[ 32.312323] kauditd_printk_skb: 9 callbacks suppressed [ 32.312331] audit: type=1800 audit(1561106519.433:33): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.340995] audit: type=1800 audit(1561106519.433:34): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.260588] random: sshd: uninitialized urandom read (32 bytes read) [ 47.751127] audit: type=1400 audit(1561106534.873:35): avc: denied { map } for pid=7014 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 47.801928] random: sshd: uninitialized urandom read (32 bytes read) [ 48.332207] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. [ 53.902528] random: sshd: uninitialized urandom read (32 bytes read) 2019/06/21 08:42:21 fuzzer started [ 54.097995] audit: type=1400 audit(1561106541.213:36): avc: denied { map } for pid=7023 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 55.846713] random: cc1: uninitialized urandom read (8 bytes read) 2019/06/21 08:42:24 dialing manager at 10.128.0.105:36079 2019/06/21 08:42:24 syscalls: 2444 2019/06/21 08:42:24 code coverage: enabled 2019/06/21 08:42:24 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/06/21 08:42:24 extra coverage: extra coverage is not supported by the kernel 2019/06/21 08:42:24 setuid sandbox: enabled 2019/06/21 08:42:24 namespace sandbox: enabled 2019/06/21 08:42:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/21 08:42:24 fault injection: enabled 2019/06/21 08:42:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/21 08:42:24 net packet injection: enabled 2019/06/21 08:42:24 net device setup: enabled [ 57.932329] random: crng init done 08:43:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002600)=[{{&(0x7f0000000000)=@sco, 0x80, 0x0}}], 0x1, 0x0) 08:43:58 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r1, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read$eventfd(r0, &(0x7f00000000c0), 0x8) sendfile(r0, r1, &(0x7f0000d83ff8), 0x2018000fffffffe) [ 151.665627] audit: type=1400 audit(1561106638.783:37): avc: denied { map } for pid=7023 comm="syz-fuzzer" path="/root/syzkaller-shm058389210" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 08:43:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0xec8, 0x0, 0x0, "6155d0b3ad62d290fdfb20c9cd699026bae37b3f74a4beaa1efe1c179e94b020dca1665cf5c3b6e27173536780c9125c9a90d5e0aa5550918cb3642308ebfcf856efec7f0109f615f413130e6760d7ad40587f77e0edf44c9505d99352ce7e8467f2b933935ade24d6c4c5e074f069b1fd2c13f277938215750aadd71d4b3f9b3362cd4d81b5b9ed95b1b57ea4b90969034b62fb0b9f2a54728d6c0653729fdeff509f02b4bdd90076d46b07b7c6af87671e4545695984656d83d55b050875c494f10fffa6beb4ac2859a86077f5f5bc55a4b8be28bdbabfe39b17e7db15ca6140e1f05b06dbc01fc18d0dbfe5036510380b74968b6f49e6083985a2cdfa03833ac6a32c4b69cf30df57a0219370eb469b32ac4bdd7bc26a1f443f735107af8b4f9a6d5c60b11ca593a999f8ba4e76e8b2f1ca6e2586c1e6bd5ecd29e1180b60aa5d380cdcf06fa67188bfe80885bd1f1e9be165d22c6ee9fc64a08b2fb0bada921409f34a167800a848c1a2c49e8b2ff50345422463ccaf7c1354ef25e29c7e2a1f78020f887915e193db5f13388e1169069bce381766e66cb429bd58d522c4607da67081875c98d600774ec20b03de7ccc6eaa61691e3d07b3d75d05ddcada7b8f290884b7bf8e78c11a32fafd8ac79b4fad03b00267a8e4122a68fe822630fc4ee3b31c64dec3191ddc189ba3b6114119938d40bbba3f15e67473dae5b441a46c5ab2a9044b466fce5590c9e0ad56e3a2c4592f4132dd840bc9b8ae781d53e4f3665a46420389a5277c49c519fdcc8e1a5a887295463004125e38d6093e84e6c08e289d0822d1c30eb2d00d12c25699ad28293659c2f8769f2e4797e82b1e75ef4f8ec8a5bd6ce51d2d6ef5c0d774bd0e547e9708c096ffc45f603775bf68d15b5f3b05db453d22d07ad4b9373e370e00ff22575f1a05c945b7e44b1031e40156869dd82e2d5bf97fc2901e2f82621cdff4875e76d3f19eb094c91c418f6bd035ff0104408ef501cc944c4d6e8fc7078f82a09b07cc34992599387d3a99bd29699d2fb96aeffd5a9a91cf2107eb2a7c5e4aef5346b950518523308b3a82b562e11c474a19bc311480ee2b39896c1c60e9b1c40c2d69b9ca45295a993ea54247f3a16a17e3ee5a372c6b41aea43572f89db18e170101e624bd0f575f907a3ead7f75606333b507bd12d2443c3c1977905b571998e6ee2a0a48b080cb1095fd1d3cda74930589a24f17c0c2b8822fc751213b2d0a8a0fddb025907f75a44b270e2b6ab430b3ad543f98bd19aead5e715a9bca84c1c7c1039bf0f95cedc597e994470ddb13c7068b8d892dc06a082f5080e3bc59ca471829bf9a0bf241d90a147626d23f9dd6767c3a5f525868a771856f16782465d0f00b0856bcba2eeaecbae67f929128141dadc87485ad700c4c03c4c538d54720505bb18358e9a543cb4ba722cecb76b0df9051c8d3e63c8f19fe81d08c7eb16957c4e5ebddf3090364e8ab89f2367ccbbbe27be478245823064091f5f6526d7f8cd36d62946ac3d4d432c1db50cef2f5c51a0301d6aafb15a2bc58400cb51c1e73caee3185ac29f17ebde4eb0d001ee32d5ef85fd97960786679a0e19509b5c5e30dad19d06f3bd5d514bbb77c816f0d14b5052d6e56997370da4169b3dc4a76e4b2669ed19322ed324532e8c4688de39885124ec1076eaf1c3196bc704334d5bf7c2bbcd1c5a99527a53fcf7184fe87b4fd46ed0800b3184dc722caa56a475e6c76409ac08acd271042e1cf517effab0e13db832a76f16d21fbbae6a2eaf14219e6f38059d0bda2f04d594a621104747b4adb7414771928a6e82a9ca92c414aa27d40e592ef27cbfae93480d290bf3f5e59907a372b6299cb6b772d2a8e3e49005408141df55ef1e12faa2e25b0bc5c7ce76dff32b671aeff50900bcaa414ac4616a0263161e57dcb049e748856cfd950874add5dbe36960edea796b01a2e889cf8a422ba72b805baae6c424cadeda41f1a3a195a7e137047ceb16c45948371f338721485cde613b11e59b6c91710ff7ea1c438e30ed03c65c2a089025c4e7b0ea3cdc2ce8c1704ad396d70300348be770f93ec7e8947d85c78c77afc7b0f0e656522d76c7ea4fe3f5cf38d7fd51ef5b2ac0efdb36e372b996adeac531245c1afaa03d5df173b8956b542c8c1b5b1f7cea7702141c3d9edf2713015a42c581c9e3ae4e6665550233d1c0ffddb4703b8c6dddd933efa9798516a00aca43860af4a66af4d3466154e53b2ea09bf53a35bf7c9c98dc18d01abf4a5f5e3046cd00db82e6bc6e8d7fa3dfaa6735fd64155f43d98df730c6df0fe7c4cd52af239c0279d357228d167c29b7eb9689acc2ce6ea6a17dd1c461295be464ba46395b92d7a778d7dcf831e53e8a209a9023a388a488cf73948be80e388d0095e656ce63583ca6dd24ae50dff4efa49aeae8a213f7cda0603a63c2f047e7e4e1a037ae6c82ccc2528645bb95e1ded182f43fc6c8923c36a92902d06f114d881c5a769c94c02a8194be091d65b6a70cb53a214e0f5de46c1f8c5dc4ec758baed72b30bf68b7073f96341e6eb5900923241a29aa2b40d19e528ede6196e9eeb60e7b46823a6702e07779d1e0c22a7db3239512aa4e36ec226eadac326d3374a0d988df3b096bd42ea49235e7e30f2f94ef057f409e14b5793a27f3d0200a02625431d8c188cf7717e7e71633439ebe8b1cda7bab1791e802eafaa5433008d06f5e792280a76e63e732cfa11a50376eef17ac9135215aa61e58cb086f5cc5239331474a64fe4d05f2c1d6ba9a4feae8d6e7ee7bc3cbf850a144b30081ca30e2da2df5ec8b9a9dc747f29bd18f535bf2ceb9166b0678be847073f83e26f2aa6eb9e8475d87fdd7d5c357f175e1319a33331388fbe7ac9cba46c522fee6113c12d115555fe635c03811484c751f4537591285ea3b754b5038007e5e1cb2ec3b67959ac3e1ea9b019723cbc956b8a18aefadeed668a8618591d3d042b0b5538bb12b9de8d6370669319c6fbcaf2ffaf2aec8dd65a42a4a86464b30c8be7376b2363296394844d267f863c7908d58d263dbd35231e658fd052d54e11bc6cfacd8a55e85d71df1b61c485307be31069825340f1ffa7e6cb666daf0801ed881351f81ce4d47f36e45fced8ccab75888132c7f9ac93ebb6fc4322693e9f2ad899a27bfb629970217c635cbb7d3d1c97cbb721c8953cac8baea314f3519b70cfaeb47b0bd04e2720dee10275c4d6c2a13557cdaf95a0bfad62c86974967e3e98419ceaac9297a475f4fd933876b7373ceeaf0d0adbbfe0763edf370a84bbc0f75672d2c4ac2bd88980808128a86b419b2a4bb0cea99da9aaa7cd748404cce99b5d9ff12fc085572fd689c072691d950167c0a987655bf36e594eac54128bd819ba576a175e41e151cd151b5ec8f5f3764037fe55a4ccfd37385a4064ae2a6022442b119da4ea8b410b00ff594ceb2fc98ea2a8bd8f398816c38a23ea6f0a3f0ae3a0cc61d87ef2577c88a958f92c5f6cb8054a460d3cc988172fb7617a4ce877882159ec3cca1f0342f4b5a0e7b0025f12858a2cc80953229a9ae48b6a28914f9759be17b02864b70195e287204bad16d325a26d869a6279368843e702755db86e889000c409470f92322795920128e297f029582a7953e1347908a884a6bf54dffcdcb0ea3a8899201a54b63441d4b52c169ebd5613dc401469c888672b4eb0c5d1374f531e7528872429aa031c2bfdb400d323674f44d1f9a12d2dc5980cf71529