gistering): Released all slaves 08:40:35 executing program 3: 08:40:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) r2 = dup(r1) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r2, 0x0) 08:40:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {0x0}], 0x2}, 0x46) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0085e) shutdown(r1, 0x0) shutdown(r2, 0x0) 08:40:35 executing program 3: 08:40:35 executing program 3: 08:40:35 executing program 3: 08:40:35 executing program 3: [ 418.350216] IPVS: ftp: loaded support on port[0] = 21 [ 418.665477] chnl_net:caif_netlink_parms(): no params data found [ 418.697727] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.704216] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.711444] device bridge_slave_0 entered promiscuous mode [ 418.718075] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.724785] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.731802] device bridge_slave_1 entered promiscuous mode [ 418.748925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 418.757923] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 418.776438] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 418.783711] team0: Port device team_slave_0 added [ 418.789016] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 418.796224] team0: Port device team_slave_1 added [ 418.802256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 418.809387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 418.863643] device hsr_slave_0 entered promiscuous mode [ 418.900335] device hsr_slave_1 entered promiscuous mode [ 418.960615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 418.967484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 418.979716] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.986113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.992792] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.999143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.026580] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 419.033509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.042034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 419.049959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.057672] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.064846] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.075400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 419.081788] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.089892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.097589] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.103968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.113658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.121480] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.127819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.147517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.157286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.177279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 419.184764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.195154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.202985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.210640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.218114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.224978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 419.237656] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 419.248944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.650609] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:40:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:39 executing program 3: 08:40:39 executing program 1: 08:40:39 executing program 2: 08:40:39 executing program 5: 08:40:39 executing program 0: gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:40:39 executing program 2: 08:40:39 executing program 3: 08:40:39 executing program 1: 08:40:39 executing program 5: 08:40:39 executing program 3: 08:40:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:40 executing program 5: 08:40:40 executing program 1: 08:40:40 executing program 2: 08:40:40 executing program 3: 08:40:40 executing program 5: [ 421.040423] device bridge_slave_1 left promiscuous mode [ 421.045982] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.091152] device bridge_slave_0 left promiscuous mode [ 421.096674] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.213297] device hsr_slave_1 left promiscuous mode 08:40:40 executing program 0: gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:40:40 executing program 2: 08:40:40 executing program 1: 08:40:40 executing program 5: 08:40:40 executing program 3: 08:40:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 421.274179] device hsr_slave_0 left promiscuous mode 08:40:40 executing program 2: 08:40:40 executing program 1: 08:40:40 executing program 5: [ 421.325844] team0 (unregistering): Port device team_slave_1 removed 08:40:40 executing program 3: 08:40:40 executing program 2: [ 421.404591] team0 (unregistering): Port device team_slave_0 removed 08:40:40 executing program 1: [ 421.493957] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 421.592123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 421.698370] bond0 (unregistering): Released all slaves 08:40:41 executing program 0: gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:40:41 executing program 5: 08:40:41 executing program 3: 08:40:41 executing program 2: 08:40:41 executing program 1: [ 424.220193] IPVS: ftp: loaded support on port[0] = 21 [ 424.575341] chnl_net:caif_netlink_parms(): no params data found [ 424.608439] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.615928] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.623425] device bridge_slave_0 entered promiscuous mode [ 424.630637] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.637056] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.644248] device bridge_slave_1 entered promiscuous mode [ 424.662245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 424.671583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 424.687427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 424.695406] team0: Port device team_slave_0 added [ 424.701141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 424.708774] team0: Port device team_slave_1 added [ 424.714368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 424.721629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 424.802186] device hsr_slave_0 entered promiscuous mode [ 424.840343] device hsr_slave_1 entered promiscuous mode [ 424.900546] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 424.907458] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 424.921535] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.927878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.934550] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.940952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.968834] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 424.975229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.983306] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 424.992314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.999963] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.007336] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.016616] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 425.022807] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.031070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.038631] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.045036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.054914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.062529] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.068866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.082581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.090677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.099784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.110448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.119720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.128517] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 425.134805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.147655] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 425.157350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.570860] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:40:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:45 executing program 1: 08:40:45 executing program 3: 08:40:45 executing program 5: 08:40:45 executing program 2: 08:40:45 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:45 executing program 1: 08:40:45 executing program 3: 08:40:45 executing program 5: 08:40:45 executing program 2: 08:40:45 executing program 1: 08:40:45 executing program 3: 08:40:45 executing program 5: 08:40:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:45 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:45 executing program 2: 08:40:45 executing program 3: 08:40:45 executing program 1: 08:40:45 executing program 5: 08:40:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x100000001, 0x9, 0xbb66, 0x7f, 0x2, 0x0, 'syz1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = epoll_create1(0x80000) r1 = socket(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffbd, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r2, &(0x7f0000008a80), 0x400000000000328, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x90000000}) 08:40:45 executing program 3: poll(&(0x7f0000000140), 0x2280, 0x4b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x896, 0x0, 0x0, 0x800e00866) fcntl$getown(r0, 0x5) ppoll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:45 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c653092552d4002c779f464bd43082bb99fcac413da9d447a4341107b3f4136651d375793666c7ec004"], 0x31) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:40:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 08:40:45 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:45 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c653092552d4002c779f464bd43082bb99fcac413da9d447a4341107b3f4136651d375793666c7ec004"], 0x31) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:40:45 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f0000000000)={0x0, {{0x10}}}, 0x90) recvfrom$inet(r0, 0x0, 0x2fd2e98b60c2dd14, 0x0, 0x0, 0x800e00660) shutdown(r0, 0x0) 08:40:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8001000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) [ 426.670431] device bridge_slave_1 left promiscuous mode [ 426.676173] bridge0: port 2(bridge_slave_1) entered disabled state 08:40:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0xe1) r2 = dup(r1) shutdown(r2, 0x0) 08:40:46 executing program 2: poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e009e0) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 426.702120] encrypted_key: key user:syz not found [ 426.736394] device bridge_slave_0 left promiscuous mode [ 426.754772] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.882718] device hsr_slave_1 left promiscuous mode [ 426.924050] device hsr_slave_0 left promiscuous mode [ 426.964264] team0 (unregistering): Port device team_slave_1 removed [ 426.982153] team0 (unregistering): Port device team_slave_0 removed [ 426.998116] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 427.058384] bond0 (unregistering): Releasing backup interface bond_slave_0 08:40:46 executing program 5: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) [ 427.141911] bond0 (unregistering): Released all slaves 08:40:46 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x5de0744d, 0x0, 0x0, 0x800e0075f) shutdown(r0, 0x0) 08:40:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x70742a85}}, &(0x7f0000000240)={0x1200000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x80008, 0x1) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x1}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000640)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 08:40:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x70742a85}}, &(0x7f0000000240)={0x1200000000000000, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x80008, 0x1) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x0, 0x0, 0x1}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000640)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 427.239873] binder_alloc: 13944: binder_alloc_buf, no vma 08:40:46 executing program 3: r0 = gettid() setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setpriority(0xc208d536fd8f4cf, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x401, 0x6) tkill(r0, 0x14) [ 427.317449] binder_alloc: 13958: binder_alloc_buf, no vma [ 429.450238] IPVS: ftp: loaded support on port[0] = 21 [ 429.756574] chnl_net:caif_netlink_parms(): no params data found [ 429.789078] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.795580] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.802489] device bridge_slave_0 entered promiscuous mode [ 429.809039] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.815785] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.822876] device bridge_slave_1 entered promiscuous mode [ 429.840206] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 429.848834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 429.865682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 429.873629] team0: Port device team_slave_0 added [ 429.878968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 429.886181] team0: Port device team_slave_1 added [ 429.891558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 429.898745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 429.963831] device hsr_slave_0 entered promiscuous mode [ 430.010346] device hsr_slave_1 entered promiscuous mode [ 430.080759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 430.087694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 430.100080] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.106471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.113188] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.119542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.147195] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 430.153762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.162683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 430.171724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.178830] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.185689] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.195980] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 430.202423] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.211296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.218832] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.225228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.235768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.243411] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.249764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.263690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.275537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.282811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.296058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.306206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.316864] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 430.324057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.331752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.339547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.353235] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 430.363020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.740715] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:40:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e008c0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/53, 0x35}, {0x0}, {0x0}], 0x3) shutdown(r1, 0x0) 08:40:50 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:50 executing program 3: accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e009e0) poll(&(0x7f0000000000)=[{r0, 0x22}], 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x70742a85}}, &(0x7f0000000240)={0x1200, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 08:40:50 executing program 5: accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e009e0) poll(&(0x7f0000000000)=[{r0, 0x22}], 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:40:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:40:51 executing program 1: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e009e0) ppoll(&(0x7f0000000080)=[{r0}, {}, {r0}], 0x3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) poll(&(0x7f00000001c0)=[{r1, 0x102}], 0x1, 0xe1) r2 = dup(r1) shutdown(r2, 0x0) 08:40:51 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:51 executing program 3: syz_emit_ethernet(0x23, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x2, 0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) 08:40:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f00000001c0)=""/238, 0xee) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) r2 = dup(r1) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/219, 0xdb}, {0x0}], 0x2) shutdown(r2, 0x0) 08:40:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f00000001c0)=""/238, 0xee) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) r2 = dup(r1) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/219, 0xdb}], 0x1) shutdown(r2, 0x0) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x88001) sendfile(r0, r2, 0x0, 0x800000000024) 08:40:52 executing program 1: poll(&(0x7f0000000140), 0x2280, 0x4b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x896, 0x0, 0x0, 0x800e00866) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x1}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 432.648317] audit: type=1400 audit(1561538452.053:78): avc: denied { create } for pid=14077 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 432.697806] audit: type=1400 audit(1561538452.083:79): avc: denied { write } for pid=14077 comm="syz-executor.3" path="socket:[52385]" dev="sockfs" ino=52385 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 08:40:52 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") close(r0) 08:40:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000a00)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f945b92f7daadafe3191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f4770000000000f300000000000000195e230000000000", 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) 08:40:52 executing program 3: r0 = gettid() r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x3f}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={r2, 0x10000, 0x6, 0x3, 0x6cc, 0x8}, 0x14) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) lsetxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000580)=@sha1={0x1, "9fdf885a8f4389f3c4fc15341fa6af5778f14dfb"}, 0x15, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) symlink(&(0x7f0000001000)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='ip6_vti0\x00', 0x10) capget(&(0x7f0000000140)={0x39980732}, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x80000000, &(0x7f0000000180)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00005b1000/0x3000)=nil, 0x3000, 0x9, 0x3ff, 0x40002) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x3, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000280)=""/68, 0x44) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000340)={@mcast1}, &(0x7f0000000380)=0x14) 08:40:52 executing program 1: poll(&(0x7f0000000200)=[{}], 0x1, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) poll(&(0x7f0000000000)=[{r0, 0xc0}], 0x1, 0x0) shutdown(r0, 0x0) 08:40:52 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup2(r1, r0) 08:40:52 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c653092552d4002c779f464bd43082bb99fcac413da9d447a4341107b"], 0x24) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 433.331028] device bridge_slave_1 left promiscuous mode [ 433.336609] bridge0: port 2(bridge_slave_1) entered disabled state 08:40:52 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 433.410956] device bridge_slave_0 left promiscuous mode [ 433.417751] bridge0: port 1(bridge_slave_0) entered disabled state 08:40:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = epoll_create1(0x80000) r1 = socket(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffbd, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xf, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r2, &(0x7f0000008a80), 0x400000000000328, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x90000000}) fcntl$setlease(r3, 0x400, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) finit_module(r2, &(0x7f0000000180)='bridge_slave_1\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 08:40:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 08:40:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c653092552d4002c779f464bd43082bb99fcac413da9d447a4341107b"], 0x24) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:40:52 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) [ 433.742794] device hsr_slave_1 left promiscuous mode [ 433.799483] device hsr_slave_0 left promiscuous mode [ 433.856906] team0 (unregistering): Port device team_slave_1 removed [ 433.883430] team0 (unregistering): Port device team_slave_0 removed [ 433.913959] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 433.974357] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 434.053580] bond0 (unregistering): Released all slaves [ 436.420237] IPVS: ftp: loaded support on port[0] = 21 [ 436.725926] chnl_net:caif_netlink_parms(): no params data found [ 436.758628] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.765764] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.772705] device bridge_slave_0 entered promiscuous mode [ 436.779266] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.785995] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.793166] device bridge_slave_1 entered promiscuous mode [ 436.810013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 436.818737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 436.835219] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 436.842543] team0: Port device team_slave_0 added [ 436.847980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 436.855156] team0: Port device team_slave_1 added [ 436.860486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 436.867664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 436.932211] device hsr_slave_0 entered promiscuous mode [ 436.970493] device hsr_slave_1 entered promiscuous mode [ 437.040507] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 437.047389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 437.059668] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.066059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.072727] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.079089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.105978] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 437.112797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.122178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 437.131050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.138122] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.144918] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.155192] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 437.162035] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.177990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.185627] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.192030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.202148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.209811] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.216228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.230861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.238657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.252654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.262676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.273159] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 437.279683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.287692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.297684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.305938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.317701] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 437.327491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.720642] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:40:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:57 executing program 3: poll(&(0x7f0000000200)=[{}, {}], 0x2, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) ppoll(0x0, 0x1fe, 0x0, &(0x7f0000000080), 0xffffffffffffff55) poll(&(0x7f0000000000)=[{r0, 0xc0}], 0x1, 0x0) shutdown(r0, 0x0) 08:40:57 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 08:40:57 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) 08:40:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="2800000019000103ea000000000000001f00000014000600fe8019000000000000000000f4ffffa9"], 0x1}}, 0x0) 08:40:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e008c0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/53, 0x35}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r1, 0x0) 08:40:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) r2 = dup(r1) readv(r2, &(0x7f0000002700), 0x390) shutdown(r2, 0x0) 08:40:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x280, &(0x7f0000ffd000/0x1000)=nil) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00841) 08:40:57 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) 08:40:57 executing program 0: r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:57 executing program 0: r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:57 executing program 0: r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:40:57 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(0x0, 0x4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:40:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000200), 0x2000000000000004, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) shutdown(r1, 0x0) 08:40:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000001240), 0xffffff7b) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 08:40:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:40:58 executing program 1: poll(&(0x7f0000000140), 0x2280, 0x4b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x896, 0x0, 0x0, 0x800e00866) ppoll(&(0x7f0000000040)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 08:40:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) [ 438.872691] device bridge_slave_1 left promiscuous mode [ 438.880939] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.943121] device bridge_slave_0 left promiscuous mode [ 438.952854] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.117166] device hsr_slave_1 left promiscuous mode [ 439.158724] device hsr_slave_0 left promiscuous mode [ 439.217898] team0 (unregistering): Port device team_slave_1 removed [ 439.254988] team0 (unregistering): Port device team_slave_0 removed [ 439.282934] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 439.339960] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 439.397110] bond0 (unregistering): Released all slaves 08:40:58 