[ 35.805088] kauditd_printk_skb: 9 callbacks suppressed [ 35.805096] audit: type=1800 audit(1555681549.970:33): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 35.839318] audit: type=1800 audit(1555681550.000:34): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.574405] random: sshd: uninitialized urandom read (32 bytes read) [ 40.823099] audit: type=1400 audit(1555681554.990:35): avc: denied { map } for pid=7114 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.879366] random: sshd: uninitialized urandom read (32 bytes read) [ 41.577646] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. [ 47.555835] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/19 13:46:01 fuzzer started [ 47.779467] audit: type=1400 audit(1555681561.940:36): avc: denied { map } for pid=7123 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.730462] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/19 13:46:04 dialing manager at 10.128.0.105:36703 2019/04/19 13:46:04 syscalls: 2434 2019/04/19 13:46:04 code coverage: enabled 2019/04/19 13:46:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/19 13:46:04 extra coverage: extra coverage is not supported by the kernel 2019/04/19 13:46:04 setuid sandbox: enabled 2019/04/19 13:46:04 namespace sandbox: enabled 2019/04/19 13:46:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/19 13:46:04 fault injection: enabled 2019/04/19 13:46:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/19 13:46:04 net packet injection: enabled 2019/04/19 13:46:04 net device setup: enabled [ 51.613556] random: crng init done 13:48:09 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 13:48:09 executing program 2: syz_emit_ethernet(0x72, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x6, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x44, 0x34, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}]}]}}}}}}}, 0x0) 13:48:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) 13:48:09 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(r0, &(0x7f0000000540), 0x4aa, 0x0) 13:48:09 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = creat(0x0, 0x0) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) 13:48:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2, 0x400000000000000, 0x43050000}, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 175.083313] audit: type=1400 audit(1555681689.250:37): avc: denied { map } for pid=7123 comm="syz-fuzzer" path="/root/syzkaller-shm341695119" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 175.117417] audit: type=1400 audit(1555681689.280:38): avc: denied { map } for pid=7140 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13811 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 175.850235] IPVS: ftp: loaded support on port[0] = 21 [ 176.146576] IPVS: ftp: loaded support on port[0] = 21 [ 176.168858] chnl_net:caif_netlink_parms(): no params data found [ 176.234803] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.241758] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.249039] device bridge_slave_0 entered promiscuous mode [ 176.285481] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.292084] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.299202] IPVS: ftp: loaded support on port[0] = 21 [ 176.299521] device bridge_slave_1 entered promiscuous mode [ 176.353594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.365251] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.373070] chnl_net:caif_netlink_parms(): no params data found [ 176.416061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.432407] team0: Port device team_slave_0 added [ 176.449630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.457141] team0: Port device team_slave_1 added [ 176.465659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.490174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.497762] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.504335] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.511437] device bridge_slave_0 entered promiscuous mode [ 176.523182] IPVS: ftp: loaded support on port[0] = 21 [ 176.533063] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.539991] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.548198] device bridge_slave_1 entered promiscuous mode [ 176.632448] device hsr_slave_0 entered promiscuous mode [ 176.710425] device hsr_slave_1 entered promiscuous mode [ 176.772373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.792567] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.801804] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.822164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.908729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.916265] team0: Port device team_slave_0 added [ 176.924768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.932231] team0: Port device team_slave_1 added [ 176.946790] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.953370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.960506] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.967083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.975921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.985733] chnl_net:caif_netlink_parms(): no params data found [ 177.004274] IPVS: ftp: loaded support on port[0] = 21 [ 177.012443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.143347] device hsr_slave_0 entered promiscuous mode [ 177.180520] device hsr_slave_1 entered promiscuous mode [ 177.223852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 177.236887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 177.256268] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.264022] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.296166] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.302742] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.309859] device bridge_slave_0 entered promiscuous mode [ 177.318122] chnl_net:caif_netlink_parms(): no params data found [ 177.345335] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.352209] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.359532] device bridge_slave_1 entered promiscuous mode [ 177.388021] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.396243] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.408533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.455660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.464150] team0: Port device team_slave_0 added [ 177.473002] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.480636] team0: Port device team_slave_1 added [ 177.485814] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.492518] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.499516] device bridge_slave_0 entered promiscuous mode [ 177.508706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.525197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.532771] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.553818] IPVS: ftp: loaded support on port[0] = 21 [ 177.555730] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.566948] device bridge_slave_1 entered promiscuous mode [ 177.583923] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.591196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.617280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.673803] device hsr_slave_0 entered promiscuous mode [ 177.750479] device hsr_slave_1 entered promiscuous mode [ 177.801091] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 177.809272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 177.826374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.843272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.874681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.882612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.898744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.906822] team0: Port device team_slave_0 added [ 177.913584] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.921362] team0: Port device team_slave_1 added [ 177.927057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.978416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.985080] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.994352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.022156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.039770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.047713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.055590] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.061973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.076748] chnl_net:caif_netlink_parms(): no params data found [ 178.098973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.144624] device hsr_slave_0 entered promiscuous mode [ 178.190777] device hsr_slave_1 entered promiscuous mode [ 178.237906] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 178.247052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.254989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.263068] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.269438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.279953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.288826] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.309429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 178.317707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.328256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.366778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.378422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.431927] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.438378] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.445749] device bridge_slave_0 entered promiscuous mode [ 178.453356] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.459741] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.468770] device bridge_slave_1 entered promiscuous mode [ 178.475261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.483578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.494595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.521374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.528465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.536675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.555300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.563957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.573875] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.581731] chnl_net:caif_netlink_parms(): no