edbadcbb5a56ca5dcfc1d8daddcc6c30e9937602f83606d1952344aac0213af6b15802e3eaa7e852cc7c214395eb3bf226f08a0a74125a651d3c5e77f7850149b4629c1c9df97c56a3eae639fd3fb90e8d5a3733c19700e1ed5c65841396d8db6974aaa1c016ae97b6f4db8322769ec5df8e105b2fafd495c903b1a41cfd2c9cda738a3ae96f835e2014064e38fbd1eb99af16570e301d6f45ea880dd3c167cb41874205d046d90460109377fddeeb35813d93afbf4353b49c6535bcd9c28412eb8bf19b9bd044913586e5a03e8b0b01c572ec96c6363c340ea551a4118269a8216f0b7d33ba2217de8d5f2acc83089281ccef12cbd8f1f198bf2841b46d999fad65ba0cc438cf8cdaa4e5fcd4fba62333c97abc3198360168547d99d1343e3ff496bf4f8b79b787f93e8f8645eb6deac55af5ab8d92745cd7d1490adef38b2c22e676e13a4b9c1bd88659f4795f46aad119bd8f8af74729abb576bf52b7972425ec9b19848fad1c40b55158fb53ced6310e40a7d9f971effc641e3ba666a2af6283799b9d3bafd3ef15efe16daa9fd55a69ac1350adf9a7498f1e46591c9c9e4c722e09af8bb8c6c73e17e77a8cc6b1124ec30b8ee8769165da5c7cef85ff4422be08b3b3023708548316381cec470f3fb39545be356b281ca0ae77efd5e4c918759a514dc8cb1ebb2ef1ffbae4a70c15a7096ef6694365ffe102bce33a0b999345d636225e0a18862bc050234b5dc2f7d8df0eedf9b2d7345e4ba451b4f883d31e03025551b38ab89c96514efe4addfc4aa99b8fa0e27f106169dd360bbca53918786bd415b79d07daed740793f35e4f8a36bab333ecc9499d1e66eb8e883365add418e5555417ea838f538bbfe780b79cee944f8a60433f8560117a354a7f2e33f12b4fc14b3e6b1da7b426e158c8a0ed8eeeaef8a0cc0f4d8ce7676ef45437f6864a0ccc039d912fc91b85122a2af884a5f0a0af6ca6222cc32a7e52683025bcf083223d802c86415d7ff28d4bdfd2321938638797000c0627323548882182c9ed7fb541948b3d23eee773c1c07d792ecca9826b371109443cc5c021b0e99357add9b5d06da3769258ff9ace708dd627f596797512a77ebce89a12a85e484ee9737adf328be75d19fe89305cb5bdf6bfb4c9399286c2300940a7d4b8a66c4d08c7dc56b2b8c10c6f8c36613f9d3d72292b4443c506505d301ca2e1a032a1c30a96fbf382bfc76e2e9af36192b1bcfcdf6a06b11b56bd6c681c6188cafedb1676eb7a0d06125a81cf0ba6fce8200fd924df7fbdc31e230fb42886a7b20d7baf16cfc9394a13795369410547ad19c56df585104154f5af5208ee1cd31c375016949d2a804ecbad5c7385be7e4c28993f6663c97c932c7c91a47d03e5943dae634cceb773125b8615fce894ddd51de38b2fdc3d2caee9de1b5b6948040f5f0df0a8387b343a32ff4f202bb65187d3c23756633bc22b62d37dd30e47859a12924bdfdaa998b07e672a94f404865ab79dfce32f31b04a5ba7870c91ee5e1426cd329111029105b041f12109fb"}], 0xec8}}], 0x1, 0x20000040) 08:43:58 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) clone(0xa102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 08:43:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 08:43:58 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'os2.', 'em1!keyringvmnet0#nodevwlan1user*([vmnet0\x00'}) [ 151.693106] audit: type=1400 audit(1561106638.783:38): avc: denied { map } for pid=7040 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13810 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 152.520179] IPVS: ftp: loaded support on port[0] = 21 [ 152.844615] chnl_net:caif_netlink_parms(): no params data found [ 152.853391] IPVS: ftp: loaded support on port[0] = 21 [ 152.906339] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.913027] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.919976] device bridge_slave_0 entered promiscuous mode [ 152.929190] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.935708] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.943096] device bridge_slave_1 entered promiscuous mode [ 152.954325] IPVS: ftp: loaded support on port[0] = 21 [ 152.973648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.982741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.007335] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.014573] team0: Port device team_slave_0 added [ 153.022692] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.029705] team0: Port device team_slave_1 added [ 153.044346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.053986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.142003] device hsr_slave_0 entered promiscuous mode [ 153.180286] device hsr_slave_1 entered promiscuous mode [ 153.268390] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.278441] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.285206] chnl_net:caif_netlink_parms(): no params data found [ 153.319985] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.326490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.333369] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.339726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.372767] IPVS: ftp: loaded support on port[0] = 21 [ 153.417856] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.424406] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.431776] device bridge_slave_0 entered promiscuous mode [ 153.438361] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.445389] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.452710] device bridge_slave_1 entered promiscuous mode [ 153.464593] chnl_net:caif_netlink_parms(): no params data found [ 153.514558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.534319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.556680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.564089] team0: Port device team_slave_0 added [ 153.569654] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.577288] team0: Port device team_slave_1 added [ 153.599923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.614356] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.621449] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.628293] device bridge_slave_0 entered promiscuous mode [ 153.636754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.644589] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.652262] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.659120] device bridge_slave_1 entered promiscuous mode [ 153.665530] IPVS: ftp: loaded support on port[0] = 21 [ 153.702909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.752505] device hsr_slave_0 entered promiscuous mode [ 153.810286] device hsr_slave_1 entered promiscuous mode [ 153.870849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.878184] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.887437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.929737] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.937216] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.951913] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.959114] team0: Port device team_slave_0 added [ 154.008529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.016098] team0: Port device team_slave_1 added [ 154.021531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.030630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.037236] chnl_net:caif_netlink_parms(): no params data found [ 154.052158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.068073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.079138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.101924] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.127882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.136169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.148451] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.155102] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.175914] IPVS: ftp: loaded support on port[0] = 21 [ 154.223886] device hsr_slave_0 entered promiscuous mode [ 154.270320] device hsr_slave_1 entered promiscuous mode [ 154.311375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.318614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.327896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.335206] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.342045] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.349025] device