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000280)="f5622e187a3ebbbac4f84fd4aae2c271a3a2464e70fd02b5bd46e61c680914286fac52340ad0c961bf207f5fffc288651d8ed39518fc73ee3a6cce1efece1646b0c04aaee9aa188bde0982391419b5277a62f51352bc34849d380b8cc7ee8865d3c6338797429fe2f33c3fcf3f1d67ddd87d5a4fb02cebbaa4f3893efaf395c31ed7a7109999a46b51ed2e512e205c0af63cf2fa75b814b074042432fc402b78969dbf3630f294826064024612147520face38f631db10b2b22f10f5391c0612ac4fa905e729d3531edc473c73faf25a4f77701461ea77a0f30ac7fd1da7292688f3764cae2946270576d94998e849313ff1ea5b01fe7fe8dbc0dc3620d687074e4e0b91ea46e867b52a78a646bbd2ac3607ba1445f18f19f1f1267f573a5573968e15750a482961b4a7867cd5bbffaba7205554b7e7928050c0414ff4b292a698189567e0c3363c72afaee188b72b7e8c97f9da62dba57ec7e2e3140ee31fe014d18b867d50dedf71e7dfd5eb128e1d4aff5a90c0b198c0a871e8a851383a4574b7784d23c03d12350e895d91faef193c3a344baf4efcd71cd761b278b4a6a7028faa1838cc664e7bf3dfe6550dcda138fec09a82145864dbaadc51d6ac14bed3bf631ad70a3a1d163b1966859f93fb2e8d170034eae7563ba6e28a2630f31a11c55c6d703dee35b9c8307280b66706cdecb9ad0ca5e537d61ca32b145a62a6f8825035153cfad2fa5967202920b95566f6c6297735deb343d7d1ec795eaf9903172798997a6921edcc0124afd63cb6b8294fac663fac9a3944cd528cac82e4df6648e16e9a3456a2f76a5015ad06d10e1e22fc591eada4b55d0a1608fc6721e0baaf73191d956a7617b68df7d055c2825b1ffb837f059c25580448dfff3bfec99d3464608a1258e027d0e76ad99e58d3484c904996af777f042d882ba841a0da87e91ef5c8d9dbe19e1176cc2edb2009f7a2fcd46d5003868680a7d5dd73a1676b8658dc22f64ca11b791c6f3d8aed3b2d0e1446c2c5de11a07a14591a63b1d2d59db19ad856384369f810ab833be95604bfd12685ee6339defa2cb2ac2efea48c23e99fa028469bd862b640897b5d743178821025efac010a4ea03c2f3265a40ffcae524b88fc8f8a1444e76cb9ff11732b8982101b5c2bb5ca1fccd8fcc5a92e76fdd5ac66b210128d663bd6dec2d5c9c24adfee8310167f2d8b269cb4541f19af0c43428563cf2d0351d2daa99d289acff564a837875b9d970ec84c44eb5198d12a44ade1ba43acd4d904deabe21f1ff2eb4cf20a63182177c49afc7f367169af2c5480d321272de6b53f5726cd37d3614bfa9b46a1bdc4b31f59eb0ef0f2957e204cb24cc2eb665c6bb964fbbea1c2fc460975e29fbd8ac3ca55a983fea4b47b32d484d5fbed9afd0c0f4933a0ec07214dff96af7310a51b71c5512a3d78001cf89d8dd3695719c5503a804d66fc6426a5fef80503f0782a386255474e1cd84b4f8d4b4205e81b70d43fd02a61f2bc10309939a2c3a371143a75da86cac56de19cc67146d4255c284ad533dfc9b262db82a2bbe43cceb33ea1c09d7dd64426ffd786dac07d6a7d9f57abdff21a4be642274121f5c93ba11a7daf8173acb45033686fceca25545dc247e40502fc15a044376af0471afe11ff618686c38a49670160868148ad5a82728c71a1ce8d549365084b0125887e3244eeb2a6780788e7467b699005bdb87352aaefaead914b119001a0524e721befae3b6af462c55bd5275dd11ccdc3c78d722da3f3025646f044c5c883fb54001a2328b450e90d27d5251715d9729112211be79fa07234351bfdf065ee905af0d7c09a2ead21b4d282bd03c8f544a61f69959976ec42837c2bec9112522954a5622fcaeea381fd368f6daa08ef72e52d9b82bfbdb0c3ddcf853e0721b5d47fb32088dbf603318356d54c7b23ca01801531697e2b3bfbf208bda80ffd7587c188b91ddc86de45962a47959572ca1e85534fe601ea69818420e0d9b6798a2bf6db1e7c8e1fe1cbac2b8c9d1ae4d1a2572c8c773a38644998540bb1e14e0a915f2c880e982926f6eea7049fa94ad065f5b6828316c95c44a0a258dcaa24a117615a50811bf7349aff291c3cd5af820c921ef0c9b31a15d781e54dc07350dc80e6e53e520c2a232973bff51d98459ba52381e7d0627fdb1e21e189211fb25c7a3056c64075d2ad9164c9b33c4aa3b2b17cc14c4279fe296bc277cec9c778aa950230e333ea43faebe637f75dc116e74e16efa26e3f1422436e0458dd6d41b862828b490c4711e7ed3cdeeb7ddc94f51e2c987870c25b436a2ee87d7b4b7328cef2f83f6accd3738a18ca530d355a407b6fddf98d5dacb13f38523b772ece148ec1f667895bdc713347f2017ca027bf5f5052046852c2ffab7d0f060e40d5c80d710b6a2e38d7b63b8ebe53e338bb0f88fcdcccdfb9781b4142d4ea2be1cb4099a096d10033983c09f9f0d6c14b79eec66bbe1c976621fa30b09f6e54a6c5f79c0ba31d514f3adda020e9e6ae47f49989da6857cbc4aef8b17e0725fe689a6b242455c6d58309f8e3a70827048bafb71933a4a9713024803edc765ab4dc9cf224cc6b7087ad6e61eec7989e2b9ae3466e5c8fa211d7de455031d77cbc2645113b4f3112cb238ffd306a442a6ff246b44974a3a630abe7841c2357dcdbe3cb254f0e0359129e707df83cb0a5804340b8ceee5b8dd9e1b916f60643b7e52088849420d20cc37c002eaf76c8c0e5801d41fabb5c7827460c9f4e02cc31099e55fc3f1270dbdf5f56f38301525b82320bd74823a275e95974d3a8434c6763e0ae42d110b5f9a96698bdb16c89697f9dace9c5edef7dd3ea9c1ac129d9ca8c3ad6a4e4a1893babb747eca75b3c3d883877684ec9971b588ab48376f42c9bc7fc5186f8b66377eff4eba5e65982a7ce4939ff60daa7d9dc9edf4e9986ffe4d2282cc719738325c46864be7f68f9b32f645fa88442bc3423a2c345e2d31559127c77642c539be2af3bfb07b90f27f51501c1ea35bd3601754bffae1e11f3664a214ec0e49f3ae41c035979e9e5d693267f957ca1105b46d211c7dc3f6f0b7a6cf9eed6baffd18f781cdba5fd2efea178fb07d79b83c3404bd79f439db4cea52d263880c4850469c0392ef9db2dee4a0d9d937429d88be19d3ba3c0226b7ecda7f55bdac941630c42bdccffeb7396599dbe2029b2ae0943565617d7f504a701984eb23aaabc5578d8af5cd061b42b566ab4f935f537a5f28e6db6f269b6624b7e5e0185d95a34c5543040f01135480fd4830cda82d482433068102ce7bb43ad899989d39ff7aba70c74dbe8478a5cc02f4b16f232d7901a8ce663956f1fd64e5af45bfcb328600e845d7f6466ccbac3a00715003f95ab66a65e34ad86c135265daf6de60f8b830c847e43e3552739f8f1fad968f38848ac14408498565f3f8a70c371ba490c80e2f44072b6a3d70d3715503f5c324aa2e36756622bd7d5aabac7bd0d4226cc958e64dbd5cfaee1de3d9774da81f5682c3515a8bd4a1c3309ca2dd9c3e3832c319e800eb89bfdd211ff11e8ae2ac825ce3dedfcd3c3062f2a7c7a2642b44a84bacdc05785c74ebec58c81b590acf607347cbfe44fabd32de534f4bfb1394866128552e46139f4bc12e47e8a3549a97ccf1d1fc903e8335d9cabf082c6ddea38ce2ca9c925c2987025c34b35824fc08f747e92a88e9d112154e9fb06f0fb94bc133cd1d4d20af0ac5d5e86d25caac64b43b89938e1f558936881c0f28d0db6a20c9b5b91031b060868036f96afcdc0b6645faa63ccdc69550b0b201dc1f2dc77ae0d1479ff04004f136eefcf6cf6fc0641a484b7865589b8301fb38cb46cb0cd2c511f635d1c3bfecabfbc89a842ff5ccd0ad96489f4e1a247285fe635bf21304c48396e21a62ff3c63049c35665f3de7303af47eaf80b084d7df8ffbe68299ab54659c9a1d1f204d0a37781fddd380dc506a45f9b227b1c63f3b3ba355432fb70f5b5edde2ad8c177f3d28733da11d347b0c1f6a583a47389b9dad964ff8a0d8912dbecc8ee5bcab73a6910ab788bf47c2482c1a01bc73f72bd11fe6f2c0b15074d2eef78ef523d77be9ef53be5323aafa2a988c63cc053f8dcbd87573604fa1198e8d928f22aa1a23c05cccc10e139e53d036cbeead64ab6f19df9694fc56c5e70d3864c1466c6163b573710f4ca6d913af3780e6e24d79d6d634acc201e5d15c501041bed21447cd126c88df3015b34d2af5410e4dd7025276f296fb7cd836852891d48df1b1a9a3922394f284769dc6189bd0677066f7e37f3bb7d9f7174c0674421fe8ed0193f62ce385cf0b2cb7e1d9dbcf478a69dbe986085c424a9cd9b29e27a2f4904595afb678e3b2bbc5f30859d7337fb5ee18ba5cc966bb7074271c7be7991a256b6729ba188032d25594a770eafb0ce1d86473160acc5f5fc46c23c7c0788eeda8cccf373a2ab66334092c7327d9a4b1d37726c7e4f2e844b45c002860bc1bbf8d3387666f2d101b2d4183061ecc25c50c74c92becca9b749af668e06292e565afc0d02261f4929de39ebf11862245e35bbb011414733a5b1dea9630ec683ff1a8135243fc0f5926b6216aefee2f974808ac53cc3b4d544960ef79064b26f17ec457395bd1ef72f6e32e213b556fab1352626bb56e42c2b9ff676f1da88c207c719de6d075fb17aa6b318451fcb7788470138f2ee83a40dbede1d9d80fad83077705d7b2109c8c48177d8758e6c6e11eb4c82b9e19c4d5c5b09a86af4be1966ee2411d46822fb5e957a46210fa9729daba3346b9a60f02cc8dba0a340af80a2d2ee29beb35e89fd03c14c679c172a030b3d7f80ada9f6de61a43548b411a7720c952a44f4b22a3f5793f581f82b8e662e828c124fcaf25c0e3ce6f31d29da1d270801b5a36a4434acc5d4e84fa745f596ccb91f00964c543fe68619e09152769bad794e067d2c66e0608053ebd5024352125ef3ab97f7f98d7cfaff8727d5241523c6cb098fc5b77d7b4bfafc229c4661a337118e276dbc9ccda2b69a026a60784b627df267d8f79831306a69e9f6e6de648741b8d37fd0d7bb791a493ab999ccc3d25fbb7b77a669f2b1ccf191dfb5a09c97cca590c19547eac96192d64c892b8685a5f330c595c6376b3128fb3520d66d5c0590e5c26dd356e28b430d3742b6eb0502a4f750a3f846f83d603428264091868943778233ca9feb2fe1cb612e5c6538e70ee9d4b33d9229d2bbeb0c0554983af7db5f693182c95ab3fb8acee51ca11d2e9b52f818b558b3f4a2cdf8f8a36e3a61626860417b6e0250f0d7961f8263c02cc1acfc8095d1adb9967add6fae0d19f89d350178aba063075eac90fb168a89c4e57c98aacea5ad5beb498426eb62b68597b2470e66e30a52232b79f7426ea65d30d8514cf687bfbb18bf609f1b285da3c4260c89d541943f30ece811681489c602ad65ea32ee6a77fd43af39239200961490c00db56083157f61a8ccfb143155eb9cc030c729fe7fb78c8881b05241dc891f5c658b3d2845b9ea02fc39b4da6364425f6920ec9b0157ba957e43efdef48649040f8215e4793838649f979d0da7930b3b04aaa3147a9b50dc4d7bdf1f1a835c462fbde5fc1e90d552fb2a666ca219d6befeacc9eb6a5d6d277988500db78e8c7fc0f356fcf3a42370cae7cd2dedc0eb656303c7d59e681adba15c01e36ed5b88a5e24cb1961ca3eede904d8520dabc875590ba0225b33ed13bf7da39dd88fd8d8a6e6b499ca85c667ab2eec", 0x1000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r0, 0x3, 0x7fff, 0x8000) fallocate(r1, 0x0, 0x0, 0x10001) fsync(r0) 08:40:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000001240), 0xffffff7b) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 08:40:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe94, 0x0, 0x0, 0x800e00659) shutdown(r0, 0x0) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0xe1) r2 = dup(r1) shutdown(r2, 0x0) 08:40:58 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(0x0, 0x4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:40:58 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 08:40:59 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) dup2(r1, r0) 08:40:59 executing program 1: 08:40:59 executing program 1: 08:40:59 executing program 5: [ 441.940264] IPVS: ftp: loaded support on port[0] = 21 [ 442.424971] chnl_net:caif_netlink_parms(): no params data found [ 442.457960] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.464543] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.471779] device bridge_slave_0 entered promiscuous mode [ 442.478340] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.484840] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.491916] device bridge_slave_1 entered promiscuous mode [ 442.508921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 442.518216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 442.535493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 442.542823] team0: Port device team_slave_0 added [ 442.548235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 442.555482] team0: Port device team_slave_1 added [ 442.560868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 442.568038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 442.632471] device hsr_slave_0 entered promiscuous mode [ 442.670417] device hsr_slave_1 entered promiscuous mode [ 442.710769] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 442.717644] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 442.729877] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.736273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.742945] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.749316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.776666] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 442.782995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.791657] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 442.799694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.807387] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.814693] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.825435] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 442.831890] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.840214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.847793] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.854171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.871499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.879080] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.885475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.893387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.901176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.909334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.919168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.930863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.939593] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 442.947480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.958962] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 442.968237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.410721] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:03 executing program 1: 08:41:03 executing program 5: 08:41:03 executing program 2: 08:41:03 executing program 3: 08:41:03 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(0x0, 0x4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:41:03 executing program 3: 08:41:03 executing program 2: 08:41:03 executing program 5: 08:41:03 executing program 1: 08:41:03 executing program 3: 08:41:03 executing program 2: 08:41:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:03 executing program 5: 08:41:03 executing program 3: 08:41:03 executing program 2: 08:41:03 executing program 1: [ 444.790430] device bridge_slave_1 left promiscuous mode [ 444.796054] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.840757] device bridge_slave_0 left promiscuous mode [ 444.846227] bridge0: port 1(bridge_slave_0) entered disabled state 08:41:04 executing program 2: 08:41:04 executing program 5: 08:41:04 executing program 3: 08:41:04 executing program 1: 08:41:04 executing program 0: r0 = gettid() mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 444.992238] device hsr_slave_1 left promiscuous mode 08:41:04 executing program 3: 08:41:04 executing program 2: 08:41:04 executing program 1: [ 445.044979] device hsr_slave_0 left promiscuous mode 08:41:04 executing program 5: 08:41:04 executing program 1: [ 445.112057] team0 (unregistering): Port device team_slave_1 removed 08:41:04 executing program 3: 08:41:04 executing program 2: 08:41:04 executing program 5: [ 445.175197] team0 (unregistering): Port device team_slave_0 removed 08:41:04 executing program 0: r0 = gettid() mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:04 executing program 3: 08:41:04 executing program 2: [ 445.253339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 445.344853] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 445.505612] bond0 (unregistering): Released all slaves [ 448.040280] IPVS: ftp: loaded support on port[0] = 21 [ 448.435150] chnl_net:caif_netlink_parms(): no params data found [ 448.475818] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.482538] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.489399] device bridge_slave_0 entered promiscuous mode [ 448.496236] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.502694] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.509570] device bridge_slave_1 entered promiscuous mode [ 448.525385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 448.534645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 448.550335] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 448.557393] team0: Port device team_slave_0 added [ 448.563277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 448.570542] team0: Port device team_slave_1 added [ 448.575735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 448.583018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 448.633672] device hsr_slave_0 entered promiscuous mode [ 448.670458] device hsr_slave_1 entered promiscuous mode [ 448.710747] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 448.717659] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 448.729971] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.736350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.743005] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.749387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.776781] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 448.783311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.791509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 448.799438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.807749] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.824836] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.835147] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 448.841248] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.849295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.856971] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.863358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.881249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.888794] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.895201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.903258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.910907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.918853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.931002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.940879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.953692] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 448.959985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.967526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.975026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.987587] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 448.997792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.420527] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:09 executing program 1: 08:41:09 executing program 5: 08:41:09 executing program 2: 08:41:09 executing program 3: 08:41:09 executing program 0: r0 = gettid() mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:09 executing program 5: 08:41:09 executing program 3: 08:41:09 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:09 executing program 2: 08:41:09 executing program 1: 08:41:09 executing program 3: 08:41:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:09 executing program 2: 08:41:09 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:09 executing program 5: 08:41:09 executing program 1: 08:41:09 executing program 2: 08:41:09 executing program 3: 08:41:09 executing program 5: 08:41:09 executing program 1: 08:41:09 executing program 2: 08:41:09 executing program 3: 08:41:09 executing program 5: 08:41:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:09 executing program 5: 08:41:09 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:09 executing program 2: 08:41:09 executing program 1: 08:41:09 executing program 3: 08:41:10 executing program 5: 08:41:10 executing program 2: 08:41:10 executing program 1: 08:41:10 executing program 3: 08:41:10 executing program 2: 08:41:10 executing program 5: [ 450.800572] device bridge_slave_1 left promiscuous mode [ 450.806588] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.885559] device bridge_slave_0 left promiscuous mode [ 450.891308] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.065870] device hsr_slave_1 left promiscuous mode [ 451.127283] device hsr_slave_0 left promiscuous mode [ 451.193279] team0 (unregistering): Port device team_slave_1 removed [ 451.203752] team0 (unregistering): Port device team_slave_0 removed [ 451.212959] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 451.264924] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 451.343947] bond0 (unregistering): Released all slaves [ 454.200319] IPVS: ftp: loaded support on port[0] = 21 [ 454.541265] chnl_net:caif_netlink_parms(): no params data found [ 454.585340] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.592284] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.599668] device bridge_slave_0 entered promiscuous mode [ 454.607281] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.614007] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.621325] device bridge_slave_1 entered promiscuous mode [ 454.639843] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 454.649694] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 454.668294] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 454.675930] team0: Port device team_slave_0 added [ 454.681988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 454.689202] team0: Port device team_slave_1 added [ 454.694560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 454.701797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 454.762296] device hsr_slave_0 entered promiscuous mode [ 454.800395] device hsr_slave_1 entered promiscuous mode [ 454.840616] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 454.847758] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 454.861132] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.867838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.874650] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.881205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.910566] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 454.916857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.925474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 454.934099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.942006] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.959137] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.969197] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 454.975740] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.984603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.992593] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.999136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.008853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.016758] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.023605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.037926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.046459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.055908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.067887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.078283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.091174] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 455.097406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.109484] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 455.119833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.520679] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:15 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:15 executing program 1: 08:41:15 executing program 2: 08:41:15 executing program 3: 08:41:15 executing program 5: 08:41:15 executing program 2: 08:41:15 executing program 1: 08:41:15 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b6030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", 0x0, 0x100}, 0x28) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000000)}, 0x20004040) close(r0) 08:41:15 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40001) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000500, 0x0, 0x0, 0x200006ec, 0x2000071c], 0x0, &(0x7f0000000400), &(0x7f0000000500)=ANY=[]}, 0x78) r2 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, r2, 0x9) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r3, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r6 = dup2(r4, r4) sendmsg$alg(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{}], 0x1}, 0x8005) socket(0x4, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffff45, 0xc0, 0x0, 0x0) gettid() 08:41:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 08:41:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002d00050ad25a80648c6356c10324fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 08:41:15 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 456.524787] input: syz1 as /devices/virtual/input/input7 08:41:16 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="0200000001000000000000000400000000000069c39e812ef36fa0c8af00100000000200"], 0x1, 0x0) 08:41:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:16 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:16 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) eventfd(0x0) pipe(&(0x7f0000000580)) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 08:41:16 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:16 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r0, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:41:16 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:41:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 457.214652] device bridge_slave_1 left promiscuous mode [ 457.229332] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.322505] device bridge_slave_0 left promiscuous mode [ 457.329449] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.456872] device hsr_slave_1 left promiscuous mode [ 457.506720] device hsr_slave_0 left promiscuous mode [ 457.546722] team0 (unregistering): Port device team_slave_1 removed [ 457.559174] team0 (unregistering): Port device team_slave_0 removed [ 457.572189] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 457.604367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 457.664618] bond0 (unregistering): Released all slaves [ 459.950183] IPVS: ftp: loaded support on port[0] = 21 [ 460.256020] chnl_net:caif_netlink_parms(): no params data found [ 460.296937] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.303567] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.310618] device bridge_slave_0 entered promiscuous mode [ 460.317179] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.323923] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.331277] device bridge_slave_1 entered promiscuous mode [ 460.350366] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 460.359449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 460.377246] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 460.387292] team0: Port device team_slave_0 added [ 460.395193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 460.403514] team0: Port device team_slave_1 added [ 460.408673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 460.415999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 460.473748] device hsr_slave_0 entered promiscuous mode [ 460.510447] device hsr_slave_1 entered promiscuous mode [ 460.570722] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 460.582066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 460.596179] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.602543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.609129] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.615506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.645244] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 460.651906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.660830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 460.668737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.676176] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.683317] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.696829] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 460.703062] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.711993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.719572] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.725953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.734925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.743109] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.749441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.758328] bridge0: port 3(gretap0) entered disabled state [ 460.766613] device gretap0 left promiscuous mode [ 460.771483] bridge0: port 3(gretap0) entered disabled state [ 460.817573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.825750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.834722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.845439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.857856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.867933] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 460.874137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.886814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 460.898902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.960655] device bridge_slave_1 left promiscuous mode [ 460.966158] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.010882] device bridge_slave_0 left promiscuous mode [ 461.017623] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.113002] device hsr_slave_1 left promiscuous mode [ 461.144201] device hsr_slave_0 left promiscuous mode [ 461.183356] team0 (unregistering): Port device team_slave_1 removed [ 461.193988] team0 (unregistering): Port device team_slave_0 removed [ 461.203230] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 461.262990] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 461.323881] bond0 (unregistering): Released all slaves 08:41:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:20 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 461.389382] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:20 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:21 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:21 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 464.550583] IPVS: ftp: loaded support on port[0] = 21 [ 464.926698] chnl_net:caif_netlink_parms(): no params data found [ 464.959009] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.965609] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.972519] device bridge_slave_0 entered promiscuous mode [ 464.979547] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.986010] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.993131] device bridge_slave_1 entered promiscuous mode [ 465.011525] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 465.020417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 465.044532] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 465.051885] team0: Port device team_slave_0 added [ 465.057272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 465.064450] team0: Port device team_slave_1 added [ 465.069609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 465.076946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 465.133551] device hsr_slave_0 entered promiscuous mode [ 465.170429] device hsr_slave_1 entered promiscuous mode [ 465.230625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 465.237667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 465.254083] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.260482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.267103] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.273486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.303483] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 465.309594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.320576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 465.328569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.336587] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.343439] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.357323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 465.363709] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.371989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.379533] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.385918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.395200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.403012] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.409355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.431782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.439424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.448659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.456368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.464014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.475475] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 465.481613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.493915] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 465.504463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.910558] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 466.040891] device bridge_slave_1 left promiscuous mode [ 466.046481] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.080734] device bridge_slave_0 left promiscuous mode [ 466.086220] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.152044] device bridge_slave_1 left promiscuous mode [ 466.157600] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.191157] device bridge_slave_0 left promiscuous mode [ 466.196683] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.332005] device hsr_slave_1 left promiscuous mode [ 466.372880] device hsr_slave_0 left promiscuous mode [ 466.433072] team0 (unregistering): Port device team_slave_1 removed [ 466.443696] team0 (unregistering): Port device team_slave_0 removed [ 466.453084] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.497106] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.573930] bond0 (unregistering): Released all slaves [ 466.662663] device hsr_slave_1 left promiscuous mode [ 466.702972] device hsr_slave_0 left promiscuous mode [ 466.743871] team0 (unregistering): Port device team_slave_1 removed [ 466.754415] team0 (unregistering): Port device team_slave_0 removed [ 466.763841] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.804667] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.864741] bond0 (unregistering): Released all slaves 08:41:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:26 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:26 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:26 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 470.240183] IPVS: ftp: loaded support on port[0] = 21 [ 470.571827] IPVS: ftp: loaded support on port[0] = 21 [ 470.584023] chnl_net:caif_netlink_parms(): no params data found [ 470.651658] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.658098] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.665341] device bridge_slave_0 entered promiscuous mode [ 470.674936] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.681394] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.688266] device bridge_slave_1 entered promiscuous mode [ 470.710313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 470.719402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 470.743203] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 470.750452] team0: Port device team_slave_0 added [ 470.757355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 470.764656] team0: Port device team_slave_1 added [ 470.770010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 470.786731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 470.872579] device hsr_slave_0 entered promiscuous mode [ 470.910372] device hsr_slave_1 entered promiscuous mode [ 470.977925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 470.985242] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 471.001057] chnl_net:caif_netlink_parms(): no params data found [ 471.028858] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.035282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.041939] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.048405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.084210] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.091306] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.098174] device bridge_slave_0 entered promiscuous mode [ 471.106298] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.113195] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.120094] device bridge_slave_1 entered promiscuous mode [ 471.140478] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 471.150569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 471.171998] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 471.179234] team0: Port device team_slave_0 added [ 471.188647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 471.196350] team0: Port device team_slave_1 added [ 471.206209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 471.214371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 471.272237] device hsr_slave_0 entered promiscuous mode [ 471.320591] device hsr_slave_1 entered promiscuous mode [ 471.370652] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 471.385641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 471.403903] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 471.409992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.418573] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.424945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.431617] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.438132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.447241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 471.457320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.464857] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.472065] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.479260] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.486076] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.501174] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 471.507254] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.520770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.528344] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.534754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.553104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.560835] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.567187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.575089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.583557] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 471.590913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.601634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 471.612400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.620188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.630871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 471.640915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 471.647775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.656057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.663644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.671306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.682709] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 471.688724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.704419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.715705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 471.724870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 471.732713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.739561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.749098] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 471.756641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 471.763169] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.772590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 471.779702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.787685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.795587] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.801985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.811638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.818353] device bridge_slave_1 left promiscuous mode [ 471.824048] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.871634] device bridge_slave_0 left promiscuous mode [ 471.877096] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.983647] device hsr_slave_1 left promiscuous mode [ 472.024206] device hsr_slave_0 left promiscuous mode [ 472.084461] team0 (unregistering): Port device team_slave_1 removed [ 472.094094] team0 (unregistering): Port device team_slave_0 removed [ 472.103478] bond0 (unregistering): Releasing backup interface bond_slave_1 08:41:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:31 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 472.153220] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 472.278558] bond0 (unregistering): Released all slaves [ 472.325059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 472.336851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.350607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.358747] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.365145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.382126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 472.389864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.402979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 472.409996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.426852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 472.438906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.446851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.454737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.464657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 472.471801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.479465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.491060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 472.497795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.505717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.515667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 472.523037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.531050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.603487] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 08:41:32 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 472.688889] 8021q: adding VLAN 0 to HW filter on device batadv0 08:41:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:33 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 475.450200] IPVS: ftp: loaded support on port[0] = 21 [ 475.837559] chnl_net:caif_netlink_parms(): no params data found [ 475.869863] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.876414] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.884651] device bridge_slave_0 entered promiscuous mode [ 475.892135] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.898545] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.905923] device bridge_slave_1 entered promiscuous mode [ 475.929463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 475.938629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 475.956901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 475.965094] team0: Port device team_slave_0 added [ 475.970705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 475.977746] team0: Port device team_slave_1 added [ 475.983242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 475.990680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 476.067724] device hsr_slave_0 entered promiscuous mode [ 476.120578] device hsr_slave_1 entered promiscuous mode [ 476.190610] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 476.197575] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 476.215777] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.222163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.228744] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.235164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.266681] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 476.272905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.281056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 476.289020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.296483] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.303783] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.315630] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 476.321802] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.330159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.337745] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.344128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.353942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.362652] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.368999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.387645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.395415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.404571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.421195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.428563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.439032] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 476.445408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.460950] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 476.470308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.821842] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 477.390567] device bridge_slave_1 left promiscuous mode [ 477.396076] bridge0: port 2(bridge_slave_1) entered disabled state 08:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) 08:41:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:36 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 477.451422] device bridge_slave_0 left promiscuous mode [ 477.457026] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.513871] device bridge_slave_1 left promiscuous mode [ 477.522713] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.592855] device bridge_slave_0 left promiscuous mode [ 477.627267] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.672514] device bridge_slave_1 left promiscuous mode [ 477.678075] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.744996] device bridge_slave_0 left promiscuous mode [ 477.764431] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.007144] device hsr_slave_1 left promiscuous mode [ 478.054359] device hsr_slave_0 left promiscuous mode [ 478.122848] team0 (unregistering): Port device team_slave_1 removed [ 478.132833] team0 (unregistering): Port device team_slave_0 removed [ 478.142421] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 478.175427] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 478.234953] bond0 (unregistering): Released all slaves [ 478.312858] device hsr_slave_1 left promiscuous mode [ 478.356234] device hsr_slave_0 left promiscuous mode [ 478.394582] team0 (unregistering): Port device team_slave_1 removed [ 478.404885] team0 (unregistering): Port device team_slave_0 removed [ 478.414151] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 478.455176] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 478.532578] bond0 (unregistering): Released all slaves [ 478.611897] device hsr_slave_1 left promiscuous mode [ 478.672717] device hsr_slave_0 left promiscuous mode [ 478.712765] team0 (unregistering): Port device team_slave_1 removed [ 478.723033] team0 (unregistering): Port device team_slave_0 removed [ 478.732441] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 478.784953] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 478.853361] bond0 (unregistering): Released all slaves [ 482.960234] IPVS: ftp: loaded support on port[0] = 21 [ 483.291377] chnl_net:caif_netlink_parms(): no params data found [ 483.298386] IPVS: ftp: loaded support on port[0] = 21 [ 483.352740] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.359273] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.366620] device bridge_slave_0 entered promiscuous mode [ 483.375905] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.382319] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.389166] device bridge_slave_1 entered promiscuous mode [ 483.416280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 483.425617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 483.449762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 483.457027] team0: Port device team_slave_0 added [ 483.462760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 483.469965] team0: Port device team_slave_1 added [ 483.475785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 483.483500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 483.494616] IPVS: ftp: loaded support on port[0] = 21 [ 483.563488] device hsr_slave_0 entered promiscuous mode [ 483.600458] device hsr_slave_1 entered promiscuous mode [ 483.682025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 483.708429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 483.751670] chnl_net:caif_netlink_parms(): no params data found [ 483.788359] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.794815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.801485] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.807844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.872989] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.879443] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.886843] device bridge_slave_0 entered promiscuous mode [ 483.912597] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.919029] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.926357] device bridge_slave_1 entered promiscuous mode [ 483.944241] chnl_net:caif_netlink_parms(): no params data found [ 483.972490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 483.982838] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 484.020857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 484.028092] team0: Port device team_slave_0 added [ 484.047094] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.053892] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.061167] device bridge_slave_0 entered promiscuous mode [ 484.067685] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 484.074969] team0: Port device team_slave_1 added [ 484.081533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 484.089621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 484.096772] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.103347] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.110943] device bridge_slave_1 entered promiscuous mode [ 484.193825] device hsr_slave_0 entered promiscuous mode [ 484.250416] device hsr_slave_1 entered promiscuous mode [ 484.291865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 484.301212] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 484.309642] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 484.316810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 484.338275] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 484.344489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.351197] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.358843] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.365954] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 484.374921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 484.382191] team0: Port device team_slave_0 added [ 484.388104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 484.395586] team0: Port device team_slave_1 added [ 484.403788] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 484.412145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 484.420323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 484.472684] device hsr_slave_0 entered promiscuous mode [ 484.510682] device hsr_slave_1 entered promiscuous mode [ 484.563987] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 484.573420] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 484.581785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 484.588985] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 484.599109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.606328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.617008] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 484.623349] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.638821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 484.650857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 484.662028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.673906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.682662] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.689948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.697889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.706341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.714296] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.720758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.744555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 484.754892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.764199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 484.773252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 484.783605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 484.792368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.799960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.807975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.815654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.827466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 484.835247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.842903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.852971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 484.864283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.874294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 484.882216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.889684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.899437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 484.908701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.916242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.925625] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 484.932656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.944495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 484.953901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.961318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.970600] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 484.976685] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.989387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 484.999378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 485.008269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.016240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.023906] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.030294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.037289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.045437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.053057] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.059408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.070506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 485.077864] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 485.087123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.094855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.105802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 485.115932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 485.123320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.131606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.139135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.149998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.167063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 485.176622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.185387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.193378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.208639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 485.219901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.227123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.235060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.244855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 485.258173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.271102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 485.277157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.284510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.292377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.306024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 485.317232] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 485.326587] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 485.333488] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.341348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.348232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.358273] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 485.369128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.377559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 485.388728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 485.404602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.419469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.431142] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.437534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.445484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.453439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.461579] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.467949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.475312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.485612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 08:41:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) 08:41:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:44 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 485.525767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.538556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 485.551623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.585349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 485.598611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.608177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.621571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.642516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 485.652422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 08:41:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 485.687028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 08:41:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) [ 485.757669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 485.777294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 08:41:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 485.804195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.824362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 485.832683] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) 08:41:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 485.867441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.872397] Bluetooth: Can't register HCI device [ 485.885515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.900642] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 08:41:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 485.950362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.025179] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 486.099315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.430665] device bridge_slave_1 left promiscuous mode [ 486.436230] bridge0: port 2(bridge_slave_1) entered disabled state 08:41:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) 08:41:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 486.491901] device bridge_slave_0 left promiscuous mode [ 486.497527] bridge0: port 1(bridge_slave_0) entered disabled state 08:41:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:45 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) 08:41:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) close(r0) 08:41:46 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getresuid(0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) [ 486.776678] device hsr_slave_1 left promiscuous mode [ 486.846561] device hsr_slave_0 left promiscuous mode 08:41:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:41:46 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 486.963531] team0 (unregistering): Port device team_slave_1 removed [ 487.049870] team0 (unregistering): Port device team_slave_0 removed [ 487.098848] FAULT_INJECTION: forcing a failure. [ 487.098848] name failslab, interval 1, probability 0, space 0, times 1 [ 487.137484] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 487.159350] CPU: 0 PID: 14745 Comm: syz-executor.3 Not tainted 4.14.130 #24 [ 487.169759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.183057] Call Trace: [ 487.185838] dump_stack+0x138/0x19c [ 487.189471] should_fail.cold+0x10f/0x159 [ 487.193630] ? find_held_lock+0x35/0x130 [ 487.197700] should_failslab+0xdb/0x130 [ 487.201683] kmem_cache_alloc_node+0x56/0x780 [ 487.206184] ? lock_downgrade+0x6e0/0x6e0 [ 487.210349] __alloc_skb+0x9c/0x500 [ 487.213980] ? skb_scrub_packet+0x4b0/0x4b0 [ 487.218301] ? mgmt_index_removed+0x150/0x250 [ 487.224313] ? wait_for_completion+0x420/0x420 [ 487.228916] ? vhci_close_dev+0x50/0x50 [ 487.232897] hci_sock_dev_event+0xd2/0x560 [ 487.237156] hci_unregister_dev+0x225/0x7d0 [ 487.241481] ? vhci_close_dev+0x50/0x50 [ 487.245463] vhci_release+0x76/0xf0 [ 487.249096] __fput+0x275/0x7a0 [ 487.252472] ____fput+0x16/0x20 [ 487.255754] task_work_run+0x114/0x190 [ 487.259651] exit_to_usermode_loop+0x1da/0x220 [ 487.264238] do_syscall_64+0x4bc/0x640 [ 487.268127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 487.272977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 487.278167] RIP: 0033:0x459519 [ 487.281438] RSP: 002b:00007f57a16b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 487.289176] RAX: 0000000000000000 RBX: 00007f57a16b8c90 RCX: 0000000000459519 [ 487.296446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 487.304102] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 487.311370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57a16b96d4 [ 487.318639] R13: 00000000004f85b2 R14: 00000000004d1370 R15: 0000000000000004 [ 487.358352] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 487.446729] bond0 (unregistering): Released all slaves [ 489.760266] IPVS: ftp: loaded support on port[0] = 21 [ 490.114975] chnl_net:caif_netlink_parms(): no params data found [ 490.148326] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.155490] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.162434] device bridge_slave_0 entered promiscuous mode [ 490.169078] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.175562] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.182805] device bridge_slave_1 entered promiscuous mode [ 490.199659] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 490.208762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.225318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 490.233423] team0: Port device team_slave_0 added [ 490.238754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 490.245936] team0: Port device team_slave_1 added [ 490.251387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 490.258537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 490.323771] device hsr_slave_0 entered promiscuous mode [ 490.390614] device hsr_slave_1 entered promiscuous mode [ 490.430907] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 490.437830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 