params data found [ 178.591465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.602931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.612597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.626917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.634907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.642969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.650707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.675994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.697264] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.703820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.720301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.737686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.746291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.755022] team0: Port device team_slave_0 added [ 178.762305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.777997] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.794989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.802440] team0: Port device team_slave_1 added [ 178.808016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.818302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.825283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.832467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.839384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.851691] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 178.857807] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.873664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.882901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 178.888991] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.899884] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.909167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.917156] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.924266] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.931860] device bridge_slave_0 entered promiscuous mode [ 178.945880] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.952369] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.959455] device bridge_slave_1 entered promiscuous mode [ 178.975596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.983449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.991496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.999122] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.005543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.012468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.021043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.028668] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.035102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.042488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.049781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.060386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.071303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.102133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.116011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.127667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.135916] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.142342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.149460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.158000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.165921] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.172352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.181184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.191144] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.244324] device hsr_slave_0 entered promiscuous mode [ 179.280456] device hsr_slave_1 entered promiscuous mode [ 179.321186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 179.329022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.341661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.354369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.363725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.383388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.391422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 179.401317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.412847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.423199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.431860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.439725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.447794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.466112] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.474473] team0: Port device team_slave_0 added [ 179.485424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.494971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.506827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.516668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.529763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.540771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.549179] team0: Port device team_slave_1 added [ 179.566416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.576078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.583771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 13:48:13 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) [ 179.591502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.606492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.621766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.631243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.645264] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.654569] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.662928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.678302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 179.689280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 179.708292] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.732296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.747383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.756363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.769483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.778162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.791468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:48:13 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 179.798847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.813874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 179.831159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 179.839404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.856905] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.864752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.879630] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 179.887203] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.910413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.918651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.933014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.944456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.971547] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.977637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.984547] protocol 88fb is buggy, dev hsr_slave_0 [ 179.984627] protocol 88fb is buggy, dev hsr_slave_1 [ 180.008307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 180.018019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.032984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.094080] device hsr_slave_0 entered promiscuous mode [ 180.100170] protocol 88fb is buggy, dev hsr_slave_0 [ 180.105479] protocol 88fb is buggy, dev hsr_slave_1 [ 180.110766] protocol 88fb is buggy, dev hsr_slave_0 [ 180.115847] protocol 88fb is buggy, dev hsr_slave_1 [ 180.140658] device hsr_slave_1 entered promiscuous mode [ 180.186902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 180.193473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.201989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.209677] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.216197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.223404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.230206] protocol 88fb is buggy, dev hsr_slave_0 [ 180.232124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.235920] protocol 88fb is buggy, dev hsr_slave_1 [ 180.243642] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.248331] protocol 88fb is buggy, dev hsr_slave_0 [ 180.254580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.259616] protocol 88fb is buggy, dev hsr_slave_1 [ 180.266785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.282938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.290291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.298563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.308842] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.323723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.334959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.347525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.354638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.367148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.376086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.386798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.397489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.412193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.424399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.433054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.439964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.447362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.458083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.471943] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.479487] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.493003] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 