bridge_slave_0 entered promiscuous mode [ 154.355841] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.362305] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.369440] device bridge_slave_1 entered promiscuous mode [ 154.394734] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.403464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.411764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.419594] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.426078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.435070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.445900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.459217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.467719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 154.479213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.486771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.496413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.504341] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.510708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.517634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.525402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.533032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.540866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.548361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.578609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.591207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.597522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.607919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.622799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.630530] team0: Port device team_slave_0 added [ 154.685261] chnl_net:caif_netlink_parms(): no params data found [ 154.694784] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.703206] team0: Port device team_slave_1 added [ 154.711390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.724769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.738036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.763220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.780628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.796281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.806005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.813952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.883550] device hsr_slave_0 entered promiscuous mode [ 154.920576] device hsr_slave_1 entered promiscuous mode [ 154.984339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.990748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.001903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.031886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.038670] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.045773] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.053090] device bridge_slave_0 entered promiscuous mode [ 155.059749] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.066259] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.073521] device bridge_slave_1 entered promiscuous mode [ 155.112566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.176338] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.203505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.217884] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.225772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.234071] team0: Port device team_slave_0 added [ 155.245734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.255982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.263369] team0: Port device team_slave_1 added [ 155.268516] chnl_net:caif_netlink_parms(): no params data found [ 155.281572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.289756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.299061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.306943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.317240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.331517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.338471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.347873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.356211] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.362529] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.383643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.393166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.399762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.407917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.426682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.438207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.445983] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.452572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.460987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.468541] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.475131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.482660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.542291] device hsr_slave_0 entered promiscuous mode [ 155.590532] device hsr_slave_1 entered promiscuous mode [ 155.636177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.659706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.667935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.675675] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.682166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.694007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.712865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.721803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.729904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.737706] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.744153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.753214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.762985] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 08:44:02 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) [ 155.782522] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.788937] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.803811] device bridge_slave_0 entered promiscuous mode [ 155.816445] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.825282] bridge0: port 2(bridge_slave_1) entered disabled state 08:44:03 executing program 0: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000001c0)) [ 155.837155] device bridge_slave_1 entered promiscuous mode [ 155.847274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.855077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.862801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.871759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.879976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.892557] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.898965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.909564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.938422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.951570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.962064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.971919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.980488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.989452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.999483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.007192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.014860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.022641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.031054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 