490.451235] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.457599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.464250] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.470655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.497500] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 490.504397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.512423] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 490.521030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.528163] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.535150] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.545655] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 490.551938] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.560333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.567910] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.574284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.585054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.592747] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.599070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.613029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.624751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.632350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.646404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.656550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.666783] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 490.674711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.682777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.690595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 490.702449] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 490.712986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.111355] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:51 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:51 executing program 1 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:41:51 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fsetxattr$security_capability(r0, &(0x7f00000049c0)='security.capability\x00', &(0x7f0000004ac0)=@v3={0x3000000, [{0x81, 0x80}, {0x1ff, 0x1}], r2}, 0x18, 0x1) r3 = dup2(r0, r0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000000c0)={@bcast, @bcast, 0x2, 0x20}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) close(r0) fcntl$getownex(r4, 0x10, &(0x7f0000002a40)) fcntl$getownex(r1, 0x10, &(0x7f0000002a80)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002b00)={0x0, r3, 0x0, 0xa, &(0x7f0000002ac0)='/dev/cuse\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002b40), &(0x7f0000002b80)=0xc) r6 = getpgrp(0x0) r7 = getpgid(r6) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = fcntl$getown(r4, 0x9) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000004b00)={0x9}, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004240)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000004380)=0xe8) getgroups(0x5, &(0x7f00000043c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004440)={0x0, r5, 0x0, 0x9, &(0x7f0000004400)='/dev/vcs\x00'}, 0x30) r15 = geteuid() getresgid(&(0x7f0000004480), &(0x7f00000044c0)=0x0, &(0x7f0000004500)) r17 = fcntl$getown(r4, 0x9) stat(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004600)='./file0\x00', &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000046c0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000047c0)=0xe8) r22 = getgid() getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) sendmsg$netlink(r3, &(0x7f0000004980)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x2184}, {&(0x7f0000004b40)=ANY=[@ANYBLOB="6c1200002500000225bd7000fedbdf2510123b0008007d00d52c9c485e7f55e0b0c26b245c5c06d754d1aaa313e6ce570c9b3893c406cf8e63f570fc1c5998", @ANYRES32=r7, @ANYBLOB="0400490008001300", @ANYRES32=r8, @ANYBLOB="9dbded7fc4f5bad5ba42edab2b39fe69f3ad163800a2364fb5c991cbcc20ba3fff80bacb9d39a74b138eb6c37e5de67a5c15f9b7e78e084cbc1bd537ff915fe6b7358c8490a51bca454e2ca4ee81ca4adb43d911fc3f82b7343e00d5a08eec021a15d64e25871b33d1ecda7edac437581f2a47051ebb248fadd95f4412623ab802830ce74a79248bf15b54ccda34420b04d9123439b022eca7d56895a20ef0d9c58342cf4f2f9a0752ba4c5e2beb559095c0ea18adbd6dfdb402275e550a7d81bc38db00dd70695d1b33e7f1ca09c000a85b1b12385614bc4183c8ce637cb6a68f15df4043b163ddcffb7a9c0b0e783d63d7ef0730c4f4a6cbd23a52ae4fd17e53b388d340af794dfa6d8472ed59a8908a3fcb5543de2dec33d19db8b830f6f809fdfdeaf8bd744403b09005f2a211f2073d15d1bc94f73ddbe961b7a5d4ed27259a32bac579241e1af993e1cf697551bd16817fab9b536437ce2d29aced716b22b28feb4467087de56ed5a850cff7d94168007a2221215d15379356f0d485911cefaa15afa7592a0e499bf33f069e7fcf9e8a4683f45603d777915871b6429a7c356778ff850efb1af2615261b6d344b9fa6b3ed40b033174e2a48fa416d9ea945780cdba0e71bfcb9f486e659363bc4112fe83185e8a9713026f095861c32be4977063c608001700090000001a9a790ab3b45178ae0babde11a92bc90845041038e05fb3d5d03122f7006d51642421fce2b7a9d17fa0f1208a680537f57ea1255986bc592429bb231133952ef2c36323cbbe1d9e461c280bfd4e0b64d77d3e22186d08ed44e409a5b4090c64623326b7b78160945e3027136d7a39ed89fe9071cc961d5904a96cc5e9dfa00df9d44a062814a7d189c3777a0f4c8db1d8e5db731e0eb306ce3c79aaf8f6d2cb7c90299fa982ab7493220f75b9558bd220faf25841dc33b5905497bcb81fac3e86e49ca8df646c768c226941169e10c1e6820b3919fcafce5dde094f7b0f7a946db6d22dda0171e9a04b06bb36897573b2577147457a0e3173f76594ba5c0a9cae394b7f76ce271eebbba6979f390f9eb979c56560444a1263c6b8684b0f5d2ef0679a0f8db99d978ed5ada28b541ba13855ee2bbce25f04ed91d9473546aa8800c3e11edcff15d239646c6c86ee0291a88fcf729c0921f58d4d4cecffa41add9e292c8df49633f8d297989179f4b985b15ca0ab2aa4db0825e86ff269b15966d9bcd02d2985c614510da769afe19c1452fc84da0c1bb7b9c391018c4ccbe085eeb3ce3c2ac4e2a02df4d6ac65bd70f6e9978abd8179eb21c6513891f464f1de3758c91f82edc9a421b20627a7fc86b5bb6c5371513033644fcd8a6abb39c0311efcb99e8f0ad1346079cdb3652bb6d3be7c006d2119080f686fea9101ba7ecb778ace039fb73151ccf02dcc0db9e21998c92cacd1d784fb62a5b611d5734513cf2d5b6af4045a23fcf71d3935051dcfedbb06e37ef34d0154d0e8ac26a4b2a6384b585d3414442230d22849aafb8c4d30714ad68077a80129a1699d286b5b1d2b22998227ed81d001392b5e952b6d2223a33a646e534908c904ba8f92e6461da9d3588262d3765aa91609fa5a6ee84ee47be12ab4e6deeb3d0c31b89d450f8fd8b62050982ab9fdd6eb9cffda5830b7032cd5e6a932b1268537998bb67221d22a104e413ee10d4951ed65a50c2d527adcc8ca95b6a047ce4e8e77f006470a7f8a05737b86f901bd28c64899b649ea9816f96fd8ac4210a071da24c6a937f63364e81ba9f0cc8e9b3278e5a3e68c8d9fc669e210dfd26dc1a564ace5ebbaf768fe34710b113e4e111dcce6ccb0e5342b95db677567a3d3b70205469948b09a8b85c0e9e0e4f0dced4c5b8b1e369b1765fdaa929dd84246b71a9567e3a6b5973b877cf0c0a5a79594bccf3808d737091597f187f9c67100e596b9a1776ef2595e8abdb3c71e0bebd8de77a646e4ad887e7398ff1565c2d864eb825e3e4104f7e912c699be2acab91750a978b8a79fd6b81fa729bc59ba1f464a23d89ca3f536cee12fbaca7ddd2b84be1ec9128070f8d32fcabb78e619ea3332c0e0cf5765942b36adf6f41b7cb498dcf6f727d1a35c5c7c0ee07f973eb2c54e2952956597ced94be536999c8fe33e9447878a831a2de0caeea59c22dbed55ed6a0ad908d76ac4f88f8965fda9778e74ac8b53e27270b3d551a6c33c44a29ddfa737a106701752274f7af68038d83431d0b8abc4ff835807852e0af9ecff455d36ec8dd8b4678fefcbae32540a9313a84762749c88cf2f04b328c2982aa2f73973e10d7b1c4bd943f35b7cfe2095fcdcb4f2d77d8bc2471990a132bb6b0c3fa8c623cdea9654c1c9cbf5332aa9e5083614cb0939ce52285a5c9d1935d2cbe2b8b947a12302bd01dbb82950aadb8a208076816dc7111859721b93281ec7e6f58878ad5bf9c68ea1a7874d1e4c5c73934a3bbb3a3e3fb478a718d7aadbf967f2a40dae946ce13334139c5e78aa503c89b1eb282ded954ed10521cce0cc4eb569752dd33efca4ed57f0192fe37e30253e42521017075a51478cc2253f064477c61cec9c929bedf1fab948cd2dbc3d02ca642840edebf0092e4b9627273991d9490f559662e2bb32e740232e1ed7888831be42dad21966542df8d2db8d05c1cc3977542d4e2f94f1cd6476bf3a00e73bc0c4203f91f3af48e0b4aa69c220d1d89702224e3b8717174707037185229759599b34e5596802fc516b5c69ce767061009e9df771bfd10ad9a44b1d43c1ca6788b2f1c11fd92c1855f262b2f0c2aac021da22edef60206fa21726e3b234099fc56c2fbe91098144013aa69cb3e124c15e16a879fd3e3529c73f40d601749410b89c1dc55634429952db3c59b832c99787ac8987cc2223642f01bfec49bdf8d274873e4053aef4781c22ac9215fd686357ff2221677d9b8688f482b740bcbbdd53bd14146d36f74a6d0999c8646b6f0250f4b6bda585b9c955138230c3b61ccf6d9196df197c109cfdd6e6c051f9c4dd759cc81be3aa842a4cbd8238d9377c5041e503a810c09f47c61e0a39fb7fa3841b67fbc246020a016f2f2fa0e9fbf8060967bace133a0b701fcd350e6a7221dcb69087c1be0ecf91eb1d198ebed90a840947001293fa8e010f8dcd0db66d64c2a1fb93fe3d3b24065b484edfb01158a79cd6cdf96a7b22678932b8589e1d4049488b90fca9285d420ecd30dac65cc62df772e1b2b3cb915e8424dc5a0bd43f77c971e4bee859f244740b058d0393bdea17fd2ef74edd3a7cd64b95e80a11a4ee5aed349a39193c961fa470cade7270fcad93bb5d5fa731142da0cc2d923924ad82616ca8804e692b5d09681172b4a7f8b43c1ce4aa3bd38bcf76df62fd116c85459b64d5dcbe69688c1605ca3e811f0320c8ade0223efbccb70fe2c13e1eae436c2e819543fdb19a000eeb38f639816ee943a8e9ad360b394d065656d97ad441155ffd1db1ce6df3b142fc54e5f3fb539bf96b5adb2462fd8abef9a79380a543fb5e754e4128eb5c65854c070e9da92486c13b25f2ec8404bb05b111ff82eaefa9bf24098182936a6f8da33d7a367799e47c71ea65ab24aeae6b36fe5137bec6cb956a537184d66a03cf421f1cd63bc82abb33039815714737d7bdf650ae54dec539eb1e576f4ddd93fc2e471c14b0695b89acc6a3ba5e3ed0c64123ac0333cf12560db89c95d0f9536e77cda1274adc4aa026c2ddc3e8bb079a6220443c4b2ea53dc3e806ce9f038c8f622920f6e4e00c83dbb883d036868b38a91bc7a7e5770243ea155dbec584c13ac6237df9fc02018142eecb3b471ea39ad750a3653cd2629f004d6e6700604cd0371a0cf64a42d2ab3e169ac16a6bc997024d4eaad071f063144e045f4fafbb0cf6d2de10d0e629ff07850fe06fb27b70bf4886b222c48c82838127fdeef334eaa69a0cf788f357648e37448df2b237a59b0eb09c132e2a6c3d2ff8353d10cbc8f9f4d75cbcc80ecca7fe4e0086e5f8d0ddf98d8098ddc3beb9703fbc1bcc8f85b66e07a855f1b49333569a7ad7d70f4b54cd655d5ef8f5eb8655ef00fd6d0b00a0088072302b42f408c0842df3551d30c882a1e19f144d2e5e0f1bcf085dc70c2766b40127622cd43411c6414a754f21776d3bc5e43ece411d15d1c067562afb03878d38a3920abea04abc8ed2f3248d68595da1a67e646d2ac33d3566a5280bac49044b5ef00e7f84ab8842f3d0d72c33342c797b8fdd37811bd4042af781ce6141cf6dadf0399d43378d002c06be9dcd34f18d543d15aa944b83c07a70c067a8b58108200b08346b31b833363cfa8b407f15e1399d5354813f05b180a3f433f98102abefae2795c718535b32c7cec46f8d757da0b827841be826395dec6b45d8ec9736a51f9effe3ac5cc3c1d6d24096b6f0f197feb0d89cb4d82de44664b389cf03dcf7427566d5eb0114afabd842fff13f3e39fcc1ac4779455a98f6246050e458dda9c9cf8032f7248c1740358402771408e0ec9c17f38c80131ede727e689481eb2e3fc87a08c1d030fe371c6b1faf8bc107b6e917763cdf8d8826619b5b0981a77df01e8a2f078726f16d3f8b2cf085507a032dd1688b7928467f5f3a56532b105a8813b9ef04eb0b8ab5302ae928e9b4e4b03324b3a0f65284ed4185c14b2ded9055be57986086cadf1e0a98b74c1bbdda83ab0881da98b994830c31a54d7560230c49926b1c01701d493af781472bd21ce0113ce4cc78a20aedd4c5974d9e4564c9b72e092ac996ebd85c2a8d5f9eb9fb31a222800ba94bb7f6c178dba3ad78e5ef633f0fe042cadf1cecffc23a6b160a21afb296ce203e247b73d136d74efc0648c868aa957acc4090c70259de65f1ba6d8889f172b34059a6c5ecf20a2069f9947fcf6d8d0757ea2e2ac74bcdf1dfe4242b4fcff7c1cd9d0938bd73a022bbed49aaf1d8fa6ad3e2a6572a1efcea21bccb1f7d994bd78f83b87a67f1e0f2acb3a7d762e32eccc49d95a1d7a791180f4f28ca31cec1c45261b4b134b277618d46ef6ed46e702fc945a97ba9df1eedd46bf4c3e81ad695ed70082ab7e1bc9879aee9032fb40a1c8b896cb03f65d1c7f1f00043caad40202b689e189c3950b5d8c3567e557471cca4a9c98ba2f988dbf28379734c7a8deb4406ac3f05e00f68bfc503650d53383fe087b18101f7f184e7163943e57e1592c26ed44fe580c5e55bc531b676cbea2a5305f33fe35fab54eeb42dcce351d1cfd7b8abd5a0eef0140a11596c6b364d3675172be75ca2e3fcb868aa6d1c8446bbec9e4fe2b4964faae822598b013ad00b7079754b37aeb3de5cb7aef6f26b1e5502ca0706a70f77da94eb8c4c5174bed8eecfb93c7ddf05e9d2994fbecbef6342eba210130a6c297d474f18a2d2f29ff2c28a7e20d1e43d3868433007e4104dfeb8efa745d6b360c66ac58a7ef2f0a2fc865aaf9356a7660c127ddcbb6bba2d32620be9a6079390e2217a04ba33cf994baae099c902c522049a89f77a31f66ac45192eb4f4ced27766b4841d00cac0058cb621144f751fbcd4343710ce7e8ecf2d36393e3274f6d51a7f360cbaf018086af0ca9cbd02dac97023bd76d9b42438d3541d9b8d731fdf1b9b76c5cd60e1a67bbaf14d663ff8daa103bb37bed77df99ed6bd8a3c300505ce2a7cce97cfcc6119a088a4ea5ee0266b40ad20c21d05b0e30ebed47820efdafe5a58017a188e5ea9593910960857468940273153dc328fe319595a52f88ff6fe267191e2c58f6bb2d19cdd85fd85d09626c7a6772cab46d8fccc23b937107f926b2ed21e0df7b21e15e46d163d39e818236e407183ec731803ed51685379a13bfb9553f9e9a87f2d0f8adc14e99aca03149443589f593ebad5f92cd7c7926af4b89f7cbe8a126330afb0d952e6bdafce25f0b2aebe242edc8d38dc926b3ea757b2c46a1c0f105787c4014d348f9165f42a8372a78ef21abee4e24450421e3845b58b92ce10c0fe837ffcc7bb2600cef74322bb8d664f95f6e68ef1ab672684c7013a1c1cf26b6c0209fedda9bb48437731beab168928e887f6e586fcf6ad45d2be6c048d70cfaae14232bd0a62e63eb64137263687257bda2406932f7519a7f79ee6fde4c8bfa9e165c7df2471385b7d88dd435a27313e2597cfc816eaf82462bbcf77ca142d625e60518faea475063b1d4a8df8cfe347debe864eee0daad326c0f82367cd716b601397b53f58a206cac0e78202e02dd7294e10bb82d7817f3f049ec162828e756762b7f63b1bab28ef37b91dcdc369fde23b140e4488e3145c16cdefe1a8ddfc9487866e4708dbffcf257e7b25cee24678465e71b66d9db38d946636bf9113acc8c8718260a27257d0d52d3eb234cd1617b224e1969dad67737b6033765d7bcc4c180ace66cb23fab90e22088a9bc188a24b482142909062c2bd3e79ab2e8183e95283a289d7b02d69902535b8b1b9930efeedc0308002b00", @ANYRES32=r9, @ANYBLOB="0000006a5c562b24e80aee0040f2976f675ea47650326884aeebe3cba16f71153750fec8194cfd510611d44c9a08e7"], 0x124c}, {&(0x7f0000003c40)={0xcc, 0x3d, 0x704, 0x70bd26, 0x25dfdbfe, "", [@generic="b96b918b8179606bb05ee0dd967623386613d4b8b3d841e09c71bb5757803c6983a4b7e610b47ba674f73ce2bf5f081e8fec1b0ba07fb64797864de3e0f560322736b5127a0d821e7cec608dfde72b1e5594a030d77007051ebb8c4980dc5d89b7", @generic="d6b8d742e0ef1aa7c484974f49d3995627bbd7d683e179ae3594ca3887cb0e406848d462fe6089d493078cb96d3f4980005d2e532f35689b04d02fbc6a8f630e93944e", @nested={0xc, 0x5f, [@typed={0x8, 0x93, @ipv4=@empty}]}, @typed={0x8, 0x6d, @pid=r10}, @typed={0x4, 0x6e}]}, 0xcc}, {&(0x7f0000000180)={0x34, 0x3e, 0x300, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0x3f, @ipv6=@rand_addr="88e3281a13d2ad3557e752a1b6027d7b"}, @typed={0x4, 0x4b}, @typed={0xc, 0x5d, @u64=0x200}]}, 0x34}, {&(0x7f0000003d40)={0x184, 0x35, 0x400, 0x70bd25, 0x25dfdbff, "", [@generic="e47413aa81064f53bfcaec98e1faf22c28a38e9d6d000bb6899725b540fb7df9700dfdfe33ba6059531913bf89dfcf9e16bafab154eda5e978428e38cdf772c3a01f8fa4e07867", @nested={0x28, 0x40, [@typed={0x24, 0xf, @binary="692fa5c827423d807e45614fdee497f69b9610f80a0cf2a4faa3f9b66be3"}]}, @typed={0xc, 0x21, @u64=0xed6}, @generic="9b54073fa796e988752bbac307d896d29c422146e16f12b890ea9a00159d6fdc4ddba4097dbd2fc80b7607f82d389d3bf4fb532a5299304b22abfe70344ff3bd1351c8d63b38505a25969934279b58bae6c05b66ccbac2a74e5de9bed795a49ae559772f4c7a71404c13bbd4e0eb4635e3d790d77be030", @typed={0x80, 0x21, @binary="bd55bf032b00aa88099d524aac640d114224e61b6a053e99ad7ddd3d59792b8cea4fc500d90960aa45d6c3b09376ec22e809001ff7fb600a242d856fabcb3de43880a93ee00413cebdcb9c02175a09aaf95b1740f35d0d2b412095e3edc7f411fadc93a73a1d38d2bf5e452b30614880d61a330d43785cb4cb"}]}, 0x184}, {&(0x7f0000003f00)={0x28c, 0x27, 0x0, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x39, @u32=0x2}, @generic="d4832189b46444a33ffef48c114c55cbe7dbee29a158374fef369667716933f29f967bfb59e750f6bb9fa70baca4a02beef0e7cbe4c66070457dda8f80d7f21c5a09ccd8913faee49defad2743d1f40f8bed6cf45ebe6bbab8f28fb2de7bbebd5a6fcc85293a43dfca177adb68d9ea6ab2798d278d16066576c18900992e031b8a7bd076fff3fd9c11618b3d4e6839c870ce001a256ae2d77796d5068a4e6995af3a756ae4be76bfea87d36908cc9df5c9b0f7c5a5a5f876aa0411a0d818134e26bf1906f0eac627cb5b36e7c14ddcc1b28ffc5ce62b139d", @generic="ab4fd1b0", @generic="317b7b912f2013fe256f261d4bf9c729106b4181242d9100dd3bf4c92a49a220d9a261a6753b516f04c1a2cf55d16fca1fb899ad6f5096e4f99886c8b7", @typed={0x14, 0x76, @ipv6=@loopback}, @nested={0x9c, 0x2e, [@generic="adef909d51893081d85f6433c787b96726e8a652b59093206a72f331f779a8256ce4b8615b1e7632bad9ed3dc38aa7e85912960d5122dbd58a7a2ef1aa628a997a02191b0368d501ff731f924ed2480d4e716c313084304ef617c2f21f206b5c586a2de98bd3cc8962230da85b1536fdfdfaba5257c71b6c605537aa32e6337190383314aa8aff6ab355a6921bfaa429b2b73a9b9120"]}, @typed={0xc, 0x8f, @u64=0x2}, @typed={0x9c, 0x18, @binary="763f90d3d24dfba66d9bfba6b0dcd55831addc47b97668a1bc3c05743aeb09c4632b27c54a2c1d89a940d09901f56b693703c76a55b77018e5173ededba1152fb5f6501ae22d456bc9f13c11e27c83a6af09d979f0684859b21db1f98b298177331ce39aee6c8534537b0808c58c60d5a5836507603ad72bcef5100a0c42477653802d0d690f24b756e730c28886c0c92cec2b001fa801cd"}]}, 0x28c}], 0x6, &(0x7f0000004800)=[@rights={{0x1c, 0x1, 0x1, [r4, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, r3, r5, r5, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r3, r5, r4, r0, r4, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r3, r1, r5]}}], 0x158, 0x4000001}, 0x4004000) [ 493.302878] device bridge_slave_1 left promiscuous mode [ 493.318002] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.391580] device bridge_slave_0 left promiscuous mode [ 493.397196] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.513508] device hsr_slave_1 left promiscuous mode [ 493.563744] device hsr_slave_0 left promiscuous mode [ 493.603127] team0 (unregistering): Port device team_slave_1 removed [ 493.614912] team0 (unregistering): Port device team_slave_0 removed [ 493.624631] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 493.685352] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 493.768231] bond0 (unregistering): Released all slaves [ 496.350184] IPVS: ftp: loaded support on port[0] = 21 [ 496.744499] chnl_net:caif_netlink_parms(): no params data found [ 496.777241] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.783813] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.791134] device bridge_slave_0 entered promiscuous mode [ 496.797684] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.804338] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.811511] device bridge_slave_1 entered promiscuous mode [ 496.830370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 496.839060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 496.855306] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 496.862631] team0: Port device team_slave_0 added [ 496.867974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 496.875305] team0: Port device team_slave_1 added [ 496.880691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 496.887861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 496.952481] device hsr_slave_0 entered promiscuous mode [ 496.990332] device hsr_slave_1 entered promiscuous mode [ 497.050542] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 497.057411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 497.071498] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.077848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.084534] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.090943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.118367] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 497.124900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.133696] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 497.143883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.150892] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.157484] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.174059] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 497.180302] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.188479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.196536] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.202938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.221373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.228961] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.235377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.243266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.251238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.259193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.267935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.279986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.290554] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 497.296923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.304335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.316471] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 497.327147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.730636] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:41:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:41:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(0xffffffffffffffff) 08:41:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) 08:41:57 executing program 0: gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(0x0, 0x4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000003000), 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r0, &(0x7f0000000480), 0x1000) 08:41:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(0xffffffffffffffff) 08:41:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 498.552058] FAULT_INJECTION: forcing a failure. [ 498.552058] name failslab, interval 1, probability 0, space 0, times 0 08:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x100000) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000700)=""/227) syz_open_procfs(r2, &(0x7f00000002c0)='net/stat\x00') pwritev(r0, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x101002) fcntl$notify(r3, 0x402, 0x0) [ 498.598289] CPU: 0 PID: 14862 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 498.605447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.605453] Call Trace: [ 498.605475] dump_stack+0x138/0x19c [ 498.605495] should_fail.cold+0x10f/0x159 [ 498.625189] should_failslab+0xdb/0x130 [ 498.629182] kmem_cache_alloc_node_trace+0x280/0x770 [ 498.634300] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 498.639769] __kmalloc_node_track_caller+0x3d/0x80 [ 498.644707] __kmalloc_reserve.isra.0+0x40/0xe0 [ 498.644723] __alloc_skb+0xcf/0x500 [ 498.644734] ? skb_scrub_packet+0x4b0/0x4b0 [ 498.644751] __vhci_create_device+0x78/0x560 [ 498.644763] vhci_write+0x2a1/0x437 [ 498.653055] __vfs_write+0x4a7/0x6b0 [ 498.661770] ? kernel_read+0x120/0x120 [ 498.661795] ? rw_verify_area+0xea/0x2b0 [ 498.661808] vfs_write+0x198/0x500 [ 498.661821] SyS_write+0xfd/0x230 [ 498.661832] ? SyS_read+0x230/0x230 [ 498.661847] ? do_syscall_64+0x53/0x640 [ 498.673038] ? SyS_read+0x230/0x230 08:41:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(0xffffffffffffffff) [ 498.673052] do_syscall_64+0x1e8/0x640 [ 498.673061] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 498.673079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 498.673088] RIP: 0033:0x459519 [ 498.673097] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 [ 498.680675] ORIG_RAX: 0000000000000001 [ 498.680682] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 498.680688] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 498.680693] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:41:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0xa3, "3892e86f47194c17cbafd74a82f736f2cebcf04685c4da3981632803b3dbc86f7ec99070ba27a5aec10cc0224564ab6e991a5351b2600a85f7df4564b78a77717c054ec15da6736a914ab74b568a923bfbc397761ee447dfb8aef780c566db222ff11db81e9885e7ddf144320629292330f7870147f9e422f409c2e95137ceafe204d2629dfa0a7eac1718dfd58f9639193d838e19eb374e12893d2bc3bb48ed628498"}, &(0x7f00000000c0)=0xab) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x8, 0x0, 0x2}, 0x10) pwritev(r2, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) [ 499.664984] device bridge_slave_0 left promiscuous mode [ 499.674258] bridge0: port 1(bridge_slave_0) entered disabled state 08:41:59 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:41:59 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) [ 499.749526] Bluetooth: Can't register HCI device 08:41:59 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) close(r0) 08:41:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr\x00') openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18b, &(0x7f0000000040)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) r8 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000840)=0xe8) r12 = getegid() lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$md(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/md0\x00', 0x200, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r6, &(0x7f0000000e40)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)="7360e96313fcb54e7ce9c842a36ca11c5fd4cef40181eca4627499ab1e24795774332bbc02177997fc", 0x29}, {&(0x7f0000000700)="2e5ae8763e081660ebe094e7e555e90c3c8ce669af6bff9f757ea3b7abf051dc21487598c6774a49e655a216744d28db84a5f9ba22f5ce040188de8574d94ac12abebb7174086d0a7fed690d2d17d767bea6ab78b9fa8bb3dc2cbae10363582e525347d74017f0edc6fc9e422fe2145ebf75ede712f3889738b0591bbcccb079cb872588744b0c363b57bca72a4a1c41015f34d00444d35fe57f3da802fa68d3b49fa3c67827f5053fcb00", 0xab}, {0x0}], 0x3, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [r6, r4, r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r4, r5, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r6, r3, r5, r5, r4, r4]}}], 0x128, 0x1}, 0x4000084) fsetxattr$security_smack_entry(r6, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000240)='[\x00', 0x2, 0x3) pwritev(r6, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(r6, 0x200, 0x81, 0x1) [ 505.305257] FAULT_INJECTION: forcing a failure. [ 505.305257] name failslab, interval 1, probability 0, space 0, times 0 08:42:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 505.347098] CPU: 0 PID: 15016 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 505.354260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.363617] Call Trace: [ 505.363641] dump_stack+0x138/0x19c [ 505.363662] should_fail.cold+0x10f/0x159 [ 505.363681] should_failslab+0xdb/0x130 [ 505.363695] kmem_cache_alloc_trace+0x2e9/0x790 [ 505.363712] ? mark_held_locks+0xb1/0x100 [ 505.363729] ? __alloc_workqueue_key+0x114/0xec0 [ 505.363744] __alloc_workqueue_key+0x15f/0xec0 [ 505.363760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 505.363775] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 505.406030] hci_register_dev+0x1a7/0x810 [ 505.406051] __vhci_create_device+0x2a6/0x560 [ 505.406063] vhci_write+0x2a1/0x437 [ 505.406078] __vfs_write+0x4a7/0x6b0 [ 505.406090] ? kernel_read+0x120/0x120 [ 505.425938] ? rw_verify_area+0xea/0x2b0 [ 505.425953] vfs_write+0x198/0x500 [ 505.425968] SyS_write+0xfd/0x230 [ 505.425982] ? SyS_read+0x230/0x230 [ 505.440668] ? do_syscall_64+0x53/0x640 [ 505.440682] ? SyS_read+0x230/0x230 [ 505.440694] do_syscall_64+0x1e8/0x640 [ 505.440703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 505.440721] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.440730] RIP: 0033:0x459519 [ 505.440736] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.440748] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 505.440753] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 505.440759] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 505.440765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 505.440771] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 505.461600] Bluetooth: Can't register HCI device 08:42:05 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:05 executing program 3: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) pipe(&(0x7f0000000080)) close(0xffffffffffffffff) 08:42:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$TIOCSIG(r0, 0x40045436, 0x31) openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x38, 0x4, @tid=r2}, &(0x7f0000000280)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) readahead(r0, 0xc5a2, 0x400) 08:42:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:42:05 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r2 = syz_open_procfs(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fcntl$lock(r0, 0x27, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x1, r1}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0x2, 0x2, 0x8000, 0x3, 0x3}) close(r0) [ 511.097484] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 511.119942] Bluetooth: Can't register HCI device 08:42:10 executing program 1 (fault-call:2 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 511.211942] QAT: Invalid ioctl 08:42:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved}) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x2, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0x100000000}, 0x8) [ 511.465961] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 511.473234] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 511.480510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 511.487789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 511.495073] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 511.555292] Bluetooth: Can't register HCI device 08:42:11 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(r1) 08:42:11 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/30, 0x1e}, {&(0x7f0000000440)=""/27, 0x1b}], 0x5}, 0xe08}, {{&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/33, 0x21}], 0x2, &(0x7f0000000680)=""/252, 0xfc}, 0x9}, {{&(0x7f0000000780)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000000840)=""/117, 0x75}], 0x2, &(0x7f0000000900)=""/248, 0xf8}, 0x286}, {{&(0x7f0000000a00), 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a80)=""/140, 0x8c}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/131, 0x83}], 0x3, &(0x7f0000001c40)=""/183, 0xb7}, 0x6}], 0x4, 0x10102, &(0x7f0000001e00)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x18080, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x5, 0x2}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001e80)=@get={0x1, &(0x7f0000001e40)=""/35, 0x303}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000001ec0)=0x3f, 0x4) 08:42:11 executing program 1 (fault-call:2 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') syncfs(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) r4 = getuid() write$P9_RSTATu(r1, &(0x7f0000000200)={0x113, 0x7d, 0x1, {{0x0, 0xe4, 0x200, 0x2, {0x11, 0x1, 0x1}, 0x0, 0x80000001, 0x7, 0x401, 0x54, '\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80', 0x1, '&', 0x54, '\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80', 0x8, '-lowlan0'}, 0x1a, 'cpuacct.usage_percpu_user\x00', r2, r3, r4}}, 0x113) [ 