e0 [ 247.570039][ C2] ? trace_hardirqs_on+0x67/0x240 [ 247.570041][ C2] preempt_schedule_irq+0xb5/0x160 [ 247.570043][ C2] retint_kernel+0x1b/0x2b [ 247.570046][ C2] RIP: 0010:perf_install_in_context+0x308/0x5a0 [ 247.570053][ C2] Code: 0f 84 9f 01 00 00 e8 c7 e9 e7 ff 4c 89 ff e8 af 15 2d 06 e8 ba e9 e7 ff 4c 89 e7 4c 89 ea 48 c7 c6 c0 85 8d 81 e8 f8 8c fe ff <31> ff 41 89 c4 89 c6 e8 1c eb e7 ff 45 85 e4 74 39 e8 92 e9 e7 ff [ 247.570056][ C2] RSP: 0018:ffff888071b1fc68 EFLAGS: 00010286 ORIG_RAX: ffffffffffffff13 [ 247.570062][ C2] RAX: 0000000000000000 RBX: 1ffff110058a9728 RCX: ffffc9000409c000 [ 247.570065][ C2] RDX: 0000000000040000 RSI: ffffffff818b8290 RDI: 0000000000000005 [ 247.570069][ C2] RBP: ffff888071b1fd30 R08: ffff888071a99200 R09: fffffbfff15d29b9 [ 247.570072][ C2] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff888071a99200 [ 247.570075][ C2] R13: ffff888026560000 R14: ffff88802c54b800 R15: ffff88802c54b808 [ 247.570078][ C2] ? task_function_call+0x120/0x180 [ 247.570080][ C2] ? perf_install_in_context+0x308/0x5a0 [ 247.570082][ C2] ? list_add_event+0xed0/0xed0 [ 247.570085][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.570088][ C2] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 247.570091][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.570093][ C2] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 247.570096][ C2] ? perf_event_set_output+0x4e0/0x4e0 [ 247.570098][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.570101][ C2] ? put_timespec64+0xda/0x140 [ 247.570103][ C2] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.570106][ C2] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.570108][ C2] ? do_syscall_64+0x26/0x790 [ 247.570111][ C2] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.570113][ C2] ? do_syscall_64+0x26/0x790 [ 247.570115][ C2] __x64_sys_perf_event_open+0xbe/0x150 [ 247.570117][ C2] do_syscall_64+0xfa/0x790 [ 247.570120][ C2] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.570122][ C2] RIP: 0033:0x45a759 [ 247.570129][ C2] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.570132][ C2] RSP: 002b:00007fa9578a6c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 247.570137][ C2] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 247.570141][ C2] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200001c0 [ 247.570144][ C2] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 247.570147][ C2] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa9578a76d4 [ 247.570151][ C2] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 247.570210][ T1113] Kernel panic - not syncing: hung_task: blocked tasks [ 248.221355][ T1113] CPU: 1 PID: 1113 Comm: khungtaskd Not tainted 5.4.0-syzkaller #0 [ 248.221355][ T1113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 248.221355][ T1113] Call Trace: [ 248.221355][ T1113] dump_stack+0x197/0x210 [ 248.221355][ T1113] panic+0x2e3/0x75c [ 248.221355][ T1113] ? add_taint.cold+0x16/0x16 [ 248.221355][ T1113] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 248.221355][ T1113] ? ___preempt_schedule+0x16/0x18 [ 248.221355][ T1113] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 248.221355][ T1113] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 248.221355][ T1113] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 248.221355][ T1113] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 248.221355][ T1113] watchdog+0xb22/0x10c0 [ 248.221355][ T1113] kthread+0x361/0x430 [ 248.221355][ T1113] ? reset_hung_task_detector+0x30/0x30 [ 248.221355][ T1113] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 248.221355][ T1113] ret_from_fork+0x24/0x30 [ 248.221355][ T1113] Kernel Offset: disabled [ 248.221355][ T1113] Rebooting in 86400 seconds..