08:44:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/15, 0xf) [ 156.038719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.048705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.057921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.074756] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 08:44:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 156.106916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.122047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.137274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.151625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.159564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.173707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.181763] team0: Port device team_slave_0 added [ 156.187072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.195204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.203201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.211011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.218836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.239248] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.246015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:44:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffffd, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000380)=""/245, &(0x7f0000000180)=0xf5) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) listen(r0, 0x10001) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@remote, @local}, &(0x7f0000000040)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000200)) unshare(0x60000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') [ 156.254371] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.264163] team0: Port device team_slave_1 added [ 156.269697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.278293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.297599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.317598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.326636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.347310] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.362133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.370362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.377951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.388793] hrtimer: interrupt took 25645 ns [ 156.407688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.433799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.444107] audit: type=1400 audit(1561106643.563:39): avc: denied { create } for pid=7092 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 156.480721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.492758] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.507199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.516325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.519674] audit: type=1400 audit(1561106643.563:40): avc: denied { write } for pid=7092 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 156.536637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.564151] audit: type=1400 audit(1561106643.563:41): avc: denied { read } for pid=7092 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 156.592866] device hsr_slave_0 entered promiscuous mode [ 156.601260] IPVS: ftp: loaded support on port[0] = 21 [ 156.641334] device hsr_slave_1 entered promiscuous mode [ 156.680621] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.691254] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.697350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.729736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.738073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.748628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.757975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 08:44:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000200)='./file0\x00', r0}, 0x10) [ 156.868422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.876341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.883805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.890813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.902901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.908981] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.920529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.926653] 8021q: adding VLAN 0 to HW filter on device team0 08:44:04 executing program 5: r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x200}, {r0, 0x600}, {r0, 0x40}, {r0, 0x14}, {r0, 0x400}, {r0, 0x20}, {r0, 0xa014}, {r0, 0x1016}, {r0}], 0x9, &(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f00000002c0)={0x7}, 0x8) [ 157.112962] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.125386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.133834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.143916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.151708] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.158060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.167197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.180934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.194922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.204068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.211564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.219344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.227426] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.233846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.243172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.251038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.258579] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.264959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.274270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.295043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.303799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.311087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.318805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.326792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.334581] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.341156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.353573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.367308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.376974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.385249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.395472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.410541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.419558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.444354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.458461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.465966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.473772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.481526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.489148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.497620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.504655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.516269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.526756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.537916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.545868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.553845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.561955