511.989013] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 511.996284] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.003590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 512.010871] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:42:11 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 08:42:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0xfffffffffffffedd, "366155c5270477045fe6bc5d661b668d14a9b66395bf6c6f3e362c9082c4c33469bc5ad6119f683f452a7dc67f787ede7c73f04b25882bbd774e11d374626d9df6353f2ecf4fe951f3a407bbafb4a0fda2927c459466a3a1b5263bab752b0741332034bc1c93f935b3a7873aa5420c9521fb148880764313ec74ad904b85c8ccf47bf0ebb3c8995b61358ef4da1b308f957bf4e87cdc98fc3c8e2f60"}, &(0x7f0000000140)=0xa4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbi\x1b\x81\xe8\xbf\xa2n\f\xe8') openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) splice(r0, &(0x7f0000000300), r1, 0x0, 0x1ff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 08:42:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:42:22 executing program 1 (fault-call:2 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 523.475437] Bluetooth: Can't register HCI device 08:42:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000440)={@multicast1, @initdev, 0x0}, &(0x7f00000009c0)=0xffffff4b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1a4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x13c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x2, 0x101, 0xb52, 0x80000001}, {0x8, 0x8001, 0xfffffffffffffffd, 0x808000}, {0x6, 0x1, 0x7ff, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xd1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x1a4}}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x7, 0x1, "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", 0x14, 0x6cc, 0x2, 0x3c, 0x9, 0x8001, 0x8}, r1}}, 0x120) r7 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0xfffffffffffffffe, 0xffffffff, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0xc91b, 0x7, 0x7fffffff, 0x1, 0x31, 0x2, 0xfff, {r2, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x28}, 0x7ff}}, 0x3ff, 0x7, 0x120, 0xdbd1, 0x5c}}, &(0x7f0000000280)=0xb0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000050000000020000001000000000000002a00"], 0x2a) pwritev(r3, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) 08:42:43 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, "3dbdb73622e7267b53dc9163e7709f2f6fbeaced4af152d90d567a73"}, 0xffffffffffffff01) open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x40) close(r0) 08:42:43 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0xff8, 0xfff, 0xc21, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000002440)={0x9, 0x3a2, 0xfa00, {r3, 0x8, "0896e4", "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"}}, 0x1f2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000000c0)={0x2, 0x0, 0x2080, {0x4000, 0xf000, 0x1}, [], "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", "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"}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000021c0)={0x0, 0x8acd, 0x6, [0x9, 0x1, 0xd977, 0x0, 0x1, 0x9b1]}, &(0x7f0000002200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000002240)={r4, 0x4}, &(0x7f0000002280)=0x8) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) eventfd(0x34e) close(r1) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002580)={0x2, 0x0, 0x2080, {0xf000, 0xf000, 0x1}, [], "de6d197044ed14871abc4117d2472caaa872682d5eedc3362638203b6fffcd0d1a63a3f1564692b0b1878987aa22f92f13315d070627fdc55ace4527589dd0a01d299260dadf9a82b13a66d4b970e563bbb3f86478ad24b18e4b66154be5bc412f4ae519a826eec2b8588b056f480b7699193a319dd89091c9a32c9f2971405052fb5abbb9dab7962934e386a45e70751e81a8c79434321a0c435679851013f1af7ae6d8df221d4b305a8238015fc0ac77f3bd406642d3cf48ad4d7e70ce993dfdd88770d9f3544b171957178d95a8d6017f9997a161dc29d810fa5d41f48b00460dea92fc12517497cd5a7b4aa0a91d5226e8f5fe1be033cd37cb7a5b7795257c92e0bf6970c62390c046ca79dfab862d2f469a80d8db34a1477d604d80c118edbc027abd050b77cfc99aa5e809eb1a0bee13620a1fe530bf01268c01ff320006027d15bd559a99a40f548c54520a11df44c12a2db04a5ffadd9a91f2a42a2104b51e80147fb7b86efdc2a3371f398ef39807e0b371d2723c8895a3278325ec6152ecb53768f984446cbfa760fa3cc715995c033fcc2f7827f82e1656cfacb7dce0d7edbc4359285bfd390439e614dbf8d46e67a15bd92c21393045b134930c3273168b703b2ec685a988e10397869e2268290e018eae6e709ffef9c046037178eb94560ef319810a7a3f9f498b7deb40d631ea4110ee53c94718e26a12f67a10ec2a7bd6e00b999a2278144b98c216d776807b4dd830f6ec72ccac22ebaadcdddc6944b8227cccf648068f26a376e12ac38f0ac39ab8d9b462f58d89268fde4021b808110040d7d0f3e557612cbfaae31fb48982e50278b62c22f9b9eaf6e97ef8b405174237641b3bf46dd91f4fd3946de37c6ed8b5ddf08f3832a2052d54f196895e26462183f9c50f3fc521b2391ebf5af3dc342d54538a941745319b59f1a7f937e2d94fe1b28dcce8863b33676ad5444f9ae0f4e774c21284eaf5284425deee168d901d9285ad3ea08dbcaa2d256ca4b46401ccf769b249b25244e7d89a7c23e3e8b925d8a35325a35830bc21f320b2298a400d26c561f3c4af5d7d2d6626af100c5e5b1ead4b7f1a422bbe6e6dcd2d90bdaab05347e8a1e9e3e4d6bfef5fe65a6fa2234710438a5941cbc2ac5c77730aa5944c54ddf1a64884b1a4bcef15568c1c150e50a70ede402d3344e1042817b724f1330d0f9c6d41cff6513b3dc4df1dfa48089338fcf79bd865702418c59334def277d9ac999c42ed9a373c8f97e7a082794f85a78a34213c8e1f384205f9947d0c76e1852051113ff721b93b9cd5174976ced263a717e86a4f427a9db2d127e72c3949be4d1ebf8cb15d381d885659cf519863e537654aa423841bdc2dbea18860025a1b1a506523b3a90c7f1222db1c5d851164295aaaad8e0bfc71f78063af18314cd0d2697b7204e79901ca0e6e6de4696923fe662dabc4387501d48e506be68b7d57dd90314ed638f1e184599dcbec7135fdd0c9a5806983f827186de8e81e1193e70e3d4aa0453c3a97f1cd82febf1656ce1c90f0d4019de49321ff989c0b68d797bff1495224ad54ce2ea4ee98308bce3088b1b8d9910c29b1bd402df52a3ff50505a9198783424e0182094b575abf6e21b229c2e6637b62001ea1aa3b3b5304e89d17be48cb6c605afb0d0a94bee446d46b78b33efea205d8f02658fc4bef84ff86a1d0d36038c17251b7e96a1e915585b3baf7dedb84f2a50005c431852f88f21e69074fd17776b1668be4e7aae3fc202b5a1586d5ecc8ccda05ff104ab1d99cf8419fdb48e8fda46b2e633dfff9e4da9dbaf0b7a56c526e4619a84f61ccdd2c35835023d3095e54efeb1ce18979102a957d1eedf9035e5e8538bd9f98e3dbe847821ce968411e754bfb55a20ef6b4e70db2957b5c662f5a4a1b58c20ce5dcb7c2e1404d512e030b42310bf7f82a152317da337511921a21fbbf61994884d2b7d171949db051fc889817afcf197150398f5febe449309ec5758dafe0a3ae9c5fc8fbad738a206b7857abbebf498bfa12c7dd44f18cac708871b232fbc8cbf3e341ac47a99039dfcab80d20a105df2881f622793544845186058695dbe1f73dee21f6a892161814898da1873e810ad612263fa5956f09ba7babfa09f05e8b691d723c990da88e2865a1f14f75de1d1580b3e1abee1ec286af769216907649b831f95c46a215dd89dbc59fe8fae7c5b11491802773a7eee68c1291747ce3e3942b7bfba1d2970583718061551a24aa480442f12fabf464b215f6aeab6dd45ac6875189249a63f668fa68b8883c2b7609da1def8c0586c72fd899939df2827581f3b4482809ad02739f7a998a4d0a7e81a28076f2fd21a87814f68100cee0ad585e76daff302183c89093f78c6ef7f97db9efb9cfae106fb48c77ef47ca282123ba041030699fe07a9f2d604b628697fc7c94fa86d9b6b9eb9d0ae5034ae1fae42d2a10a9fd789285d49051ddef9b4f19f017e3dd0c0e7818322b37dcc29185f3732ae5877002cf64b689b58fc7d5a560d495257a97b0ad67188bfaee9b65631c9c2283b40c27e035d8675ffc3422ccce6becf13a222707838ae089d16d2a70b7cf7d99cff9eb1ea04c18f7781e60e004bf85908276be5fd15d767f719fccfd464146e1cd7793f2081e4459ebab67b83563414140ca06b565ae131108ea0808a23e5e6d125f0ee51b1fc4b674276b93a01770d236210d0c60f9d738382331e566c9259d5f5a3e3f1ec4104b240ec4959465100c565c9751de12abecb99854d3b03f9a2f0621dc147bf7be83e63ff43d453a94378641fbb901755e8ef993e6594ecded2897362ab24284b4bab41dbc3133748c16f5f22d1758fa613f32809e37aee2ecc557682c79f070dde9f7264e8c98ba506fd6131d7358d569bbb05792c888a281ddcf0bd190772026ab9bf37a8de412bf9cb9f89179673b5ffc3bde2c5fbaef629483513a3b91102b68c752780083de0e232e3e03a6994b4621e8d7aacafd76fc1e9e2a05e7c4734fc5f54fbce27ef922f2d0ec3a1aa17fb05aea62f41fea2ec088e456a88f912a4efc0cefafb91d33be86e1ba4ef4712eb13832580bffbe1b1311a4cd27907de15a2c535dcd7aeaa8bb544854bef1551472bcb9f8698b1ce5ee35a7b952ff4b47cb3328e50e5daece2f26348de80ced158b5b7569b57530f983bd4134436f597c0fe9dc031168fccf44e025b9dea3c73806b48895ca1490aa4f8b461776f6a7ecf2edae297a1bf19e9bbb7368d7e005685f25b31f4871469ccb80d875f497128536b41d37ef8f441c9c07b685c4bd2d82052af67ced5fba0f226899318b174df78d3cecd62d4550d2d33fa091c9536ebc48072b58d86b74adc39694310e675c2301d5e8bd7c0b9e929c76b64fd86d00506d3d615ab2d97ea07cd6fef7cc70f309dead8e0c2ec28bd71ffaaa0b5e2c1a71b3206a366067889bcc8e7fcdd9ef408925295793380fbf43ac9588632df9eef461cbcc1f5b13bb318988ccdc46c710996d5e6721b19eee5e272f00ad6fb7ae5f59d31d31eeb19c0c3c41864372032cb2cb0082e1fc558da1ccbade4f40a46830b5470c0de97831216ca43a64f8fd67d7842ac24c2b5e7aa1b7a5e8dd69550852d8ab8502fd2b5b8bcea1dd507d53d8c4eb4565a85d8dacdbd451c2d32ff60d71142f4804913d5c3244343ee1380642e13cba47b2ad21d34725185bc748e311ae37bfbd8b0edc273c972ba7cd0bbac34ca6402e79e47026c41c9aaab1a4663dc5deb12d7b8604ad206f6b8188df508d26fb0830dbe897eb3e3c36cf8f7034ac5206198cbb6ce9b2ed6ca24be446ef3c45da7b72e237e34597befbcc8273733b87aa0e01025d3685bb624ac08e4af16c3eba571b8902da0cdd23597507f7e846c0f357c05b409cccaee60b86a93d00e1fd5c66c3cdeb0be45b931dfcd537e432ddebfe588ee0ba70a0b3718706e0bd85c25d08a4d988d420ec76b5f9f9564d11da943e232bd7474469d65e5f3addb59cd4850191945fabf98ab2022fc55c6a68632061ae1a1d8e8630981686054288731c5bf0335a6c8d0da1126aed1c85ff3e4896c45012c73dcc23d36c2fd2bdefcf049ce5e938a6ff7ac3f80b937fae102222715a6076eb2b0df245f40f9e49b6ec7379fce91c0aca214a2826f146450cd39251f2851e3aa3a70ea7d6685aa6bd2b398ff2efba00bcbc862c0d341538b5ac854d05d44b4eab90092e522cdae9d0963c5d93cb7d0dfcc82232199999fb4a41da7b1bb2ce62817b89b422514278eaf1256e8264ef1ecb73eba99017e4d55772951dc69c233474a6b1e912ebd5c4786e57074292919da0fe1c363cd5b4ffceb1e68e2a2800ed4305aa75429140c166e67f38fb5fd4cac6a66c99d70ccef28c14f5a7a3337f45fbb835cc3846a2c9881d3463a342ab6fab2f53ea7765c6a9abb9286467fe1dd29eaf79464ccfe619ecd7c27359117b7142de83c9bb499827c642a8b022e7e663028a4865d55b10d286d50e68d702bd039707e14408c83f94562800a3c2017a5a67fd667e6607294c87ee0f4d99a5323f0eeacd26029eb03eb86c63f94d7dfd9628f953b1d4da3fd0fb0152c57b7fb9bb7570ada3d803d041279575ee8a0e5182ba1c378db4a179ea89713de3acf69a654ebfb7bf83b2c276243cf73efb3dd0d8d1b9df8ef5755ed3119d4c1090a9d4067a0c65adb6955e4800ff19660845efc7235b6167f7ca20a66c0c6b3da9b32adaf9202804ea4a88290827dad7f9579f7096758c771f8049ced489705b6a701e8b2a564b53c80d7d86fb660833bc312366e04ce3c4727d45832f6e1630094186f1f28a252f3f4526332bc76c019685e8c3b5acb5e228f6274dc39ac7a941b646925d8c3c4b949bb77b3beaf56f17f1204b89c89ff7ca0d0bc7077383f0d71c6d0867090fd06c828c298bd085d49dab6d700b31be3956d55ba00dbc0848e28524fc11ebf25e44538950f31e73ac25f16ae4c867b6a1b3764c872d9a0f72d8a7191ca304445d7efae786bd1bc22f68ca303d0c5c668e27dd597fa25eccea2eb53e8d9457e5ecc30bad137f97ea52e5dbf88096833ab7da917f2fdf3d5cac318652ec90458d7a0190c66ae7468886f07816ab5582d54b552cc2721a2d965d3be8766be3821f1d8f0355a14169a637f88da49332dc3f5e3e9ed2f5f5536d4bc54dcec364fc821f99277d143515fc4058092ecaf79d0068c080078c1aaaff68606a4faf6921458ceef6e8b362b9426bdcc1fc424b9258759136644098704d98b2c361cb7bddb2175d90b7b6812fd8ebeff5ee0cb8e14f5ca0529c79014e43dfe5191caf4e8ffa7983eefd22e3b66c2a2fc9e826875a50c8b95526102501874aafe3f502ebaaabbe6af20ba3b02e3ed1735202801a0983aa65a8476f75cd695bd59b0a3e28d983692cd81b11ec055719682b4c6686e809bac702dba814d25c66d19e966df0432712bbabd2a6c4542be7bb83080c09c7d2421c7a7b4fdc252a347d8add646a0d4258fd17a3e7af126b919a0bc14824c3101492edd7673e8d7a37e0cd931e9f9789f6f49de7d3f50eb97690b515f11fc6647aeab9cde920a053a6f483e328eb20a1ebb349a90fb4f581f8bf00dbe624f699650d38c5bc3dd315acdbfb4c269896e621830fbd5fa6a0a409c9d52941185ea12495a214e6249860e12d76e6e197de108fa2c686c8406e4fd964cedcd15b04712270aa3cc0bdaa5faee1765b45b3c4a6e56371d062fa1b719f3ccf2e7fcb8ba276cc75ba131733", "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"}) 08:42:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r2 = syz_open_procfs(r1, &(0x7f0000000c40)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\xd3B\xa3\xaasKV\x11\x13\vv\xb3\r\xbc\x00\xd8\xa4\xf2\x98z7\xdam2\xab\x92sc\xe8\x8e\x7fe\x0e\xafde2\xeb\x12\x1c\xa4\xca\x93\x13\xfe\xef\xac\xeb\xb6\xed<@\xff\xe6\x01\x1c]\x00\x00\x00\x00Wy\xd2\xd0\x8d\x1f6\x1b\xed\xc6d\xd2\xc8\xa2,\rjA\xf1#\xc1\x9a\xeeC\xbd\xe4;E\v\xa9p\xf5\xdaJ\xf0\x0e\xe6cP\n\xf3\x7fkA\x92\xfe\xd3\xb9\xd6b\x9e\xabYw\xdb\xc17\xe6R2\xd4\x86\n\x8c[I\xde\xe9\x97,+\x96\x11H\x1b\x8f2\xed\x99I\x06w\xe0\xcd`\xcfr\xdd\\\x8bV\"\x9a\xea\xe9\x80\xc5$\f\xf0\x01\x90\xd5\x97\x8e[\x18\xba\xf6\xd00TU\xfc\x1bum{~\xfaZ\xd0qp\xe3\xa4v\xc4\xcb\xaf\x93l\xc6<\xeb\xa5\xe1!\xb0\xa2%\xc2^b}|\xb2 \n\tg\xf9po\xba\r;\xe52\xd1\x81\xce\xb5\xf0K\xaf\xb4/\x12\xbdb\xb0\xf6\b\x8aW;\xc3d\xdbI\x128^\xb7\x9f\xce\xd1|\x1c\x99\x92\xb0Q \x90\xdc\x99\x9c\xb6\xc5\xdb\xfb\x00=\x96\xaa\x01\xef.7\xa5\xb8PpK\x84\xd1)\xa3\x9dg\x80\xbaq\xdc\xbf\xaa\xac\r\\+\x8eZ\v\xa0Q<\x9f\xd2\xf7\x05]\x84\xff\x0f\x00\x00\x00\x00\x00\x00z[f\x02\x86;\xe0\x11>|6\x18\x12\x99%A0\x93\xb5K\x0e\x17@P\xc9\xd1\xab\xddm\xc6\xd9O\xc7\xa5\x05E7^\xb4f\xc1F\xed\x9df') openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/mcfilter\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, r1, 0x0, 0x6, &(0x7f0000000000)='{proc\x00', 0xffffffffffffffff}, 0x30) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x9, 0x7, 0x0, 0x3, 0x1, [{0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x100}]}) 08:42:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 550.158409] Bluetooth: Can't register HCI device 08:42:49 executing program 1 (fault-call:2 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:49 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x428544) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200080, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000000c0)) close(r0) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x100000000, 0x40000) [ 550.200467] device bridge_slave_1 left promiscuous mode [ 550.206177] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.276730] FAULT_INJECTION: forcing a failure. [ 550.276730] name failslab, interval 1, probability 0, space 0, times 0 [ 550.298055] device bridge_slave_0 left promiscuous mode [ 550.318965] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.340196] CPU: 1 PID: 15579 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 550.347344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.357378] Call Trace: [ 550.359969] dump_stack+0x138/0x19c [ 550.363618] should_fail.cold+0x10f/0x159 [ 550.367785] should_failslab+0xdb/0x130 [ 550.371771] kmem_cache_alloc+0x2d7/0x780 [ 550.375923] ? memcpy+0x46/0x50 [ 550.379200] ? kstrdup+0x5a/0x70 [ 550.379217] __kernfs_new_node+0x70/0x420 [ 550.379228] ? vprintk_func+0x65/0x159 [ 550.379241] kernfs_new_node+0x80/0xf0 [ 550.379255] kernfs_create_dir_ns+0x41/0x140 [ 550.398942] sysfs_create_dir_ns+0xbe/0x1d0 [ 550.403283] kobject_add_internal.part.0.cold+0x114/0x5ae [ 550.408837] kobject_add+0x11f/0x180 [ 550.412565] ? kset_create_and_add+0x180/0x180 [ 550.417160] ? mutex_unlock+0xd/0x10 [ 550.420882] device_add+0x383/0x1490 [ 550.424602] ? device_initialize+0x430/0x430 [ 550.429015] ? device_private_init+0x190/0x190 [ 550.433599] ? up_write+0x1a/0x60 [ 550.437109] hci_register_dev+0x2d9/0x810 [ 550.441261] ? hci_init_sysfs+0x7c/0xa0 [ 550.445245] __vhci_create_device+0x2a6/0x560 [ 550.449744] vhci_write+0x2a1/0x437 [ 550.453378] __vfs_write+0x4a7/0x6b0 [ 550.457103] ? kernel_read+0x120/0x120 [ 550.461006] ? rw_verify_area+0xea/0x2b0 [ 550.465067] vfs_write+0x198/0x500 [ 550.468614] SyS_write+0xfd/0x230 [ 550.472071] ? SyS_read+0x230/0x230 [ 550.475708] ? do_syscall_64+0x53/0x640 [ 550.479693] ? SyS_read+0x230/0x230 [ 550.483322] do_syscall_64+0x1e8/0x640 [ 550.487216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.492065] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 550.497261] RIP: 0033:0x459519 [ 550.500445] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.508160] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 550.515432] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 550.522701] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 550.529973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 550.537250] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 550.671899] kobject_add_internal failed for hci2 (error: -12 parent: bluetooth) [ 550.680649] Bluetooth: Can't register HCI device [ 550.712313] device hsr_slave_1 left promiscuous mode [ 550.755025] device hsr_slave_0 left promiscuous mode [ 550.804545] team0 (unregistering): Port device team_slave_1 removed [ 550.814205] team0 (unregistering): Port device team_slave_0 removed [ 550.824864] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 550.874401] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 550.952971] bond0 (unregistering): Released all slaves [ 553.370256] IPVS: ftp: loaded support on port[0] = 21 [ 553.676727] chnl_net:caif_netlink_parms(): no params data found [ 553.708804] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.715398] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.722798] device bridge_slave_0 entered promiscuous mode [ 553.729629] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.736328] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.743344] device bridge_slave_1 entered promiscuous mode [ 553.761106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 553.769776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 553.788432] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 553.795741] team0: Port device team_slave_0 added [ 553.801238] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 553.808281] team0: Port device team_slave_1 added [ 553.813687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 553.820965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 553.902256] device hsr_slave_0 entered promiscuous mode [ 553.970451] device hsr_slave_1 entered promiscuous mode [ 554.010752] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 554.017694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 554.029984] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.036389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.043069] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.049432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.077021] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 554.083548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.092206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 554.101182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.108271] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.115159] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.125624] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 554.131823] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.139995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.148123] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.154555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.170650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.178246] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.184692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.192267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.203903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.211362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.224736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.232656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.242041] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 554.248242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.261667] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 554.271370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.660621] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:42:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setfsgid(r2) pwritev(r1, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) 08:42:54 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x202600, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0xfffffffffffffff9) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:42:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(0x0, &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:42:54 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:54 executing program 1 (fault-call:2 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 555.577889] FAULT_INJECTION: forcing a failure. [ 555.577889] name failslab, interval 1, probability 0, space 0, times 0 [ 555.608961] CPU: 1 PID: 15609 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 555.616133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.625497] Call Trace: [ 555.625521] dump_stack+0x138/0x19c [ 555.625543] should_fail.cold+0x10f/0x159 [ 555.625561] should_failslab+0xdb/0x130 [ 555.635925] __kmalloc_track_caller+0x2ec/0x790 [ 555.644568] ? save_trace+0x290/0x290 [ 555.648387] ? check_preemption_disabled+0x3c/0x250 [ 555.653412] ? kstrdup_const+0x48/0x60 [ 555.653425] kstrdup+0x3a/0x70 [ 555.653437] kstrdup_const+0x48/0x60 [ 555.653451] __kernfs_new_node+0x2f/0x420 [ 555.653462] kernfs_new_node+0x80/0xf0 [ 555.653475] kernfs_create_link+0x2c/0x170 08:42:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:42:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0xffff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r2, r3}) pwritev(r1, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r4}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 08:42:55 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:55 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r0, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:42:55 executing program 1 (fault-call:2 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:55 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:42:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) close(0xffffffffffffffff) [ 556.397715] FAULT_INJECTION: forcing a failure. [ 556.397715] name failslab, interval 1, probability 0, space 0, times 0 08:42:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, r1, 0x0, 0x5, &(0x7f0000000000)='fd/4\x00'}, 0x30) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r2}) pwritev(r1, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) getgroups(0x4, &(0x7f0000000240)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x2, {0x13, 0x3, 0x6}, 0x0, r4, r5, 0x1, 0x100, 0x8dfb, 0x5, 0x80000000, 0x8, 0x4, 0x3c, 0x7, 0x401, 0x9ad, 0x5008, 0x4, 0x0, 0x78}}, 0xa0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000340)={@mcast2, r3}, 0x14) [ 556.569761] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 556.569768] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 556.569773] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 556.569779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 556.569785] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:42:56 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 08:42:56 executing program 1 (fault-call:2 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 556.679814] Bluetooth: Can't register HCI device [ 556.825481] FAULT_INJECTION: forcing a failure. [ 556.825481] name failslab, interval 1, probability 0, space 0, times 0 [ 556.848878] CPU: 1 PID: 15705 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 556.856032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.856037] Call Trace: [ 556.856061] dump_stack+0x138/0x19c [ 556.856083] should_fail.cold+0x10f/0x159 [ 556.856109] should_failslab+0xdb/0x130 [ 556.856126] kmem_cache_alloc+0x2d7/0x780 [ 556.856147] __kernfs_new_node+0x70/0x420 [ 556.883970] kernfs_new_node+0x80/0xf0 [ 556.883986] kernfs_create_dir_ns+0x41/0x140 [ 556.884000] internal_create_group+0xea/0x7b0 [ 556.884011] ? kernfs_put+0x35e/0x490 [ 556.896445] sysfs_create_group+0x20/0x30 [ 556.896461] dpm_sysfs_add+0x26/0x1b0 [ 556.896473] device_add+0x968/0x1490 [ 556.896487] ? device_private_init+0x190/0x190 [ 556.912842] hci_register_dev+0x2d9/0x810 [ 556.912856] ? hci_init_sysfs+0x7c/0xa0 [ 556.912874] __vhci_create_device+0x2a6/0x560 [ 556.912885] vhci_write+0x2a1/0x437 [ 556.921177] __vfs_write+0x4a7/0x6b0 [ 556.921192] ? kernel_read+0x120/0x120 [ 556.921214] ? rw_verify_area+0xea/0x2b0 [ 556.921225] vfs_write+0x198/0x500 [ 556.921239] SyS_write+0xfd/0x230 [ 556.921250] ? SyS_read+0x230/0x230 [ 556.929361] ? do_syscall_64+0x53/0x640 [ 556.929376] ? SyS_read+0x230/0x230 [ 556.929389] do_syscall_64+0x1e8/0x640 [ 556.929399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.929415] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 556.929427] RIP: 0033:0x459519 [ 556.937548] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.937560] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 556.937566] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 556.937572] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 556.937578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 556.937584] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 557.033155] Bluetooth: Can't register HCI device 08:42:56 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:56 executing program 2: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x6, @mcast2, 0x8001}, {0xa, 0x4e23, 0x3, @loopback, 0x180000}, 0x80000001, [0xfffffffffffff001, 0x8, 0xff, 0x3f, 0x1000, 0x5, 0x7, 0x7]}, 0x5c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x3bf, 0x0, &(0x7f0000000040)}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='fd/4\x00') socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xac}, &(0x7f0000000040)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e20, 0x7, @empty, 0x10001}, r4}}, 0x38) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000200)={{0x4, @name="d6fca6fcfc595f97f03fcc17ea2f317df3c356ab7c61eb0afda0659a4a5e365e"}, 0x8, 0x81, 0x7fff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={r3, 0x200}, &(0x7f00000000c0)=0x8) pwritev(r2, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) 08:42:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r0, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:42:56 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v2={0x5, 0x2, 0x4, 0x4, 0xe, "e9ed018e3126803ee151f2e54e8a"}, 0x18, 0x1) epoll_create1(0x80000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0x7, 0x3ff, 0x2, 0x800, r2}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000001c0)=0x80000001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:42:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000005b40)={0x0, @in={{0x2, 0x0, @local}}}, 0x0) 08:42:56 executing program 1 (fault-call:2 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='posix_acl_accessvboxnet1&vboxnet1cpuset\x00', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) 08:42:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={r1, 0x3d}) r2 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f0000000140)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd/4\x00') pwritev(r4, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) 08:42:57 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:42:57 executing program 1 (fault-call:2 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:42:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x60, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x224, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) [ 557.631463] device bridge_slave_1 left promiscuous mode [ 557.637188] bridge0: port 2(bridge_slave_1) entered disabled state 08:42:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [], @empty}, 0x3}}, 0x1bc6, 0x2, 0x1, 0x7, 0x1}, &(0x7f00000000c0)=0x98) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0xffff}, 0x8) [ 557.722864] device bridge_slave_0 left promiscuous mode [ 557.730958] FAULT_INJECTION: forcing a failure. [ 557.730958] name failslab, interval 1, probability 0, space 0, times 0 [ 557.745279] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.783474] CPU: 1 PID: 15743 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 557.790655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.790661] Call Trace: [ 557.790686] dump_stack+0x138/0x19c [ 557.790709] should_fail.cold+0x10f/0x159 [ 557.790724] should_failslab+0xdb/0x130 [ 557.814406] kmem_cache_alloc+0x2d7/0x780 [ 557.818563] ? wait_for_completion+0x420/0x420 [ 557.823164] __kernfs_new_node+0x70/0x420 [ 557.827321] kernfs_new_node+0x80/0xf0 [ 557.831211] __kernfs_create_file+0x46/0x323 [ 557.835619] sysfs_add_file_mode_ns+0x1e4/0x450 [ 557.835635] sysfs_add_file+0x4f/0x60 [ 557.835646] sysfs_merge_group+0xe2/0x210 [ 557.835662] dpm_sysfs_add+0x121/0x1b0 [ 557.852166] device_add+0x968/0x1490 [ 557.855890] ? device_private_init+0x190/0x190 [ 557.860483] hci_register_dev+0x2d9/0x810 [ 557.860495] ? hci_init_sysfs+0x7c/0xa0 [ 557.860511] __vhci_create_device+0x2a6/0x560 [ 557.860527] vhci_write+0x2a1/0x437 [ 557.876757] __vfs_write+0x4a7/0x6b0 [ 557.880476] ? kernel_read+0x120/0x120 [ 557.884370] ? rw_verify_area+0xea/0x2b0 [ 557.884385] vfs_write+0x198/0x500 [ 557.884399] SyS_write+0xfd/0x230 [ 557.884410] ? SyS_read+0x230/0x230 [ 557.899053] ? do_syscall_64+0x53/0x640 [ 557.899069] ? SyS_read+0x230/0x230 [ 557.899082] do_syscall_64+0x1e8/0x640 [ 557.899097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 557.899113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 557.910580] RIP: 0033:0x459519 [ 557.910586] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 08:42:57 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 557.910597] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 557.910603] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 557.910612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 557.923834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 557.923841] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 558.047173] Bluetooth: Can't register HCI device [ 558.112988] device hsr_slave_1 left promiscuous mode [ 558.164295] device hsr_slave_0 left promiscuous mode [ 558.215416] team0 (unregistering): Port device team_slave_1 removed [ 558.240918] team0 (unregistering): Port device team_slave_0 removed [ 558.268328] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 558.323049] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 558.383415] bond0 (unregistering): Released all slaves [ 560.950198] IPVS: ftp: loaded support on port[0] = 21 [ 561.395260] chnl_net:caif_netlink_parms(): no params data found [ 561.427580] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.434327] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.441222] device bridge_slave_0 entered promiscuous mode [ 561.447664] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.454139] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.462481] device bridge_slave_1 entered promiscuous mode [ 561.478235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 561.487329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 561.505370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 561.512734] team0: Port device team_slave_0 added [ 561.518051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 561.525316] team0: Port device team_slave_1 added [ 561.530682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 561.537848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 561.622205] device hsr_slave_0 entered promiscuous mode [ 561.690366] device hsr_slave_1 entered promiscuous mode [ 561.730593] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 561.737485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 561.749763] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.756155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.762829] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.769167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.796174] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 561.802962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.810921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 561.818899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.827134] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.833801] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.844785] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 561.851051] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.859257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.867036] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.873395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.890997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.898548] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.904949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.912501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 561.920098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 561.928110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 561.937175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.948995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.959290] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 561.965613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 561.974170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.986548] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 561.997142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.390964] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:43:02 executing program 2: r0 = gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)) r1 = syz_open_procfs(r0, &(0x7f0000000200)='map_files\x00') openat$cgroup_ro(r1, &(0x7f0000000700)='mem\x00\x01y7SwaS.