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.573954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.582914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.605797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.618710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.626586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.634719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.642548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.652759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.659559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.667681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.675973] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.685207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.699759] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.706169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.713321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.721202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.732794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.744180] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.755784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.766727] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.774221] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.781197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.788199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.800906] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.818274] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.832405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.846017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.853992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.862758] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.869145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.879162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.894466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.903146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.915487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.923892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.933002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.940757] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.947116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.958432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.968875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.985770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.996269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.008679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.017067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.026774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.036919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.047559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 158.054589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.062402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.070403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.077858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.086153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.098247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 158.110451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.118381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.128558] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.135281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.155942] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.168239] 8021q: adding VLAN 0 to HW filter on device batadv0 08:44:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x407012ef, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "824a2ef37d18f3228a3e0dd9bb8498bf8a0010000000000000747fc79e13e6b2c4a128de0300fc428f3c0c38f25e64619d2a68ea0fd3a52d93798c4b949ccf22", "4ebc7425bbc09fa36ac49395ca4a34d3ff5ebc2373d00c7400150a3d5cce6126c8647b63e25db3fff40cd05945582b9c8d0c49097f61daa49e7767a6838a2311", "b13035dbc8fcd2034fefc68d8d543d1eeff951cc58c266064906fd73df7ed27a"}) 08:44:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x1081804) unshare(0x0) pipe(&(0x7f0000000400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f00000006c0)='-vboxnet0,+\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@remote, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8) fstat(r0, &(0x7f0000000880)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000fc0)) getegid() ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0xca, &(0x7f0000000080)='veth1_to_bond\x00', 0x6, 0x5, 0x9}) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 08:44:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff8) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f00000002c0)='\x00') [ 158.360292] protocol 88fb is buggy, dev hsr_slave_0 [ 158.365584] protocol 88fb is buggy, dev hsr_slave_1 [ 158.455510] audit: type=1400 audit(1561106645.573:42): avc: denied { map } for pid=7157 comm="syz-executor.0" path="/dev/ashmem" dev="devtmpfs" ino=673 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 158.480369] protocol 88fb is buggy, dev hsr_slave_0 [ 158.480747] protocol 88fb is buggy, dev hsr_slave_1 [ 158.590119] protocol 88fb is buggy, dev hsr_slave_0 [ 158.595287] protocol 88fb is buggy, dev hsr_slave_1 [ 158.720526] protocol 88fb is buggy, dev hsr_slave_0 [ 158.725692] protocol 88fb is buggy, dev hsr_slave_1 08:44:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 08:44:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) 08:44:06 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 08:44:06 executing program 0: r0 = gettid() clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x8000000000000200) r1 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 08:44:06 executing program 1: 08:44:06 executing program 5: 08:44:06 executing program 1: 08:44:06 executing program 5: 08:44:06 executing program 2: 08:44:06 executing program 1: 08:44:06 executing program 5: 08:44:06 executing program 3: [ 159.520479] protocol 88fb is buggy, dev hsr_slave_0 [ 159.525638] protocol 88fb is buggy, dev hsr_slave_1 08:44:07 executing program 4: 08:44:07 executing program 2: 08:44:07 executing program 1: 08:44:07 executing program 3: 08:44:07 executing program 5: 08:44:07 executing program 0: 08:44:07 executing program 5: 08:44:07 executing program 3: 08:44:07 executing program 0: 08:44:07 executing program 1: 08:44:07 executing program 2: 08:44:07 executing program 4: 08:44:07 executing program 1: 08:44:07 executing program 3: 08:44:07 executing program 0: 08:44:07 executing program 5: 08:44:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') sendfile(r0, r1, 0x0, 0x7ffff000) 08:44:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sync() 08:44:07 executing program 3: r0 = memfd_create(&(0x7f0000000080)='#vmnet1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001280), 0x8, 0x0) 08:44:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0b00ec7be070") r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r1) 08:44:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4) 08:44:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:44:07 executing program 2: r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000209e0258f0f4ef45eaa2403f51b073f3afa7d700000004000000e87071384a200000e8a72cfb16672b7470b283e66a29cdc2b22acd5ed2"], 0x1}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:44:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0b00ec7be070") madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf) [ 160.428946] audit: type=1400 audit(1561106647.543:43): avc: denied { map } for pid=7248 comm="syz-executor.3" path=2F6D656D66643A23766D6E6574316E6F646576656D31202864656C6574656429 dev="tmpfs" ino=26379 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 08:44:07 executing program 5: fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x1081804) unshare(0x0) pipe(&(0x7f0000000400)) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) fstat(r0, &(0x7f0000000880)) getgid() getegid() ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0xca, &(0x7f0000000080)='veth1_to_bond\x00', 0x6, 0x5, 0x9}) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 08:44:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/18, 0x12}, {&(0x7f0000000580)=""/176, 0xb0}], 0x2) 08:44:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x0, 0x0) read(r0, 0x0, 0xe8d71956562b7f15) 08:44:07 executing program 0: mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) 08:44:07 executing program 3: symlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00') stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 08:44:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 08:44:07 executing program 4: symlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00') setxattr$security_ima(&(0x7f0000004980)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 08:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'nlmon0\x00', 0x3}, 0x18) 08:44:07 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000080)={0x47, 0x71e7}, &(0x7f00000000c0)) 08:44:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 08:44:07 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0xfffffffffffffffe, 0x105) 08:44:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') write$apparmor_current(r0, 0x0, 0x0) 08:44:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000209e0258f0f4ef45eaa2403f51b073f3afa7d700000004000000e87071384a200000e8a72cfb16672b7470b283e66a29cdc2b22acd5ed2"], 0x1}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 08:44:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:44:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 08:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000002c0)=""/99) 08:44:07 executing program 1: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR], 0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000000000000000000000000000002"]) 08:44:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clock_nanosleep(0x0, 0x0, 0x0, &(0x7f00000000c0)) 08:44:08 executing program 5: semtimedop(0x0, 0x0, 0x2b, &(0x7f0000000100)={0x77359400}) 08:44:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:44:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) sendfile(r2, r2, &(0x7f0000000080), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffd1) signalfd(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000040)=0x90) 08:44:08 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\xdd\x0e:\xd7\x1b\x8f\xb0\xd2#vmQ\xfd\x9d\x9bH\x01\xdd\xe9\'5\x9a\xd6\'3\x1c\xff\x9a\x9e\x86\x9a\xb41\x9d\xa0\x15\xe8\xae^\xe7b|\x98\x9e\x86h\xed\xc8\x16\x13Z\x87m;A\x80[\xb8\x1fT\x82\xab\xa9j\x85ww\x10]\x05&\xa5\x81\r\xfb_af\xfb\x11\xce(\v\x9d\xacU\xbe\x05{%e{\rn\x99\x11\xf8-K~l\xc8\xcb\xc1h\x8c\xf1J\xadU>\xde\x93\x82\x89mP\xd2\x891\xec\t\xf9\xc4@\xc5h\x80\xbb\xaa^#\xb7V#M\xab\x8d\xde1\xad\xb3\r\xae\x8f\xf68\xe1\xef#\xb7[\xdc6>3\xab2:\xe3S\x89@(F\x04\x94\xc5N\xe4\xea\xfe\xaa4\x9f\xb4\xbc\xe4\xa8_q\xab\xf55L\xbd\x93ga)K(\x82,5\xce\x06{K\x97\xb7\x94\xa8\xed\xb2\xd5\n\a3\xb0\x9d~\x17\f\xeb\xe0\xf4\xe8\x0fJJj\x82\x8ea\xac', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 08:44:08 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x14061f3, 0x0, 0x0) 08:44:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x80000000000000e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'syz_tun\x00'}, 0x18) write$selinux_attr(r0, 0x0, 0x0) [ 161.106927] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 08:44:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) setresuid(0x0, r1, 0x0) 08:44:10 executing program 1: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) 08:44:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0b00ec7be070") prctl$PR_MCE_KILL_GET(0x22) 08:44:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 08:44:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 08:44:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:44:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR], 0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="00eaff000000000000ffffff"]) 08:44:11 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) 08:44:11 executing program 1: migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0xfffffffffffffff7) 08:44:11 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[]) 08:44:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000140)) 08:44:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 08:44:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x196d38a1}, 0xc) [ 164.066386] input: syz0 as /devices/virtual/input/input5 08:44:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 08:44:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") keyctl$setperm(0x5, 0x0, 0x0) 08:44:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x0, 0x0) 08:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000680)={{}, 'syz1\x00'}) 08:44:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) 08:44:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:44:11 executing program 0: r0 = memfd_create(&(0x7f0000000040)='#vmnet1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:44:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setpriority(0x0, 0x0, 0xffffffffffffffff) 08:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0b00ec7be070") uname(&(0x7f0000000e00)=""/67) 08:44:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:44:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 168.197236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 08:44:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa}}}}}, 0x0) [ 168.276791] kvm: pic: single mode not supported [ 168.277006] kvm: pic: level sensitive irq not supported [ 168.399248] kvm: pic: single mode not supported [ 168.399276] kvm: pic: level sensitive irq not supported [ 168.407101] kvm: pic: single mode not supported [ 168.414374] kvm: pic: level sensitive irq not supported [ 168.419800] kvm: pic: single mode not supported [ 168.425990] kvm: pic: single mode not supported [ 168.431073] kvm: pic: level sensitive irq not supported [ 168.438720] kvm: pic: single mode not supported [ 168.444341] kvm: pic: level sensitive irq not supported [ 168.451162] kvm: pic: level sensitive irq not supported [ 168.460293] kvm: pic: single mode not supported [ 168.465839] kvm: pic: level sensitive irq not supported [ 168.472042] kvm: pic: single mode not supported [ 168.477484] kvm: pic: level sensitive irq not supported [ 168.483102] kvm: pic: single mode not supported [ 168.488611] kvm: pic: level sensitive irq not supported [ 168.494710] kvm: pic: level sensitive irq not supported 08:44:15 executing program 0: 08:44:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 08:44:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 08:44:15 executing program 1: 08:44:15 executing program 2: 08:44:15 executing program 1: 08:44:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 08:44:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:44:15 executing program 3: [ 168.815753] QAT: Invalid ioctl [ 168.822802] QAT: Invalid ioctl [ 168.826132] QAT: Invalid ioctl [ 