\x06ur\x06\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f00000001c0)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240)="2a11be6b3faab9e3cdecec71179ae13eaa21d91ce11f0e577fed6e2d4ea8414c939c470a51079d65f3382651acdb318bad88232fb815c7daad29c08926b119657b98851636118ede92dfb9dd3f9fd7bd55efac4afb3766174ce300243c603b53d279ca42437287c618ad60a1a8e880ef495fe4a10d6c015e81e950fcc54f794f4ef9ab0a6f933ada5514b1a2913387ee26cdf703206faa610a5dcd2f099cde7c2fbc4292a524fdf8997026bdf6e4a4415257c262823410a93a7ff56427b995a739518ddee915", 0xc6, r0}, 0x68) connect$packet(r0, &(0x7f0000000200)={0x11, 0x4, r1, 0x1, 0xffffffffffffffff, 0x6, @link_local}, 0x14) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/56, &(0x7f0000000100)=0x38) close(r2) remap_file_pages(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x6, 0x41003) [ 564.466803] device bridge_slave_0 left promiscuous mode [ 564.479924] bridge0: port 1(bridge_slave_0) entered disabled state 08:43:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') fsync(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedf#\x05\x00\x00\xad\x1cD$0uZ\xdc\v\x9ah*4\xfb\x93\xce%A\xa7]\xb6\xc3G}\x18\x8b\xb3\xe8\x83\xb5\xb8\xf5k\xed\x06I\xe1\x14b\x94\xa8\xe4\xbeW*~\x81\xb8\n\as\x03\xe8\xc7\x84~c\xa9\xd5\xf9=f') pwritev(r2, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) 08:43:04 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0xa0702) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) fcntl$setpipe(r0, 0x407, 0xf) 08:43:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) r3 = getegid() fchown(r0, r2, r3) pwritev(r1, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x40, &(0x7f0000000040)=0x4) [ 564.732800] Bluetooth: Can't register HCI device [ 564.797417] device hsr_slave_1 left promiscuous mode 08:43:04 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 564.844365] device hsr_slave_0 left promiscuous mode [ 564.886365] team0 (unregistering): Port device team_slave_1 removed [ 564.912774] team0 (unregistering): Port device team_slave_0 removed [ 564.948595] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 565.014839] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 565.083739] bond0 (unregistering): Released all slaves 08:43:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) r1 = dup(r0) setreuid(0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e00b85) [ 567.530216] IPVS: ftp: loaded support on port[0] = 21 [ 567.836975] chnl_net:caif_netlink_parms(): no params data found [ 567.868836] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.875330] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.882690] device bridge_slave_0 entered promiscuous mode [ 567.889242] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.895996] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.903220] device bridge_slave_1 entered promiscuous mode [ 567.920743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 567.929545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 567.947875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 567.955144] team0: Port device team_slave_0 added [ 567.960897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 567.967941] team0: Port device team_slave_1 added [ 567.973325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 567.980559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 568.042221] device hsr_slave_0 entered promiscuous mode [ 568.110511] device hsr_slave_1 entered promiscuous mode [ 568.150806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 568.157749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 568.170746] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.177111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.183781] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.190168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.216960] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 568.223314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.231977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 568.239975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.247795] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.255026] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.265266] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 568.271566] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.279932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.287603] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.293974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.310840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.318399] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.324820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.333185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.341269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.350238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 568.362822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 568.373575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.384318] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 568.391044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 568.398530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 568.406082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.417843] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 568.427981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.830825] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:43:09 executing program 1 (fault-call:2 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:09 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000180)={0x7, 0x5, 0x0, 0x100000000}) r1 = socket(0xa, 0x80000, 0x4) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="479589b3e10cca1538385561f1a5a52f30812fe9cd8472add5c62acfd8fe82c3f73e015809b86ffcdc26b2de3f6a7a4be51cd1ed254da67d54a7df65e9c261c3919d2128ee51e8dcb707f079c49012ef46305f250492d368f1c31ffd46a3df02e3d1f5ea8eb179c0926958235770026e7c0e04a6512f6c6e91fd9d1143d00e20f2027ad1aecfbbe6ec9255dbb41d896b4b10ec3a888cbc06b90278921d60ff7b09e933e1345fbf50e3fbcd08b2b7fecf0885c79e40623496e100dc6e7ef16bccc48ca22b00ad49c953f32f46ae968a28a805e14354827ab527b431419ee39f9a783f5bc2a75b") open_by_handle_at(r0, &(0x7f00000002c0)={0x3e, 0x9, "0b841491ca858c587c606e783cd278eff1d7e6af0227cc9c1c3227260fdfdec1519e482ef47620322574585e3830ee8e15e84c0febf3"}, 0x410100) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/enforce\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000280)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0xa, &(0x7f0000000780)=[{&(0x7f0000000300)="d669eadee443eea6bd219b87931e164e8552279fb637192790a47be5b5df43ca0dd70a", 0x23, 0x14}, {&(0x7f0000000340)="1890b9f3da25f6700360ceb1aba1defbdb19eafe7a1163dc4802f043b7f175e67fc95d2f5c8878d192eb0ce0188cb066aa242119567394d05442b56b83034fffa6225055eb4501f373b4d9fbd351391768ad2a6fb0029308f636491465f62f8bcec51ddfcdec7a5eaa934d72c29b6a56d92f968ee565", 0x76, 0x1}, {&(0x7f00000003c0)="4732fe70f8dd2043ef13315b68226eeb9f025d52628a1430a269a9912cb7b7ea10b40f", 0x23, 0xbde4}, {&(0x7f0000000400)="71d3550e29054b8a8abc0bbef13a5079b682cc1d576c8e7e874c01e74939e82f3dcf", 0x22, 0x2}, {&(0x7f0000000440)="9b914610bd6220bc25ed106ffab6568102bf7e3d717f60273983a0bda12486cc9069bbf221955dfd7ee5a0816573491e34fab3f5982c683bb96eab21a110f7f4", 0x40, 0x8}, {&(0x7f0000000480)="cb0ebb411f6483d0d9cfc1d6396323867f0a8e33c1de002dfe5ca1f3d6b0a0718fdf18f74deab1b62a8a481c7ec64ed1c6bf52120a9c5e9fd14a46e906e00849622e00eacc865861af94d29380a18a887ce9d1afced63fb765ade69b997e9e39c1884607e45719692802a762559deafc917ee1", 0x73, 0x1359}, {&(0x7f0000000500)="2feac7ccd17d02009ee3d39271bef2c9e50887355c79ff94fb6927f224242539afc17e3c5271e8cfe6e6f4e52be019ea124f848845ea42bbc28f2927f59637be47322657acc61da83c1f5e3d43c4f1dd25506b21bb3f74e8d901401293dc064a31b02402da9ac57b34dc711bd842010e0ae8207df7d5ff42aa2da5e1803c03b4af3fd55b9339e8931f490605f04a8e206e583923e90ebf2559a6a642b9a0bb7d51c944a0a615c7dff54eb3518441a90dcac801335bfdac2d2e7bc3019550122129f7ea55c3c82a9b555279f641b6ed66aeba", 0xd2, 0x4}, {&(0x7f0000000600)="57dcc1f8aedb8392ce406d5fb72e98346f13ee26b82e848b7f514e38adb2087933c09b9778b69853558094cde148e202d3c5161b8c7189ac2bbe1806e9e5b02b0e94d52679b52912fa6d7e64e748c4b1db37136c83cfb88622831aa6a84a176575cb5a7800cdc0c6ea73ccba445b3a98", 0x70, 0x7}, {&(0x7f0000000680)="e1b61dc6590a187f32514f00a6ed551e95dc3a7bd6cae1275b625599365fd3e36ca3847a10049f1005be997cd9c97d5287c16bed9a4e428dc03179a7c9ca75ebe3ed0f39601245795d60e4984b0008f1402a7e27335909757cdaa866c1f7113ade7902c74064b7eb65c1df1c0c76633e6bc747e7d3dc6220764cb0beb58ae93f8a64b15901e56a3b934a43af5cc05d84da7ac8af452c6049b649279d983111", 0x9f, 0x9}, {&(0x7f0000000740)="962fc532ccb5e1fc69cff61a5e6945869763bfa3be08b8153e056a1a14d2a7d8", 0x20, 0x5}], 0x80, &(0x7f0000000c40)={[{@nodecompose='nodecompose'}], [{@euid_gt={'euid>', r3}}, {@measure='measure'}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', r5}}, {@seclabel='seclabel'}, {@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r6}}]}) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "25645500aba0a9944f750e49f719dd62192a308f94fca832abcd67ed4b"}, 0x2d) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)) socket$packet(0x11, 0x2, 0x300) close(r1) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x240000) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000180)={0x2, 0x200}, 0x2) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x80000000, 0xc000) 08:43:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/153, 0x99}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/49, 0x31}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r2, 0x0) 08:43:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:43:09 executing program 1 (fault-call:2 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 570.049756] hfsplus: unable to parse mount options 08:43:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='net/rt_acct\x00') pwritev(r2, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) [ 570.075113] FAULT_INJECTION: forcing a failure. [ 570.075113] name failslab, interval 1, probability 0, space 0, times 0 08:43:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 570.117240] CPU: 1 PID: 15946 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 570.124482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.133887] Call Trace: [ 570.136498] dump_stack+0x138/0x19c [ 570.140152] should_fail.cold+0x10f/0x159 [ 570.144319] should_failslab+0xdb/0x130 [ 570.148308] __kmalloc+0x2f0/0x7a0 [ 570.151862] ? kobject_get_path+0xbb/0x1a0 [ 570.156108] kobject_get_path+0xbb/0x1a0 [ 570.160186] ? devm_device_remove_groups+0x50/0x50 [ 570.165138] kobject_uevent_env+0x39c/0xc23 [ 570.169479] ? wait_for_completion+0x420/0x420 [ 570.174065] ? _raw_spin_unlock_irq+0x54/0x90 [ 570.178578] kobject_uevent+0x20/0x26 [ 570.182392] device_add+0xa3e/0x1490 [ 570.186121] ? device_private_init+0x190/0x190 [ 570.190718] hci_register_dev+0x2d9/0x810 [ 570.194877] __vhci_create_device+0x2a6/0x560 [ 570.199378] vhci_write+0x2a1/0x437 [ 570.203015] __vfs_write+0x4a7/0x6b0 [ 570.206733] ? kernel_read+0x120/0x120 [ 570.210635] ? rw_verify_area+0xea/0x2b0 [ 570.214704] vfs_write+0x198/0x500 [ 570.218253] SyS_write+0xfd/0x230 [ 570.221708] ? SyS_read+0x230/0x230 [ 570.225341] ? do_syscall_64+0x53/0x640 [ 570.229576] ? SyS_read+0x230/0x230 [ 570.233209] do_syscall_64+0x1e8/0x640 [ 570.237107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.241958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 570.247147] RIP: 0033:0x459519 [ 570.250334] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.258040] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 08:43:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') pwritev(r1, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) [ 570.265314] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 570.272584] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 570.279864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 570.287134] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:09 executing program 1 (fault-call:2 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 570.376552] hfsplus: unable to parse mount options 08:43:09 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x0, &(0x7f0000000040)=0x401) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:43:09 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x882, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000180)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0x0) fcntl$addseals(r2, 0x409, 0xd) dup2(r1, r0) [ 570.533501] FAULT_INJECTION: forcing a failure. [ 570.533501] name failslab, interval 1, probability 0, space 0, times 0 [ 570.561424] CPU: 1 PID: 15965 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 570.568695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.578051] Call Trace: [ 570.580703] dump_stack+0x138/0x19c [ 570.584347] should_fail.cold+0x10f/0x159 [ 570.588510] should_failslab+0xdb/0x130 [ 570.592495] kmem_cache_alloc_node+0x287/0x780 [ 570.592516] __alloc_skb+0x9c/0x500 [ 570.592527] ? skb_scrub_packet+0x4b0/0x4b0 [ 570.592543] ? netlink_has_listeners+0x20a/0x330 [ 570.592558] kobject_uevent_env+0x781/0xc23 [ 570.592574] kobject_uevent+0x20/0x26 [ 570.605625] device_add+0xa3e/0x1490 [ 570.622187] ? device_private_init+0x190/0x190 [ 570.626822] hci_register_dev+0x2d9/0x810 [ 570.630977] ? hci_init_sysfs+0x7c/0xa0 [ 570.634964] __vhci_create_device+0x2a6/0x560 [ 570.639475] vhci_write+0x2a1/0x437 [ 570.643120] __vfs_write+0x4a7/0x6b0 [ 570.646846] ? kernel_read+0x120/0x120 [ 570.650747] ? rw_verify_area+0xea/0x2b0 [ 570.654813] vfs_write+0x198/0x500 [ 570.658360] SyS_write+0xfd/0x230 [ 570.661816] ? SyS_read+0x230/0x230 [ 570.665620] ? do_syscall_64+0x53/0x640 [ 570.669631] ? SyS_read+0x230/0x230 [ 570.673270] do_syscall_64+0x1e8/0x640 [ 570.677163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.682018] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 570.687210] RIP: 0033:0x459519 [ 570.690396] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.698111] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 570.705383] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 570.712655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 570.719928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 570.727206] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:10 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3f, 0x111000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0xd0, r1}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00egy\xe5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x00\x00\x00\x00\x00') openat$cgroup_ro(r3, &(0x7f0000001500)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\x01\xd0`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000003c0)='./file1\x00', 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r4 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x78) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000080)=0x1) getsockopt(0xffffffffffffffff, 0x5d8, 0x7, 0x0, &(0x7f0000000100)) close(r0) r5 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f00000000c0)={0x4f, "33f9ebe0ccdd149db1be0452b9ef5c8be03d53af63c84eb27fe468008b7d788450f78b0a3398f84eba67f1b3c5df83a45358ca3768fd546fd89bd173d3f9fbcb5fc1ee891b34c71266bac8b9df95ee"}) close(r0) [ 576.174036] FAULT_INJECTION: forcing a failure. [ 576.174036] name failslab, interval 1, probability 0, space 0, times 0 [ 576.203322] CPU: 1 PID: 16028 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 576.210469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.210475] Call Trace: 08:43:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r3 = syz_open_procfs(r2, &(0x7f00000007c0)='f\xe9/X\x8e2X\x05>\xe7\x994\x00&Q\xf3;?T\x9a\x05\x97\x01)\"\f\x1b\xef/0\x11\xd9D\xc7X\x1c3\xda\xf8\x14G\xb7O\x16\x05\xf2\x81\xd9\xa7I\x88\xfc\xd1\x04#\xe58U\x8d\t\xfd\xaf\xc8SF\x96q\xad\xd2k\xd6\t\x98\xad\x18\xe6]\x1c{E\x06|\xd4\xa2wH\xf5\xe1\xc7h\x9f_\x1f\x16\'H\xddB;\x97&\xden\xdc\xcd\x9d\xe9\x11kg\xf7\xdd\xc7\x17J\xad\x87+\xfa\xf1\r\xcbg [~\x14a\xea\xab\x12\xb2\xda\x871\x92\xa2\xc0\x81\xc3\xaa\xd5\x8cK\x19\x80\xd9\xf7\"\x1d\xcc\x1f\x83X\x16\x97\xe2)+\xb2\x8d\x1f\xdd*\xf9\xe6\xaf\x00'/183) pwritev(r3, &(0x7f0000003980)=[{&(0x7f00000006c0)="0e", 0x1}], 0x1, 0x0) [ 576.250040] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 576.250045] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 576.250050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 576.250056] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 08:43:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) r1 = dup(r0) geteuid() recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e00b85) 08:43:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) getpgid(0x0) clock_settime(0x4, &(0x7f0000000040)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000240)='autogroup\x00') openat$cgroup_ro(r2, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={r3, 0x1}) r4 = gettid() ptrace$getsig(0x4202, r4, 0x401, &(0x7f0000000100)) [ 580.420238] IPVS: ftp: loaded support on port[0] = 21 [ 580.747447] chnl_net:caif_netlink_parms(): no params data found [ 580.780630] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.787067] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.794162] device bridge_slave_0 entered promiscuous mode [ 580.801455] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.807842] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.814945] device bridge_slave_1 entered promiscuous mode [ 580.832973] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 580.842288] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 580.858486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 580.865730] team0: Port device team_slave_0 added [ 580.871434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 580.878446] team0: Port device team_slave_1 added [ 580.883843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 580.891214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 580.943824] device hsr_slave_0 entered promiscuous mode [ 580.990470] device hsr_slave_1 entered promiscuous mode [ 581.030731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 581.037628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 581.051270] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.062032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.068679] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.075071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.102509] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 581.108621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.118269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 581.126935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.134045] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.141447] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.151779] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 581.157861] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.167356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 581.178893] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.185288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.194971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.202725] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.209095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.229180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.239021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.250581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 581.257418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 581.265237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 581.273076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.280825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.288917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 581.296137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 581.308612] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 581.318760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.730763] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) 08:43:21 executing program 1 (fault-call:2 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:21 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, 0x0) read$FUSE(r1, &(0x7f0000000480), 0x1000) 08:43:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) connect$packet(r1, &(0x7f0000000040)={0x11, 0x8, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) [ 582.387954] kmem_cache_alloc_node_trace+0x280/0x770 [ 582.393064] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 582.393083] __kmalloc_node_track_caller+0x3d/0x80 [ 582.393099] __kmalloc_reserve.isra.0+0x40/0xe0 [ 582.393112] __alloc_skb+0xcf/0x500 [ 582.403495] ? skb_scrub_packet+0x4b0/0x4b0 [ 582.403509] ? netlink_has_listeners+0x20a/0x330 [ 582.403524] kobject_uevent_env+0x781/0xc23 [ 582.403542] kobject_uevent+0x20/0x26 [ 582.403554] device_add+0xa3e/0x1490 [ 582.403567] ? device_private_init+0x190/0x190 08:43:21 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedMM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') 08:43:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xffbc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x34) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x20e) close(r0) [ 586.710225] IPVS: ftp: loaded support on port[0] = 21 [ 587.015894] chnl_net:caif_netlink_parms(): no params data found [ 587.049175] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.055747] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.062740] device bridge_slave_0 entered promiscuous mode [ 587.069308] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.075856] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.082985] device bridge_slave_1 entered promiscuous mode [ 587.100797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 587.109537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 587.128536] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 587.135812] team0: Port device team_slave_0 added [ 587.141294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 587.148335] team0: Port device team_slave_1 added [ 587.153740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 587.161013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 587.242437] device hsr_slave_0 entered promiscuous mode [ 587.310510] device hsr_slave_1 entered promiscuous mode [ 587.360628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 587.367495] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 587.381932] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.388314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.394973] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.401338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.428660] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 587.435016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.443340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 587.453103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.460501] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.467103] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.476938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 587.483070] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.492424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.500000] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.506636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.515898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.523694] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.530087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.545391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.553012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.566229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.573771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.585315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.594448] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 587.600891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.613093] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 587.624914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.000783] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) 08:43:27 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10001, 0x10180) accept4$llc(r1, 0x0, &(0x7f00000000c0), 0x80800) 08:43:27 executing program 1 (fault-call:2 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0xffffffffffffffbd, &(0x7f00000000c0)) prlimit64(0x0, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) 08:43:27 executing program 5: r0 = socket(0x1000000010, 0x4008000000803, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x33c) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x122) 08:43:27 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000000480), 0x1000) [ 588.571712] FAULT_INJECTION: forcing a failure. [ 588.571712] name failslab, interval 1, probability 0, space 0, times 0 [ 588.584081] CPU: 0 PID: 16259 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 588.591202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.591207] Call Trace: [ 588.591231] dump_stack+0x138/0x19c [ 588.591252] should_fail.cold+0x10f/0x159 [ 588.591271] should_failslab+0xdb/0x130 [ 588.591287] kmem_cache_alloc+0x2d7/0x780 [ 588.591298] ? memcpy+0x46/0x50 [ 588.591310] ? kstrdup+0x5a/0x70 [ 588.591329] __kernfs_new_node+0x70/0x420 [ 588.591342] ? vprintk_func+0x65/0x159 [ 588.591358] kernfs_new_node+0x80/0xf0 [ 588.591370] kernfs_create_dir_ns+0x41/0x140 [ 588.591383] sysfs_create_dir_ns+0xbe/0x1d0 [ 588.591396] kobject_add_internal.part.0.cold+0x114/0x5ae [ 588.591409] kobject_add+0x11f/0x180 [ 588.591419] ? kset_create_and_add+0x180/0x180 [ 588.591435] ? mutex_unlock+0xd/0x10 [ 588.591452] device_add+0x383/0x1490 [ 588.591470] ? device_initialize+0x430/0x430 [ 588.671998] ? device_private_init+0x190/0x190 [ 588.676587] hci_register_dev+0x2d9/0x810 [ 588.680742] __vhci_create_device+0x2a6/0x560 [ 588.685233] vhci_write+0x2a1/0x437 [ 588.688859] __vfs_write+0x4a7/0x6b0 [ 588.692572] ? kernel_read+0x120/0x120 [ 588.696469] ? rw_verify_area+0xea/0x2b0 [ 588.700526] vfs_write+0x198/0x500 [ 588.704083] SyS_write+0xfd/0x230 [ 588.707550] ? SyS_read+0x230/0x230 [ 588.711174] ? do_syscall_64+0x81/0x640 [ 588.715141] ? SyS_read+0x230/0x230 [ 588.718766] do_syscall_64+0x1e8/0x640 [ 588.722651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.727494] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.732679] RIP: 0033:0x459519 [ 588.735882] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.743583] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 588.750847] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 588.758112] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 588.765374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 08:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000018001200080001007369740005c351ac2f91a52700000000"], 0x1}}, 0x0) 08:43:28 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 08:43:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x1) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x8, 0x600, {r3, r4/1000+30000}, {}, {0x0, 0x8001, 0xff, 0x1}, 0x1, @canfd={{0x1, 0xb35, 0x972, 0x7fff}, 0x28, 0x2, 0x0, 0x0, "870736f0e4f4bba53521409b1ccac41d2d308346210bf95661234f1684cfec18bd7ac65dcaa7cec2736303149d335804c8b5516339dfa7c9ec4602bee2936450"}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x40) [ 588.772639] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 588.794262] kobject_add_internal failed for hci2 (error: -12 parent: bluetooth) [ 588.812716] Bluetooth: Can't register HCI device 08:43:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) 08:43:28 executing program 1 (fault-call:2 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) [ 588.923934] FAULT_INJECTION: forcing a failure. [ 588.923934] name failslab, interval 1, probability 0, space 0, times 0 [ 588.945187] CPU: 0 PID: 16277 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 588.952341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.952347] Call Trace: [ 588.952370] dump_stack+0x138/0x19c [ 588.952397] should_fail.cold+0x10f/0x159 [ 588.972126] should_failslab+0xdb/0x130 [ 588.976108] kmem_cache_alloc_node_trace+0x280/0x770 [ 588.976123] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 588.976139] __kmalloc_node_track_caller+0x3d/0x80 [ 588.976154] __kmalloc_reserve.isra.0+0x40/0xe0 [ 588.996298] __alloc_skb+0xcf/0x500 [ 588.999942] ? skb_scrub_packet+0x4b0/0x4b0 [ 588.999959] ? netlink_has_listeners+0x20a/0x330 [ 588.999974] kobject_uevent_env+0x781/0xc23 [ 589.013411] kobject_uevent+0x20/0x26 [ 589.017217] device_add+0xa3e/0x1490 08:43:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) [ 589.017233] ? device_private_init+0x190/0x190 [ 589.017246] ? debugfs_create_dir+0x2c2/0x3b0 [ 589.017262] hci_register_dev+0x2d9/0x810 [ 589.025538] ? hci_init_sysfs+0x7c/0xa0 [ 589.038156] __vhci_create_device+0x2a6/0x560 [ 589.042659] vhci_write+0x2a1/0x437 [ 589.046293] __vfs_write+0x4a7/0x6b0 [ 589.050015] ? kernel_read+0x120/0x120 [ 589.053917] ? rw_verify_area+0xea/0x2b0 [ 589.057980] vfs_write+0x198/0x500 [ 589.061525] SyS_write+0xfd/0x230 [ 589.064980] ? SyS_read+0x230/0x230 [ 589.068605] ? do_syscall_64+0x53/0x640 [ 589.072587] ? SyS_read+0x230/0x230 [ 589.076222] do_syscall_64+0x1e8/0x640 [ 589.080109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.084960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.092151] RIP: 0033:0x459519 [ 589.095336] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.103051] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 589.110320] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 589.117582] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:43:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) dup(r0) close(r0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='\\nodev}posix_acl_accessvboxnet1\x00', 0x20, 0x1) [ 589.124881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 589.132148] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:28 executing program 2: r0 = gettid() setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x401, 0x6) tkill(r0, 0x14) 08:43:28 executing program 1 (fault-call:2 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03518ae452832ab975acdcc8565f57f8eadb5274001e8c15b38764e3b95ea81f0f4d8a903c7997dcfadea9d8f5ce7975ac3332354e74c150e6c1a0c19bbb8e65fd60a3d15eb822abcba7811a7602a676205c230aef4a3b3efe6ad6c6f4629d45119b20f1ac8c7a9a4d30a4c6975e593822606574612db43113b35e325b974a4cdf450795c398fc63496fc95acdcdb52c0e19e552f83a26692a7b7282c54ffa6166f93800922bfbf13a22a03dc33023d8f723564012e2ccab52b0534839087a8261000d17902daaeb8eeff09ac1cb14367e6deaccd03c2e604cd10c70c889e480b21f89f21fcd0000000000000000"], 0xf9) close(r0) exit_group(0x0) 08:43:28 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) 08:43:28 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 08:43:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0xfffffffffffffffd) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x4, 0x6, 0x0, 0x7, 0xba, 0xed}) 08:43:28 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x5, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) r0 = inotify_init() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') msgget$private(0x0, 0x0) getuid() inotify_rm_watch(r0, 0x0) stat(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) [ 589.397988] FAULT_INJECTION: forcing a failure. [ 589.397988] name failslab, interval 1, probability 0, space 0, times 0 [ 589.458154] CPU: 0 PID: 16293 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 589.465306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.465311] Call Trace: [ 589.465334] dump_stack+0x138/0x19c [ 589.465355] should_fail.cold+0x10f/0x159 [ 589.465371] should_failslab+0xdb/0x130 [ 589.465388] kmem_cache_alloc_node+0x287/0x780 [ 589.465412] __alloc_skb+0x9c/0x500 [ 589.465424] ? skb_scrub_packet+0x4b0/0x4b0 [ 589.465441] ? netlink_has_listeners+0x20a/0x330 [ 589.465457] kobject_uevent_env+0x781/0xc23 [ 589.465478] kobject_uevent+0x20/0x26 [ 589.501617] device_add+0xa3e/0x1490 [ 589.501633] ? device_private_init+0x190/0x190 [ 589.501650] hci_register_dev+0x2d9/0x810 [ 589.501660] ? hci_init_sysfs+0x7c/0xa0 [ 589.501677] __vhci_create_device+0x2a6/0x560 [ 589.501689] vhci_write+0x2a1/0x437 [ 589.501703] __vfs_write+0x4a7/0x6b0 [ 589.501719] ? kernel_read+0x120/0x120 [ 589.514593] ? rw_verify_area+0xea/0x2b0 [ 589.514615] vfs_write+0x198/0x500 [ 589.522897] SyS_write+0xfd/0x230 [ 589.522910] ? SyS_read+0x230/0x230 [ 589.522922] ? do_syscall_64+0x53/0x640 [ 589.522931] ? SyS_read+0x230/0x230 [ 589.522942] do_syscall_64+0x1e8/0x640 [ 589.522952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.522967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.522976] RIP: 0033:0x459519 [ 589.522982] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.522994] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 589.523000] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 08:43:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x1fffd, 0x0) write$vhci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="033a064387c95cc818601aaf18325bb3f21ba3b39a7517e59c3e9ba6e292afd782a58a6d700b26d883767a6845a475876d212a771638386cd7e0c229d62ea724df7e2d4596db2fad90c980e1d78f5a1473d9c3245c2e15fc96034b6ab6f88b73e2f7f1d1eee06d6f866414875ed322b9be7cc5bf607b2103ac197ddad7a3"], 0x7e) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:43:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='status\x00') ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) [ 589.523006] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 589.523011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 589.523017] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:29 executing program 5: poll(&(0x7f0000000180), 0x2271, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) ppoll(&(0x7f0000000000)=[{}, {r0, 0xa0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 589.760823] device bridge_slave_1 left promiscuous mode [ 589.769442] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.851934] device bridge_slave_0 left promiscuous mode [ 589.857550] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.003482] device hsr_slave_1 left promiscuous mode [ 590.043539] device hsr_slave_0 left promiscuous mode [ 590.084762] team0 (unregistering): Port device team_slave_1 removed [ 590.094623] team0 (unregistering): Port device team_slave_0 removed [ 590.104148] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 590.154561] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 590.245404] bond0 (unregistering): Released all slaves [ 592.600309] IPVS: ftp: loaded support on port[0] = 21 [ 592.967800] chnl_net:caif_netlink_parms(): no params data found [ 593.001021] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.007467] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.014499] device bridge_slave_0 entered promiscuous mode [ 593.021886] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.028264] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.035339] device bridge_slave_1 entered promiscuous mode [ 593.052281] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 593.061405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 593.077536] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 593.085428] team0: Port device team_slave_0 added [ 593.091058] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 593.098074] team0: Port device team_slave_1 added [ 593.103449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 593.111221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 593.163868] device hsr_slave_0 entered promiscuous mode [ 593.200470] device hsr_slave_1 entered promiscuous mode [ 593.240767] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 593.247746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 593.260251] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.270416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.277013] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.283421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.310946] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 593.317042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.325516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 593.335421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.342543] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.349145] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.359090] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 593.366047] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.374299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.382024] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.388382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.397552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.405290] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.411683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.427221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.434977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.446552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.456887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.468417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.479092] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 593.485245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.493055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.505584] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 593.515761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.950664] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) 08:43:34 executing program 2: 08:43:34 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) 08:43:34 executing program 1 (fault-call:2 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:34 executing program 5: 08:43:34 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) 08:43:34 executing program 2: 08:43:34 executing program 5: 08:43:34 executing program 2: 08:43:34 executing program 2: [ 594.829343] FAULT_INJECTION: forcing a failure. [ 594.829343] name failslab, interval 1, probability 0, space 0, times 0 08:43:34 executing program 5: 08:43:34 executing program 2: [ 594.899206] CPU: 0 PID: 16355 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 594.906366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.915751] Call Trace: [ 594.918354] dump_stack+0x138/0x19c [ 594.922001] should_fail.cold+0x10f/0x159 [ 594.926165] should_failslab+0xdb/0x130 [ 594.930150] __kmalloc_track_caller+0x2ec/0x790 [ 594.934832] ? save_trace+0x290/0x290 [ 594.938649] ? __mutex_unlock_slowpath+0x71/0x800 [ 594.943496] ? __lock_is_held+0xb6/0x140 [ 594.947569] ? kstrdup_const+0x48/0x60 [ 594.951490] kstrdup+0x3a/0x70 [ 594.954690] kstrdup_const+0x48/0x60 [ 594.958414] __kernfs_new_node+0x2f/0x420 [ 594.962575] kernfs_new_node+0x80/0xf0 [ 594.962588] kernfs_create_link+0x2c/0x170 [ 594.962599] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 594.962611] sysfs_create_link+0x65/0xc0 [ 594.962630] device_add+0x735/0x1490 [ 594.962642] ? device_private_init+0x190/0x190 [ 594.962660] hci_register_dev+0x2d9/0x810 [ 594.962677] __vhci_create_device+0x2a6/0x560 [ 594.971052] vhci_write+0x2a1/0x437 [ 594.971068] __vfs_write+0x4a7/0x6b0 [ 594.971082] ? kernel_read+0x120/0x120 [ 594.971105] ? rw_verify_area+0xea/0x2b0 [ 594.971115] vfs_write+0x198/0x500 [ 594.971127] SyS_write+0xfd/0x230 [ 594.971138] ? SyS_read+0x230/0x230 [ 594.971149] ? do_syscall_64+0x53/0x640 [ 594.971159] ? SyS_read+0x230/0x230 [ 594.971169] do_syscall_64+0x1e8/0x640 [ 594.971178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.971193] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.971203] RIP: 0033:0x459519 08:43:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) 08:43:34 executing program 5: 08:43:34 executing program 2: [ 595.027277] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 [ 595.039601] ORIG_RAX: 0000000000000001 [ 595.039609] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 595.039621] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 595.039627] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.039633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 595.039639] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:34 executing program 1 (fault-call:2 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:34 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x40000000000, @reserved}) fsetxattr$security_ima(r0, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@ng={0x4, 0x11, "d558b374c14cec920e17f6ab902d470f1d"}, 0x13, 0x1) r2 = semget$private(0x0, 0x0, 0x80) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000001c0)={0x7b}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x4, 0x800, 0x0, 0x8, 0x7e57, 0xffffffffffffffc0, 0x7, 0x800, 0x81, 0x7, 0x7fff, 0x9c7f, 0x9, 0x2, 0x1ff, 0x100000001, 0x2, 0xfbd1, 0x4, 0x3f, 0x9, 0x8, 0x1, 0x4000000000000000, 0x7, 0x6, 0x10000, 0x9, 0x8, 0x6, 0xfffffffffffffffb, 0x3]}) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000180)=""/53) [ 595.126970] Bluetooth: Can't register HCI device [ 595.245968] FAULT_INJECTION: forcing a failure. [ 595.245968] name failslab, interval 1, probability 0, space 0, times 0 [ 595.263038] CPU: 1 PID: 16381 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 595.270168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.279534] Call Trace: [ 595.282139] dump_stack+0x138/0x19c [ 595.285774] should_fail.cold+0x10f/0x159 [ 595.289921] should_failslab+0xdb/0x130 [ 595.293884] kmem_cache_alloc_node_trace+0x280/0x770 [ 595.298976] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 595.304419] __kmalloc_node_track_caller+0x3d/0x80 [ 595.309354] __kmalloc_reserve.isra.0+0x40/0xe0 [ 595.314025] __alloc_skb+0xcf/0x500 [ 595.317641] ? skb_scrub_packet+0x4b0/0x4b0 [ 595.321949] ? netlink_has_listeners+0x20a/0x330 [ 595.326692] kobject_uevent_env+0x781/0xc23 [ 595.331002] kobject_uevent+0x20/0x26 [ 595.334785] device_add+0xa3e/0x1490 [ 595.338525] ? device_private_init+0x190/0x190 [ 595.343108] hci_register_dev+0x2d9/0x810 [ 595.347247] ? hci_init_sysfs+0x7c/0xa0 [ 595.351211] __vhci_create_device+0x2a6/0x560 [ 595.355691] vhci_write+0x2a1/0x437 [ 595.359304] __vfs_write+0x4a7/0x6b0 [ 595.363013] ? kernel_read+0x120/0x120 [ 595.366901] ? rw_verify_area+0xea/0x2b0 [ 595.370947] vfs_write+0x198/0x500 [ 595.374471] SyS_write+0xfd/0x230 [ 595.377909] ? SyS_read+0x230/0x230 [ 595.381518] ? do_syscall_64+0x53/0x640 [ 595.385491] ? SyS_read+0x230/0x230 [ 595.389131] do_syscall_64+0x1e8/0x640 [ 595.393007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.397850] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.403025] RIP: 0033:0x459519 [ 595.406209] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.413901] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 595.421153] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 595.428405] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.435659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 595.442932] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:35 executing program 5: 08:43:35 executing program 2: 08:43:35 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x7, 0x16, 0x7fff, 0x6, 0x0, 0x1, 0x1a, 0xf}}) write$vhci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02daf23fe4ccc3966c7bceffdac7b6e2acaf39e65b315d0c694f4fef018b4d146a1c3bc1353ca54a2ecafd8af94ef300f890ea452ca58e267b83b3f317aae9ae7158480408e009a15463260dbe745c518bf1533f80ae7664832086515e7e072ec0123980f11e5f163c231c24abcf3c888937d38bec8b2d5f390db5417a796c49f9bcbe7c8f779d240a1aab0f4de18eb631f33d335b316b92cddceab05cbc10987e86c903c7386a0300000000000000684272e7f74f4e7c404546f0396dc2363504ba5e5090d3a2cd45e934ae143fe9af3d81c1b53d13a45ad31e820b7fcd66c18c0b7599c994720d520f27a1c70a9654d97a9a"], 0xc2) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000002c0)=0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x5c500, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) write$cgroup_pid(r1, &(0x7f0000000340)=r3, 0x12) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000180)) close(r0) 08:43:35 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0x1000) 08:43:35 executing program 1 (fault-call:2 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) [ 595.614483] FAULT_INJECTION: forcing a failure. [ 595.614483] name failslab, interval 1, probability 0, space 0, times 0 [ 595.640936] CPU: 1 PID: 16386 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 595.648122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.648131] Call Trace: [ 595.660095] dump_stack+0x138/0x19c [ 595.663747] should_fail.cold+0x10f/0x159 [ 595.667905] should_failslab+0xdb/0x130 [ 595.671890] kmem_cache_alloc_node_trace+0x280/0x770 [ 595.677002] ? vsnprintf+0x290/0x1560 [ 595.680817] __kmalloc_node_track_caller+0x3d/0x80 [ 595.685760] devm_kmalloc+0x62/0x170 [ 595.689479] devm_kvasprintf+0xaf/0x100 [ 595.693459] ? devm_kmemdup+0x60/0x60 [ 595.697268] devm_kasprintf+0xa5/0xd0 [ 595.701078] ? devm_kvasprintf+0x100/0x100 [ 595.705320] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 595.710430] ? devres_add+0x40/0x50 [ 595.714073] hci_leds_init+0xb1/0x1b0 [ 595.717878] hci_register_dev+0x2ee/0x810 [ 595.717891] ? hci_init_sysfs+0x7c/0xa0 [ 595.717909] __vhci_create_device+0x2a6/0x560 [ 595.717921] vhci_write+0x2a1/0x437 [ 595.734151] __vfs_write+0x4a7/0x6b0 [ 595.737875] ? kernel_read+0x120/0x120 [ 595.741781] ? rw_verify_area+0xea/0x2b0 [ 595.741791] ? vfs_write+0x76/0x500 [ 595.741803] vfs_write+0x198/0x500 [ 595.741818] SyS_write+0xfd/0x230 [ 595.756480] ? SyS_read+0x230/0x230 [ 595.760120] ? do_syscall_64+0x53/0x640 [ 595.764101] ? SyS_read+0x230/0x230 [ 595.767740] do_syscall_64+0x1e8/0x640 [ 595.771629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.776489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.781681] RIP: 0033:0x459519 [ 595.784872] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.792581] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 595.799857] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 595.807133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:43:35 executing program 5: 08:43:35 executing program 2: 08:43:35 executing program 2: 08:43:35 executing program 5: [ 595.814403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 595.821683] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:35 executing program 2: 08:43:35 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) close(r0) pwritev(r0, &(0x7f0000000100), 0x0, 0x9) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x800, 0x2a00) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) close(r4) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000000c0)) 08:43:35 executing program 1 (fault-call:2 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:35 executing program 5: 08:43:35 executing program 2: [ 595.990799] device bridge_slave_1 left promiscuous mode [ 595.996627] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.049544] FAULT_INJECTION: forcing a failure. [ 596.049544] name failslab, interval 1, probability 0, space 0, times 0 [ 596.061122] device bridge_slave_0 left promiscuous mode [ 596.061260] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.097789] CPU: 1 PID: 16410 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 596.104956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.104961] Call Trace: [ 596.104981] dump_stack+0x138/0x19c [ 596.104998] should_fail.cold+0x10f/0x159 [ 596.105013] should_failslab+0xdb/0x130 [ 596.117167] kmem_cache_alloc_node_trace+0x280/0x770 [ 596.124918] __kmalloc_node_track_caller+0x3d/0x80 [ 596.133983] ? led_trigger_unregister+0x2e0/0x2e0 [ 596.133998] __devres_alloc_node+0x39/0x120 [ 596.134011] devm_led_trigger_register+0x36/0xc0 [ 596.143783] hci_leds_init+0xe8/0x1b0 [ 596.143799] hci_register_dev+0x2ee/0x810 [ 596.161167] __vhci_create_device+0x2a6/0x560 [ 596.165738] vhci_write+0x2a1/0x437 [ 596.169377] __vfs_write+0x4a7/0x6b0 [ 596.173099] ? kernel_read+0x120/0x120 [ 596.177008] ? rw_verify_area+0xea/0x2b0 [ 596.181076] vfs_write+0x198/0x500 [ 596.184621] SyS_write+0xfd/0x230 [ 596.188080] ? SyS_read+0x230/0x230 [ 596.191712] ? do_syscall_64+0x53/0x640 [ 596.195691] ? SyS_read+0x230/0x230 [ 596.199329] do_syscall_64+0x1e8/0x640 [ 596.203220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.208076] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 596.213273] RIP: 0033:0x459519 [ 596.216460] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.224177] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 596.231451] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 596.238727] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.245998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 596.253265] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 596.456393] device hsr_slave_1 left promiscuous mode [ 596.504646] device hsr_slave_0 left promiscuous mode [ 596.557006] team0 (unregistering): Port device team_slave_1 removed [ 596.570341] team0 (unregistering): Port device team_slave_0 removed [ 596.579189] bond0 (unregistering): Releasing backup interface bond_slave_1 08:43:36 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, 0x0, 0x0) [ 596.605786] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 596.682451] bond0 (unregistering): Released all slaves [ 599.410188] IPVS: ftp: loaded support on port[0] = 21 [ 599.747138] chnl_net:caif_netlink_parms(): no params data found [ 599.779273] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.785779] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.793132] device bridge_slave_0 entered promiscuous mode [ 599.799699] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.806492] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.813566] device bridge_slave_1 entered promiscuous mode [ 599.831138] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 599.839901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 599.859215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 599.866521] team0: Port device team_slave_0 added [ 599.871985] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 599.878996] team0: Port device team_slave_1 added [ 599.884382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 599.891590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 599.952216] device hsr_slave_0 entered promiscuous mode [ 600.010354] device hsr_slave_1 entered promiscuous mode [ 600.050601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 600.057455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 600.071525] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.077876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.084582] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.090997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.118977] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 600.125346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.134137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 600.143684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.150972] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.157595] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.167032] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 600.173200] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.181774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.189313] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.195882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.205735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.213333] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.219658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.234420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.246048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.253374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.264190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.274129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.284879] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 600.291291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.298254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.312679] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 600.324004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.740493] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{}], 0x1) 08:43:40 executing program 5: 08:43:40 executing program 2: 08:43:40 executing program 1 (fault-call:2 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:40 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r1 = shmget(0x3, 0x1000, 0x78000840, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r0) 08:43:40 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, 0x0, 0x0) 08:43:40 executing program 2: 08:43:40 executing program 5: [ 601.450769] FAULT_INJECTION: forcing a failure. [ 601.450769] name failslab, interval 1, probability 0, space 0, times 0 [ 601.491062] CPU: 1 PID: 16443 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 601.498242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.507603] Call Trace: [ 601.507630] dump_stack+0x138/0x19c [ 601.507651] should_fail.cold+0x10f/0x159 [ 601.507669] should_failslab+0xdb/0x130 [ 601.507685] kmem_cache_alloc+0x2d7/0x780 [ 601.507695] ? memcpy+0x46/0x50 [ 601.507710] ? kstrdup+0x5a/0x70 [ 601.507729] __kernfs_new_node+0x70/0x420 [ 601.522051] kernfs_new_node+0x80/0xf0 08:43:40 executing program 5: 08:43:40 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = eventfd2(0x401, 0x80801) read$eventfd(r0, &(0x7f0000000080), 0x8) [ 601.522066] kernfs_create_link+0x2c/0x170 [ 601.522079] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 601.522089] sysfs_create_link+0x65/0xc0 [ 601.522105] device_add+0x735/0x1490 [ 601.532884] ? device_private_init+0x190/0x190 [ 601.532902] hci_register_dev+0x2d9/0x810 [ 601.532916] ? hci_init_sysfs+0x7c/0xa0 [ 601.540939] __vhci_create_device+0x2a6/0x560 [ 601.540953] vhci_write+0x2a1/0x437 [ 601.540967] __vfs_write+0x4a7/0x6b0 [ 601.540980] ? kernel_read+0x120/0x120 [ 601.541001] ? rw_verify_area+0xea/0x2b0 [ 601.550481] vfs_write+0x198/0x500 [ 601.550496] SyS_write+0xfd/0x230 [ 601.550507] ? SyS_read+0x230/0x230 [ 601.550518] ? do_syscall_64+0x53/0x640 [ 601.550531] ? SyS_read+0x230/0x230 [ 601.558291] do_syscall_64+0x1e8/0x640 [ 601.558303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.558321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.567016] RIP: 0033:0x459519 [ 601.567022] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 08:43:41 executing program 5: 08:43:41 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = getpgid(0xffffffffffffffff) r2 = msgget(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000640)={{0x7, r3, r4, r5, r6, 0x30, 0x1}, 0x200, 0x6, 0x81, 0x1f, 0x4282, 0x80000001, r1, r1}) timer_create(0x1325b67f203dcab8, &(0x7f0000000180)={0x0, 0x1d, 0x4, @tid=r1}, &(0x7f00000001c0)) close(r0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x3, r8, 0x1c, 0x0, @in={0x2, 0x4e24, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r8}}, 0xc) 08:43:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{}], 0x1) [ 601.567034] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 601.567040] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 601.567049] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 601.575491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 601.575498] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 601.678247] Bluetooth: Can't register HCI device 08:43:41 executing program 2: 08:43:41 executing program 1 (fault-call:2 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:41 executing program 5: 08:43:41 executing program 2: [ 601.883151] FAULT_INJECTION: forcing a failure. [ 601.883151] name failslab, interval 1, probability 0, space 0, times 0 [ 601.923597] CPU: 0 PID: 16473 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 601.930764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.940121] Call Trace: [ 601.942721] dump_stack+0x138/0x19c [ 601.946362] should_fail.cold+0x10f/0x159 [ 601.950521] should_failslab+0xdb/0x130 [ 601.950536] __kmalloc+0x2f0/0x7a0 [ 601.950551] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 601.950565] ? devres_add+0x40/0x50 [ 601.950575] ? rfkill_alloc+0x9c/0x2a0 [ 601.950588] rfkill_alloc+0x9c/0x2a0 [ 601.950604] hci_register_dev+0x308/0x810 [ 601.950611] ? hci_alloc_dev+0x1770/0x1c60 [ 601.950637] __vhci_create_device+0x2a6/0x560 [ 601.958147] vhci_write+0x2a1/0x437 [ 601.958166] __vfs_write+0x4a7/0x6b0 [ 601.994631] ? kernel_read+0x120/0x120 [ 601.998537] ? rw_verify_area+0xea/0x2b0 [ 602.002613] vfs_write+0x198/0x500 [ 602.006156] SyS_write+0xfd/0x230 [ 602.009592] ? SyS_read+0x230/0x230 [ 602.013204] ? do_syscall_64+0x53/0x640 [ 602.017162] ? SyS_read+0x230/0x230 [ 602.020787] do_syscall_64+0x1e8/0x640 [ 