168.847409] QAT: Invalid ioctl [ 168.853365] QAT: Invalid ioctl [ 168.856578] QAT: Invalid ioctl [ 168.859781] QAT: Invalid ioctl [ 168.863835] QAT: Invalid ioctl [ 168.867070] QAT: Invalid ioctl [ 168.870362] QAT: Invalid ioctl [ 168.873616] QAT: Invalid ioctl [ 168.876806] QAT: Invalid ioctl [ 168.880396] QAT: Invalid ioctl [ 168.883637] QAT: Invalid ioctl [ 168.886960] QAT: Invalid ioctl [ 168.890407] QAT: Invalid ioctl [ 168.893702] QAT: Invalid ioctl [ 168.896884] QAT: Invalid ioctl [ 168.900261] QAT: Invalid ioctl [ 168.903470] QAT: Invalid ioctl [ 168.906671] QAT: Invalid ioctl [ 168.909863] QAT: Invalid ioctl [ 168.913122] QAT: Invalid ioctl [ 168.916338] QAT: Invalid ioctl [ 168.919519] QAT: Invalid ioctl 08:44:16 executing program 4: 08:44:16 executing program 0: 08:44:16 executing program 1: 08:44:16 executing program 3: 08:44:16 executing program 2: 08:44:16 executing program 5: 08:44:16 executing program 1: 08:44:16 executing program 5: 08:44:16 executing program 2: 08:44:16 executing program 3: 08:44:16 executing program 0: 08:44:16 executing program 2: 08:44:16 executing program 4: 08:44:16 executing program 1: 08:44:16 executing program 3: 08:44:16 executing program 0: 08:44:16 executing program 5: 08:44:16 executing program 2: 08:44:16 executing program 4: 08:44:16 executing program 3: 08:44:16 executing program 2: 08:44:16 executing program 1: 08:44:16 executing program 4: 08:44:16 executing program 5: 08:44:16 executing program 0: 08:44:16 executing program 3: 08:44:16 executing program 4: 08:44:16 executing program 1: 08:44:16 executing program 5: 08:44:16 executing program 0: 08:44:16 executing program 2: 08:44:16 executing program 4: 08:44:16 executing program 3: 08:44:16 executing program 1: 08:44:16 executing program 5: 08:44:16 executing program 0: 08:44:16 executing program 2: 08:44:16 executing program 3: 08:44:16 executing program 5: 08:44:16 executing program 4: 08:44:16 executing program 1: 08:44:16 executing program 2: 08:44:16 executing program 0: 08:44:16 executing program 5: 08:44:16 executing program 4: 08:44:16 executing program 3: 08:44:16 executing program 1: 08:44:16 executing program 2: 08:44:16 executing program 0: 08:44:16 executing program 3: 08:44:17 executing program 5: 08:44:17 executing program 2: 08:44:17 executing program 4: 08:44:17 executing program 1: 08:44:17 executing program 0: 08:44:17 executing program 5: 08:44:17 executing program 3: 08:44:17 executing program 2: 08:44:17 executing program 0: 08:44:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x769166a1b41381a}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) 08:44:17 executing program 4: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) clone(0x97080000, 0x0, 0x0, 0x0, 0x0) 08:44:17 executing program 3: 08:44:17 executing program 5: 08:44:17 executing program 0: 08:44:17 executing program 2: 08:44:17 executing program 4: [ 170.144616] audit: type=1400 audit(1561106657.263:49): avc: denied { sys_admin } for pid=7923 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 08:44:17 executing program 3: 08:44:17 executing program 5: 08:44:17 executing program 2: 08:44:17 executing program 1: 08:44:17 executing program 3: 08:44:17 executing program 0: 08:44:17 executing program 4: 08:44:17 executing program 2: 08:44:17 executing program 5: 08:44:17 executing program 1: 08:44:17 executing program 3: 08:44:17 executing program 0: 08:44:17 executing program 4: 08:44:17 executing program 5: 08:44:17 executing program 2: 08:44:17 executing program 0: 08:44:17 executing program 1: 08:44:17 executing program 3: 08:44:17 executing program 4: 08:44:17 executing program 5: 08:44:17 executing program 0: 08:44:17 executing program 1: 08:44:17 executing program 2: 08:44:17 executing program 3: 08:44:17 executing program 5: 08:44:17 executing program 4: 08:44:17 executing program 1: 08:44:17 executing program 2: 08:44:17 executing program 0: 08:44:17 executing program 3: 08:44:17 executing program 1: 08:44:17 executing program 5: 08:44:17 executing program 4: 08:44:17 executing program 0: 08:44:17 executing program 5: 08:44:17 executing program 2: 08:44:18 executing program 3: 08:44:18 executing program 4: 08:44:18 executing program 0: 08:44:18 executing program 1: 08:44:18 executing program 4: 08:44:18 executing program 2: 08:44:18 executing program 5: 08:44:18 executing program 3: 08:44:18 executing program 0: 08:44:18 executing program 1: 08:44:18 executing program 4: 08:44:18 executing program 2: 08:44:18 executing program 3: 08:44:18 executing program 0: 08:44:18 executing program 5: 08:44:18 executing program 1: 08:44:18 executing program 4: 08:44:18 executing program 2: r0 = socket$kcm(0xa, 0x4000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000004"}], 0x28}, 0x0) 08:44:18 executing program 5: 08:44:18 executing program 3: 08:44:18 executing program 1: 08:44:18 executing program 0: 08:44:18 executing program 4: 08:44:18 executing program 2: 08:44:18 executing program 3: 08:44:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) 08:44:18 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000100)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) 08:44:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 08:44:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="05004100d7659d3aab979d0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 08:44:18 executing program 3: 08:44:18 executing program 2: 08:44:18 executing program 0: [ 171.346035] Option ' ' to dns_resolver key: bad/missing value 08:44:18 executing program 1: 08:44:18 executing program 3: 08:44:18 executing program 5: 08:44:18 executing program 2: 08:44:18 executing program 0: 08:44:18 executing program 3: 08:44:18 executing program 1: [ 171.680152] protocol 88fb is buggy, dev hsr_slave_0 [ 171.685304] protocol 88fb is buggy, dev hsr_slave_1 [ 172.001815] protocol 88fb is buggy, dev hsr_slave_0 [ 172.006923] protocol 88fb is buggy, dev hsr_slave_1 08:44:19 executing program 4: 08:44:19 executing program 5: 08:44:19 executing program 2: 08:44:19 executing program 0: 08:44:19 executing program 1: 08:44:19 executing program 3: 08:44:19 executing program 5: 08:44:19 executing program 0: 08:44:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:44:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) 08:44:19 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0) close(r1) 08:44:19 executing program 4: 08:44:19 executing program 0: 08:44:19 executing program 5: 08:44:19 executing program 3: symlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00') open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 08:44:19 executing program 4: semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, 0x0) 08:44:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x0, 0x8}, 0x0) [ 172.417372] input: syz0 as /devices/virtual/input/input11 08:44:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@rand_addr="fae5a4ad0c01b903eeda03c2d31f739e", @remote, @ipv4={[], [], @broadcast}, 0x0, 0xffffffff}) 08:44:19 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}], 0x5}}], 0x1, 0x0, 0x0) 08:44:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 08:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") ioctl$void(r0, 0xc0045878) 08:44:19 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 08:44:19 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/120, 0x78}], 0x3, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/80, 0x50}], 0x1, 0x0) 08:44:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380)) 