602.024701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.029553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.034726] RIP: 0033:0x459519 [ 602.037905] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.045606] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 602.052914] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 602.060209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 602.067470] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 602.074732] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:41 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000004100)='/dev/vcsa#\x00', 0x9, 0x105080) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000004140)=0x1, &(0x7f0000004180)=0xae85940c9b8ddad4) close(r0) 08:43:41 executing program 5: 08:43:41 executing program 0: r0 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) tkill(r0, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000003000), 0x1000) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) read$FUSE(r1, 0x0, 0x0) 08:43:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{}], 0x1) 08:43:41 executing program 2: 08:43:41 executing program 1 (fault-call:2 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:41 executing program 5: 08:43:41 executing program 2: 08:43:41 executing program 2: 08:43:41 executing program 5: [ 602.330554] device bridge_slave_1 left promiscuous mode [ 602.336452] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.355202] FAULT_INJECTION: forcing a failure. [ 602.355202] name failslab, interval 1, probability 0, space 0, times 0 08:43:41 executing program 2: [ 602.411314] device bridge_slave_0 left promiscuous mode [ 602.432388] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.444459] CPU: 1 PID: 16485 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 602.451594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.460960] Call Trace: [ 602.463569] dump_stack+0x138/0x19c [ 602.467214] should_fail.cold+0x10f/0x159 [ 602.471379] should_failslab+0xdb/0x130 [ 602.475363] kmem_cache_alloc+0x2d7/0x780 [ 602.479515] ? memcpy+0x46/0x50 [ 602.482799] ? kstrdup+0x5a/0x70 [ 602.486171] __kernfs_new_node+0x70/0x420 [ 602.490318] ? vprintk_func+0x65/0x159 [ 602.494209] kernfs_new_node+0x80/0xf0 [ 602.498103] kernfs_create_dir_ns+0x41/0x140 [ 602.502518] sysfs_create_dir_ns+0xbe/0x1d0 [ 602.506846] kobject_add_internal.part.0.cold+0x114/0x5ae [ 602.512391] kobject_add+0x11f/0x180 [ 602.516110] ? kset_create_and_add+0x180/0x180 [ 602.520703] ? __raw_spin_lock_init+0x2d/0x100 [ 602.525286] ? refcount_inc_not_zero+0x88/0xe0 [ 602.529870] ? klist_init+0x71/0xe0 [ 602.533510] device_add+0x383/0x1490 [ 602.537225] ? retint_kernel+0x2d/0x2d [ 602.541115] ? device_private_init+0x190/0x190 [ 602.545708] ? rfkill_register+0x194/0xb20 [ 602.549948] rfkill_register+0x19c/0xb20 [ 602.554024] hci_register_dev+0x34b/0x810 [ 602.558182] __vhci_create_device+0x2a6/0x560 [ 602.562682] vhci_write+0x2a1/0x437 [ 602.566310] __vfs_write+0x4a7/0x6b0 [ 602.570028] ? kernel_read+0x120/0x120 [ 602.573934] ? rw_verify_area+0xea/0x2b0 [ 602.578000] vfs_write+0x198/0x500 [ 602.581544] SyS_write+0xfd/0x230 [ 602.584999] ? SyS_read+0x230/0x230 [ 602.588626] ? do_syscall_64+0x53/0x640 [ 602.592599] ? SyS_read+0x230/0x230 [ 602.596231] do_syscall_64+0x1e8/0x640 [ 602.600114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.604966] entry_SYSCALL_64_after_hwframe+0x42/0xb7 08:43:42 executing program 2: [ 602.610151] RIP: 0033:0x459519 [ 602.613334] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.621046] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 602.628341] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 602.635620] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 602.642889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 602.650157] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 602.837233] device hsr_slave_1 left promiscuous mode 08:43:42 executing program 5: [ 602.883775] device hsr_slave_0 left promiscuous mode [ 602.892046] kobject_add_internal failed for rfkill266 (error: -12 parent: hci2) 08:43:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xee00]) fchown(r0, r1, r2) r3 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5a, 0x2000) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000400aaaaaaaaaaaa1088aaaaaa470a0c9a285612ffffffbfffff"]) r4 = gettid() sched_setattr(r4, &(0x7f0000000280)={0x30, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x20}, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r5) [ 602.937337] team0 (unregistering): Port device team_slave_1 removed [ 602.976213] team0 (unregistering): Port device team_slave_0 removed [ 602.995559] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 603.034837] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 603.112573] bond0 (unregistering): Released all slaves 08:43:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, "457b0e5c15af244ce4e29dc6f0d52be271fe815bff652ff828c4d2a6b41eb9a3c215eca25bfc6e47e551c92adb9d775ac8ba625e43d1870e7380c4e14d5bda2d54fe7960814fe0b860f0dde8bc6c364394f048387b44e17455b11adef650023e048e5024406a096d75433023645d26c8231a4086a8ac3ed643f3d1e75c03a8da69cdbcc107e81531ad4e30a8a81736ff59d0f8b238bea6d4a4517b6f81c1888c3c6ab2a6a2777ee3f2e65f3e31784cb86c0de48cf9e1cb1db62b013e6e37f5a550220673c509"}, 0xc7) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 605.530235] IPVS: ftp: loaded support on port[0] = 21 [ 606.016144] chnl_net:caif_netlink_parms(): no params data found [ 606.048645] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.055156] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.062074] device bridge_slave_0 entered promiscuous mode [ 606.068591] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.075368] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.082382] device bridge_slave_1 entered promiscuous mode [ 606.099162] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 606.108289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 606.124730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 606.132019] team0: Port device team_slave_0 added [ 606.137434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 606.144656] team0: Port device team_slave_1 added [ 606.149799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 606.157139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 606.223779] device hsr_slave_0 entered promiscuous mode [ 606.260475] device hsr_slave_1 entered promiscuous mode [ 606.300682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 606.307572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 606.319716] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.326136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.332813] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.339188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.365836] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 606.372337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.381092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 606.389069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.397352] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.404119] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.415522] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 606.421719] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.429841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.437480] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.443856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.453316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.461083] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.467438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.481417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.489062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.498079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.510857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.520931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.532692] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 606.538702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.545760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.558054] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 606.567171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.001009] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000", 0x15}], 0x1) 08:43:47 executing program 2: 08:43:47 executing program 1 (fault-call:2 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:47 executing program 5: 08:43:47 executing program 0: 08:43:47 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x3, 0x4}) 08:43:47 executing program 0: 08:43:47 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 08:43:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000440)='./control\x00', 0x0) [ 607.721847] FAULT_INJECTION: forcing a failure. [ 607.721847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.721862] CPU: 1 PID: 16535 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 607.740792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.750149] Call Trace: [ 607.750170] dump_stack+0x138/0x19c [ 607.750188] should_fail.cold+0x10f/0x159 [ 607.750202] __alloc_pages_nodemask+0x1d6/0x7a0 [ 607.750215] ? __alloc_pages_slowpath+0x2930/0x2930 [ 607.750240] cache_grow_begin+0x80/0x400 [ 607.750255] kmem_cache_alloc_trace+0x6b2/0x790 [ 607.750265] ? retint_kernel+0x2d/0x2d [ 607.750281] ? devm_device_remove_groups+0x50/0x50 [ 607.778977] kobject_uevent_env+0x378/0xc23 [ 607.787777] ? wait_for_completion+0x420/0x420 [ 607.796654] ? _raw_spin_unlock_irq+0x54/0x90 [ 607.801156] kobject_uevent+0x20/0x26 [ 607.801169] device_add+0xa3e/0x1490 [ 607.801190] ? device_private_init+0x190/0x190 [ 607.801209] hci_register_dev+0x2d9/0x810 [ 607.808704] ? hci_init_sysfs+0x7c/0xa0 [ 607.808723] __vhci_create_device+0x2a6/0x560 [ 607.808735] vhci_write+0x2a1/0x437 [ 607.821406] __vfs_write+0x4a7/0x6b0 [ 607.821419] ? kernel_read+0x120/0x120 [ 607.821441] ? rw_verify_area+0xea/0x2b0 [ 607.821452] vfs_write+0x198/0x500 [ 607.821464] SyS_write+0xfd/0x230 [ 607.821475] ? SyS_read+0x230/0x230 [ 607.821487] ? do_syscall_64+0x53/0x640 [ 607.821496] ? SyS_read+0x230/0x230 [ 607.821506] do_syscall_64+0x1e8/0x640 [ 607.821515] ? trace_hardirqs_off_thunk+0x1a/0x1c 08:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800a1695e0bcfe87b0071") syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000b000/0x18000)=nil, 0x0, 0x1c7, 0x0, 0x0, 0x0) 08:43:47 executing program 0: poll(&(0x7f0000000000)=[{}], 0x1, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x0, 0x0, 0x800e00501) recvfrom$inet(r0, 0x0, 0x1000001ab, 0x2, 0x0, 0x800e004e1) shutdown(r0, 0x0) [ 607.821530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 607.821538] RIP: 0033:0x459519 [ 607.821544] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.821554] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 607.821559] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 607.821563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 607.821568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 607.821573] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 08:43:47 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1ffffe) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:43:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000", 0x15}], 0x1) 08:43:47 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100)={{0x80, 0xffffffffffffffc0}, 0x50}, 0x10) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000380)={r1, 0x3}) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x3) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@rc={0x1f, {0x6, 0x7ff, 0x1, 0x3b0, 0x1f, 0x9}, 0x8}, {&(0x7f00000001c0)=""/234, 0xea}, &(0x7f0000000080), 0x8}, 0xa0) write$vhci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="048bcbad9548d46a4fe02106f2453410ef023dab6d29689e5179b3e70ca8b2a6d1f1a6716f20019eabd2ddce72079f4422e564d216bc1bf332ca155d127b03c4b51067c991b6573e12576c859c9a9e2b8f87001bdb39cd"], 0x57) close(r0) 08:43:47 executing program 1 (fault-call:2 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 08:43:47 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40100, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)={0xf6, ""/246}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$KDENABIO(r0, 0x4b36) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x9804, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) close(r1) [ 608.167579] FAULT_INJECTION: forcing a failure. [ 608.167579] name failslab, interval 1, probability 0, space 0, times 0 [ 608.222741] CPU: 1 PID: 16566 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 608.229984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.239366] Call Trace: [ 608.241962] dump_stack+0x138/0x19c [ 608.245594] should_fail.cold+0x10f/0x159 [ 608.249741] should_failslab+0xdb/0x130 [ 608.253809] kmem_cache_alloc+0x2d7/0x780 [ 608.257948] ? memcpy+0x46/0x50 [ 608.261224] ? kstrdup+0x5a/0x70 [ 608.264588] __kernfs_new_node+0x70/0x420 [ 608.268728] ? vprintk_func+0x65/0x159 [ 608.272635] kernfs_new_node+0x80/0xf0 [ 608.276525] kernfs_create_dir_ns+0x41/0x140 [ 608.280928] sysfs_create_dir_ns+0xbe/0x1d0 [ 608.285247] kobject_add_internal.part.0.cold+0x114/0x5ae [ 608.290788] kobject_add+0x11f/0x180 [ 608.294509] ? kset_create_and_add+0x180/0x180 [ 608.299352] ? __raw_spin_lock_init+0x2d/0x100 [ 608.303933] ? refcount_inc_not_zero+0x88/0xe0 [ 608.308543] ? klist_init+0x71/0xe0 [ 608.312171] device_add+0x383/0x1490 [ 608.315880] ? retint_kernel+0x2d/0x2d [ 608.319765] ? device_private_init+0x190/0x190 [ 608.324340] ? kobject_set_name_vargs+0x101/0x150 [ 608.329179] rfkill_register+0x19c/0xb20 [ 608.333241] hci_register_dev+0x34b/0x810 [ 608.337381] ? hci_init_sysfs+0x7c/0xa0 [ 608.341355] __vhci_create_device+0x2a6/0x560 [ 608.345844] vhci_write+0x2a1/0x437 [ 608.349468] __vfs_write+0x4a7/0x6b0 [ 608.353683] ? kernel_read+0x120/0x120 [ 608.357580] ? rw_verify_area+0xea/0x2b0 [ 608.361723] vfs_write+0x198/0x500 [ 608.365259] SyS_write+0xfd/0x230 [ 608.368706] ? SyS_read+0x230/0x230 [ 608.372327] ? do_syscall_64+0x53/0x640 [ 608.376294] ? SyS_read+0x230/0x230 [ 608.379919] do_syscall_64+0x1e8/0x640 [ 608.383804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.388667] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.393852] RIP: 0033:0x459519 [ 608.397031] RSP: 002b:00007f7768d4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.404736] RAX: ffffffffffffffda RBX: 00007f7768d4dc90 RCX: 0000000000459519 [ 608.412010] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 08:43:47 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0'], 0xa) close(r0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:43:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000", 0x15}], 0x1) [ 608.419278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.426556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d4e6d4 [ 608.433904] R13: 00000000004c95ff R14: 00000000004e0958 R15: 0000000000000005 [ 608.784486] device bridge_slave_1 left promiscuous mode [ 608.790146] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.831220] kobject_add_internal failed for rfkill274 (error: -12 parent: hci1) [ 608.845080] device bridge_slave_0 left promiscuous mode [ 608.851797] bridge0: port 1(bridge_slave_0) entered disabled state 08:43:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40000000000600b, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x4, 0xac6c}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 08:43:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 08:43:48 executing program 0: poll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x4d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xa09, 0x0, 0x0, 0x800e003c6) r1 = dup(r0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x3c) shutdown(r1, 0x0) 08:43:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000011c0)={0x2610ce15, 0xbf3, &(0x7f00000000c0)="12ce9ff39209d1f392f34a4b0fb80185d6e02c224884d8642545179a261ec19078ade35911fdb5f32dadcf2218b56ca92fa6b9eae7c4c38c41003abb82ceb6556d1a97198c979e7efe19f17f20229897133effedc5b255f80f51f0e7a213665ac458cdd5ae223456e13f85c51423881331cb6085c6d5065f4bfbc2d29d531c3ec0f7c66ec886e7739aad66bfa7ecd94de60d8cfdf171a19c2bda3280634d74349b7765af0d14ce3ce2d90641710c8f6a681ba47d9e5d960358ec1f57f7851f552f21e5c9f67a4ae9e4719ba33829d1aa19eb3a3e2d03f8c8709d3143fc6de7a04daca72bd39c7454", &(0x7f00000001c0)="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", 0xe8, 0x1000}) 08:43:48 executing program 1: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x00', @ifru_flags}) perf_event_open(&(0x7f000001d000)={0x2000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000002c0)="f1dc8dc5db2e3212d6efd2f0252348597292cf13299c8eb491448a244976dd4baf6a10de964e8f9e2d4455e49f474eeabe1fbd4aa53fbff2a971440fbee18d0c84fb5a1cb575903d3f74e36614744d44f8e0142372132beb4b7ce8136b06ac8b1295d9cdac826b07944de5b72ad6c4a6d856c3b2629fbc64b4224d44a06c6fa840a7f8ff910a65367713bb304a110530ff6787d0bf23aee15a8bf1fb87647dd62fd9c7e74d15fb9ddb118f763267c7f40e5faa") ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) waitid(0x0, r4, &(0x7f0000000140), 0x2000000b, &(0x7f00000001c0)) close(r2) [ 609.066409] device hsr_slave_1 left promiscuous mode 08:43:48 executing program 2: r0 = socket(0x1, 0x1, 0x0) sync_file_range(r0, 0x2, 0x0, 0x0) r1 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0xfffffffffffffd88) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x307, @remote}, 0x10, {0x2, 0x0, @local}, 'bcsh0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 08:43:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/38, 0x26}], 0x4, &(0x7f0000000340)=""/146, 0x92}, 0x40002041) close(r0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) [ 609.127744] device hsr_slave_0 left promiscuous mode [ 609.195850] team0 (unregistering): Port device team_slave_1 removed 08:43:48 executing program 2: poll(&(0x7f0000001480)=[{}], 0x1, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) poll(&(0x7f0000000080)=[{}], 0x1, 0x101) shutdown(r0, 0x0) 08:43:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x141046, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x6d0) r4 = creat(0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r3}) [ 609.268167] team0 (unregistering): Port device team_slave_0 removed 08:43:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x307}, "3ace3e6087d98350", "b548261112810f9e92e02bccb7569035", "46fb8386", "4c7b02ebeabb19e9"}, 0x28) 08:43:48 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0xffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 609.368737] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 609.383787] 9pnet: Could not find request transport: 0xffffffffffffffff [ 609.403876] 9pnet: Could not find request transport: 0xffffffffffffffff [ 609.417760] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 609.477150] bond0 (unregistering): Released all slaves [ 612.060213] IPVS: ftp: loaded support on port[0] = 21 [ 612.368734] chnl_net:caif_netlink_parms(): no params data found [ 612.402456] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.408871] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.415973] device bridge_slave_0 entered promiscuous mode [ 612.423364] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.429755] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.436782] device bridge_slave_1 entered promiscuous mode [ 612.453277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 612.462541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 612.479213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 612.486504] team0: Port device team_slave_0 added [ 612.491941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 612.498967] team0: Port device team_slave_1 added [ 612.504334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 612.511541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 612.563807] device hsr_slave_0 entered promiscuous mode [ 612.620372] device hsr_slave_1 entered promiscuous mode [ 612.660535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 612.667424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 612.681582] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.687950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.694604] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.701009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.727419] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 612.733757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.741550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 612.749430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.758207] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.765203] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.775594] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 612.781821] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.789844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.797912] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.804274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.819694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.827548] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.833935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.851519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.859142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.867135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.875349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.883161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.891454] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 612.897448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.911578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 612.921484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.360427] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 08:43:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d0006", 0x1f}], 0x1) 08:43:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x28}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 08:43:53 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000240)=[{0xffffffffffff1c49, 0x1, 0x401, 0x9, @tick=0x8001, {0x3ff, 0x8c82}, {0x6, 0xf2bf}, @quote={{0x5, 0x20}, 0x82, &(0x7f0000000140)={0x3, 0x1000, 0x2, 0x80000001, @time={0x0, 0x1c9c380}, {0x1, 0x4}, {0xfffffffffffffffc, 0xfffffffeffffffff}, @queue={0x7fffffff, {0x7, 0x2}}}}}, {0x0, 0x8, 0xff, 0xfffffffffffffc00, @tick=0x240000000000000, {0x6, 0x92}, {0x14, 0x4}, @addr={0xecb, 0x3}}, {0x1ff, 0x89b4, 0xfffffffffffffffb, 0xc1b, @tick=0x3, {0x4, 0x6}, {0x1, 0x5}, @connect={{0x2, 0x100000000}, {0x0, 0x3}}}, {0x1, 0x4, 0x100000000, 0x8, @tick=0x2, {0x1ff}, {0xffffffffffff5170, 0xfffffffffffffffd}, @raw8={"934802cb5ded8b32ff1db7ea"}}, {0x1, 0x8, 0x4, 0x2, @tick=0xef9, {0x2, 0x7f}, {0x1}, @result={0x100000001, 0x7}}, {0x2, 0xfffffffffffffc01, 0x400, 0xfffffffffffffffe, @tick=0x6, {0x3, 0xca7a}, {0xfffffffffffff8d9, 0x400000000000}, @raw32={[0x1ff, 0x1000, 0x7]}}, {0x80, 0x81, 0x2, 0x4, @time={r2, r3+30000000}, {0xf34, 0x81}, {0x0, 0xa692}, @result={0x2, 0x10001}}, {0x9, 0x5, 0x7, 0xfffffffffffffffe, @time={r4, r5+30000000}, {0xff, 0x80000000000}, {0x3, 0x101}, @result={0x4, 0x2e50}}, {0x1, 0x5, 0x3, 0x0, @tick=0xfffffffffffffffb, {0x1f, 0x9}, {0x7, 0x9}, @time=@time={r6, r7+10000000}}, {0x2, 0x2, 0x377e, 0xf05, @time, {0x1, 0x70}, {0x5, 0x7}, @time=@tick=0x4}], 0x1e0) close(r0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000100)=[0x7, 0x5]) 08:43:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x4) recvfrom$inet(r1, 0x0, 0xed67, 0x2, 0x0, 0x800e00727) shutdown(r0, 0x0) 08:43:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) close(r0) 08:43:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:43:53 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000200)={0xfffffffffffffff7, 0x0, {0xffffffffffffffff, 0x2, 0x42, 0x2, 0x1}}) close(r0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)={0xe, 0x2, 0x3ff, 0x8, 0x67, "d3a68e7427966d68f0e13163d5973c5a897f9ac89bb23314ce52e7c257c798a1dc6199d804b8ccc7d3286e7f7053cb31aee27c1a06893c3c19b779dac4989109463fd84ec919fa80d06f3f1614b7c76c30e61ba85bcfa2439029856a108826dd311b01599ff12f"}, 0x73) [ 614.114284] input: syz1 as /devices/virtual/input/input11 [ 614.116287] FAT-fs (loop2): bogus number of reserved sectors [ 614.146202] FAT-fs (loop2): Can't find a valid FAT filesystem 08:43:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d0006", 0x1f}], 0x1) 08:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) [ 614.228659] FAT-fs (loop2): bogus number of reserved sectors [ 614.260529] FAT-fs (loop2): Can't find a valid FAT filesystem 08:43:53 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x10000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:43:53 executing program 2: poll(&(0x7f0000000180), 0x2271, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) ppoll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0xa0}], 0x2, 0x0, 0x0, 0x0) poll(&(0x7f0000001240)=[{r0}], 0x1, 0x391) shutdown(r0, 0x0) 08:43:53 executing program 0: poll(&(0x7f0000000000)=[{}], 0x1, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x2, 0x0, 0x800e00501) recvfrom$inet(r0, 0x0, 0x1000001ab, 0x2, 0x0, 0x800e004e1) shutdown(r0, 0x0) 08:43:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) write$FUSE_LK(r0, &(0x7f0000000140)={0x28, 0x0, 0x6, {{0x0, 0x8, 0x0, r1}}}, 0x28) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0xd9) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) close(r2) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0xac000, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000001c0)) 08:43:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() rt_tgsigqueueinfo(r1, 0x0, 0x0, 0x0) 08:43:53 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000080)={0x79}) ioctl$KVM_ENABLE_CAP(r2, 0xc008ae67, &(0x7f0000000240)) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 08:43:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\x00', 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setxattr$security_selinux(0x0, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340)=0x3521, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d0006", 0x1f}], 0x1) 08:43:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x80002) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 614.565724] refcount_t: increment on 0; use-after-free. [ 614.587043] ------------[ cut here ]------------ [ 614.591857] WARNING: CPU: 1 PID: 16713 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 614.594690] kobject: 'kvm' (ffff888219f6e410): kobject_uevent_env [ 614.600081] Kernel panic - not syncing: panic_on_warn set ... [ 614.600081] [ 614.600095] CPU: 1 PID: 16713 Comm: syz-executor.1 Not tainted 4.14.130 #24 [ 614.600103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.600107] Call Trace: [ 614.600135] dump_stack+0x138/0x19c [ 614.600154] panic+0x1f2/0x426 [ 614.616548] kobject: 'kvm' (ffff888219f6e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 614.620829] ? add_taint.cold+0x16/0x16 [ 614.620847] ? refcount_inc.cold+0x18/0x1f [ 614.620856] ? __warn.cold+0x14/0x36 [ 614.620868] ? refcount_inc.cold+0x18/0x1f [ 614.620880] __warn.cold+0x2f/0x36 [ 614.650247] kobject: 'kvm' (ffff888219f6e410): kobject_uevent_env [ 614.652637] ? ist_end_non_atomic+0x10/0x10 [ 614.652653] ? refcount_inc.cold+0x18/0x1f [ 614.652668] report_bug+0x216/0x254 [ 614.652681] do_error_trap+0x1bb/0x310 [ 614.652692] ? math_error+0x360/0x360 [ 614.659355] kobject: 'kvm' (ffff888219f6e410): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 614.660631] ? vprintk_emit+0x21c/0x600 [ 614.660642] ? vprintk_emit+0x171/0x600 [ 614.660658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.660674] do_invalid_op+0x1b/0x20 [ 614.660684] invalid_op+0x1b/0x40 [ 614.660697] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 614.728152] RSP: 0018:ffff888085b279c0 EFLAGS: 00010286 [ 614.733512] RAX: 000000000000002b RBX: ffffffff86fa8fe0 RCX: 0000000000000000 [ 614.740773] RDX: 000000000000a826 RSI: ffffffff814afd95 RDI: ffffed1010b64f2e [ 614.748035] RBP: ffff888085b279c8 R08: 000000000000002b R09: ffff888064278bc8 [ 614.755297] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7c5e778 [ 614.762558] R13: 0000000000000000 R14: ffff8880a7c5e740 R15: ffff8880910f3d20 [ 614.769843] ? vprintk_func+0x65/0x159 [ 614.773733] kobject_get+0x5b/0x70 [ 614.777269] kobject_add_internal.part.0+0xfc/0x340 [ 614.782303] ? kfree_const+0x40/0x50 [ 614.786012] kobject_add+0x11f/0x180 [ 614.789718] ? kset_create_and_add+0x180/0x180 [ 614.794296] ? get_device_parent.isra.0+0x34e/0x560 [ 614.799312] ? kmem_cache_alloc_trace+0x623/0x790 [ 614.804171] ? lock_downgrade+0x6e0/0x6e0 [ 614.808323] get_device_parent.isra.0+0x415/0x560 [ 614.813166] device_add+0x2d3/0x1490 [ 614.816874] ? device_initialize+0x430/0x430 [ 614.821293] ? device_private_init+0x190/0x190 [ 614.825877] hci_register_dev+0x2d9/0x810 [ 614.830018] ? hci_init_sysfs+0x7c/0xa0 [ 614.833997] __vhci_create_device+0x2a6/0x560 [ 614.838502] vhci_write+0x2a1/0x437 [ 614.842188] __vfs_write+0x4a7/0x6b0 [ 614.845895] ? kernel_read+0x120/0x120 [ 614.849784] ? rw_verify_area+0xea/0x2b0 [ 614.853839] vfs_write+0x198/0x500 [ 614.857374] SyS_write+0xfd/0x230 [ 614.860820] ? SyS_read+0x230/0x230 [ 614.864438] ? do_syscall_64+0x53/0x640 [ 614.868404] ? SyS_read+0x230/0x230 [ 614.872024] do_syscall_64+0x1e8/0x640 [ 614.875906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.880752] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.885936] RIP: 0033:0x459519 [ 614.889116] RSP: 002b:00007f7768d0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 614.896821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 614.904081] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 614.911342] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 614.918599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7768d0c6d4 [ 614.925877] R13: 00000000004c95ff R14: 00000000004e0958 R15: 00000000ffffffff [ 614.934659] Kernel Offset: disabled [ 614.938407] Rebooting in 86400 seconds..