08:44:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") ustat(0x2, &(0x7f0000001580)) 08:44:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x800004) 08:44:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") quotactl(0x0, 0x0, 0x0, &(0x7f0000000380)) 08:44:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") keyctl$get_keyring_id(0x0, 0x0, 0x0) 08:44:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") getpriority(0x1, 0x0) 08:44:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) 08:44:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 08:44:19 executing program 2: socketpair(0x2, 0x3, 0x7, 0x0) 08:44:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) 08:44:19 executing program 1: statx(0xffffffffffffffff, 0x0, 0x0, 0xfec2938af6da15f2, 0x0) 08:44:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x20}, 0x0) 08:44:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x4000000) [ 172.827559] input: syz0 as /devices/virtual/input/input14 08:44:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) exit(0x0) fchown(r2, 0x0, 0x0) 08:44:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 08:44:20 executing program 0: request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0xfffffffffffffffe) [ 172.924626] input: syz0 as /devices/virtual/input/input15 08:44:20 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) 08:44:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) 08:44:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) [ 173.005283] input: syz0 as /devices/virtual/input/input16 08:44:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xb) [ 173.061649] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 173.078469] input: syz0 as /devices/virtual/input/input17 08:44:20 executing program 3: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x103) 08:44:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) 08:44:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) 08:44:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 08:44:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f10101c7033400b0", 0x26) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) 08:44:20 executing program 2: r0 = eventfd2(0x0, 0x0) fchown(r0, 0xee00, 0x0) 08:44:20 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x0) 08:44:20 executing program 3: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) unshare(0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f00000006c0)='-vboxnet0,+\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@remote, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000fc0)) getegid() sendmmsg$unix(r2, &(0x7f0000002040)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)="85fbd27448ad5b3406526dfbcf6af44f93e9eb8d5d350e9b2d2453a1a5fedc6b678319c1ad36a892e855b1be9405deb0ace0362f6bfb1cff1fcb5b133127b54be6b1d1d05dd8b42456fb89dc760f198e59f507bb6eee5d65cdf42e480ccb5e8d98", 0x61}], 0x1, 0x0, 0x0, 0x4050}, {&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x80}], 0x2, 0x4800) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0xca, &(0x7f0000000080)='veth1_to_bond\x00', 0x6, 0x5, 0x9}) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 08:44:20 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000177ff4), 0xc) 08:44:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) 08:44:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 173.797474] ------------[ cut here ]------------ [ 173.802292] WARNING: CPU: 1 PID: 8244 at fs/attr.c:213 notify_change+0xa2f/0xd10 [ 173.809831] Kernel panic - not syncing: panic_on_warn set ... [ 173.809831] [ 173.817210] CPU: 1 PID: 8244 Comm: syz-executor.3 Not tainted 4.14.128 #22 [ 173.824251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.833873] Call Trace: [ 173.836482] dump_stack+0x138/0x19c [ 173.840107] panic+0x1f2/0x426 [ 173.843308] ? add_taint.cold+0x16/0x16 [ 173.847285] ? notify_change+0xa2f/0xd10 [ 173.851370] ? __warn.cold+0x14/0x36 [ 173.855087] ? notify_change+0xa2f/0xd10 [ 173.859158] __warn.cold+0x2f/0x36 [ 173.862698] ? ist_end_non_atomic+0x10/0x10 [ 173.867018] ? notify_change+0xa2f/0xd10 [ 173.871253] report_bug+0x216/0x254 [ 173.874884] do_error_trap+0x1bb/0x310 [ 173.878775] ? math_error+0x360/0x360 [ 173.882574] ? lock_downgrade+0x6e0/0x6e0 [ 173.886719] ? __lock_acquire+0x5f9/0x45e0 [ 173.890963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.895812] do_invalid_op+0x1b/0x20 [ 173.899538] invalid_op+0x1b/0x40 [ 173.903085] RIP: 0010:notify_change+0xa2f/0xd10 [ 173.907745] RSP: 0018:ffff8880897375b0 EFLAGS: 00010216 [ 173.913106] RAX: 0000000000040000 RBX: ffff8880a48b0630 RCX: ffffc90008440000 [ 173.920370] RDX: 000000000001fb5a RSI: ffffffff8193a78f RDI: ffff8880a48b0710 [ 173.927636] RBP: ffff888089737600 R08: ffff888062786000 R09: 0000000000000000 [ 173.934931] R10: 0000000000000000 R11: ffff888062786000 R12: ffff888089737650 [ 173.942322] R13: 0000000000004200 R14: ffff8880a48b0630 R15: ffff8880897376c0 [ 173.950045] ? notify_change+0xa2f/0xd10 [ 173.954146] file_remove_privs+0x229/0x430 [ 173.958495] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 173.963597] ? dentry_needs_remove_privs.part.0+0x60/0x60 [ 173.969135] ? trace_hardirqs_on_caller+0x400/0x590 [ 173.974157] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 173.979266] ? depot_save_stack+0x1f1/0x410 [ 173.983595] __generic_file_write_iter+0x15e/0x5b0 [ 173.988520] ? save_stack_trace+0x16/0x20 [ 173.992684] blkdev_write_iter+0x1e8/0x3a0 [ 173.996943] ? check_disk_change+0x120/0x120 [ 174.001357] ? __might_sleep+0x93/0xb0 [ 174.005242] ? save_trace+0x290/0x290 [ 174.009043] do_iter_readv_writev+0x418/0x670 [ 174.013557] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 174.018324] ? rw_verify_area+0xea/0x2b0 [ 174.022475] do_iter_write+0x154/0x540 [ 174.026355] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 174.031803] ? __kmalloc+0x376/0x7a0 [ 174.035518] vfs_iter_write+0x77/0xb0 [ 174.039314] iter_file_splice_write+0x572/0xad0 [ 174.043981] ? touch_atime+0xce/0x250 [ 174.047787] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 174.052913] ? rw_verify_area+0xea/0x2b0 [ 174.056985] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 174.062104] direct_splice_actor+0x123/0x190 [ 174.066513] splice_direct_to_actor+0x29e/0x7b0 [ 174.071269] ? generic_pipe_buf_nosteal+0x10/0x10 [ 174.076113] ? do_splice_to+0x170/0x170 [ 174.080089] ? rw_verify_area+0xea/0x2b0 [ 174.084153] do_splice_direct+0x18d/0x230 [ 174.088303] ? splice_direct_to_actor+0x7b0/0x7b0 [ 174.093242] ? rw_verify_area+0xea/0x2b0 [ 174.097307] do_sendfile+0x4db/0xbd0 [ 174.101037] ? do_compat_pwritev64+0x140/0x140 [ 174.105619] ? put_timespec64+0xb4/0x100 [ 174.109692] ? nsecs_to_jiffies+0x30/0x30 [ 174.113845] SyS_sendfile64+0x102/0x110 [ 174.117825] ? SyS_sendfile+0x130/0x130 [ 174.121805] ? do_syscall_64+0x53/0x640 [ 174.125780] ? SyS_sendfile+0x130/0x130 [ 174.130510] do_syscall_64+0x1e8/0x640 [ 174.134520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.139564] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.144754] RIP: 0033:0x4592c9 [ 174.147943] RSP: 002b:00007f0eb13e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.155652] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004592c9 [ 174.162928] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 174.170205] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 174.177482] R10: 000000000200000d R11: 0000000000000246 R12: 00007f0eb13e26d4 [ 174.184762] R13: 00000000004c689d R14: 00000000004db828 R15: 00000000ffffffff [ 174.193241] Kernel Offset: disabled [ 174.196872] Rebooting in 86400 seconds..