180.499390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.518738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.535604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.558804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 180.566354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.574721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.583219] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.589629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.596944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.604757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.612682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.622431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.637698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 180.648141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.664125] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 180.672848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.686136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.694290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.709122] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.715580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.724825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.732695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.746387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.781400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.799855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 13:48:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 180.853722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.877278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.896829] 8021q: adding VLAN 0 to HW filter on device bond0 13:48:15 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x20032600) [ 180.922866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.937151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.961682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 13:48:15 executing program 5: msgget(0x3, 0x0) [ 180.970328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.986625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.011872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:48:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000002600050f0012e0713c444d240400fc00100002400a000000053582c137153e370904020002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 181.038205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.072167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.088205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.097734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.116693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.125362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.141667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.149789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.150322] audit: type=1400 audit(1555681695.300:39): avc: denied { create } for pid=7222 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 181.169962] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 13:48:15 executing program 5: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) clock_nanosleep(0x0, 0x1, 0x0, 0x0) gettid() r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RWRITE(r2, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00', 0x3ff}) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x9) getgroups(0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 181.197090] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.218324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.250497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.259780] audit: type=1400 audit(1555681695.300:40): avc: denied { write } for pid=7222 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 181.291724] hrtimer: interrupt took 40053 ns [ 181.300778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.307989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.317895] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.331104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.359621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.391086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.399044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.454670] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.461137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.469169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.481190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.489708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.498492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.506299] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.512720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.528380] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.562916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.572265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.597708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.642069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.649016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.665888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.682518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.694195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.703716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.718995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.726913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.735405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.747994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.756661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.764630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.776039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.783489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.791950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.802514] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.808660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.822316] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.836804] 8021q: adding VLAN 0 to HW filter on device batadv0 13:48:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 13:48:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000e40)={{}, 0x0, [0x0, 0x4], {0x0, 0x1c9c380}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:48:16 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0xf7) 13:48:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 182.588585] syz-executor.3 (7263) used greatest stack depth: 23904 bytes left 13:48:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)) tkill(r1, 0x16) 13:48:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) getegid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) fadvise64(0xffffffffffffffff, 0x0, 0x401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 13:48:17 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820000000000000000a5ddf7", 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a397464fe51c9f7bb84959c61e12a19057d6aa03f27a574133762aaeeacac828b28065e6c8d5ece8522820d434c2dd0a7b655aa6ca81bf5aec94481fe0b91833b12e8d070e87622e274ff6a022", 0x4d}], 0x1) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff9a, 0x0, 0x0, 0xfffffffffffffef2) 13:48:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x0, 0x1, 0x36b3, 0x84800, 0xffffffffffffff9c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000080)=0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x1001, 0x0, 0x0, r4, 0x4}) 13:48:17 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4a, 0x800) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$BLKROSET(r0, 0x932, 0x0) 13:48:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 182.853094] md: md0 stopped. [ 182.882913] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 182.916421] libceph: connect [d::]:6789 error -101 [ 182.922361] libceph: mon0 [d::]:6789 connect error 13:48:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) [ 182.961994] libceph: connect [d::]:6789 error -101 [ 182.974918] libceph: mon0 [d::]:6789 connect error [ 182.984106] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 13:48:17 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYRES32], 0x1d1) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000900)=""/172, 0xac}], 0x1}}], 0x2, 0x10000, 0x0) 13:48:17 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) dup2(r1, r0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) 13:48:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x1c, 0x2}], 0x9f0) 13:48:17 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x0, 0x0) 13:48:17 executing program 2: clone(0x4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000040)=0x800000000002, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x4203, r0, 0x0, 0xa05000) 13:48:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2002) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 13:48:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x20032600) 13:48:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x2ff, 0x7, 0x0, 0x81}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1001, 0x0, 0x0, r2, 0x4}) 13:48:17 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 13:48:17 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$unix(0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) 13:48:17 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x200100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 13:48:17 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 13:48:17 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/#lb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 13:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ui\xff_map\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:48:17 executing program 5: clone(0x8000000000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 183.707845] libceph: connect [d::]:6789 error -101 [ 183.713270] libceph: mon0 [d::]:6789 connect error 13:48:17 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/11, 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') r4 = dup3(r2, r1, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) tkill(r0, 0x1000000000016) [ 183.801354] libceph: connect [d::]:6789 error -101 [ 183.806714] libceph: mon0 [d::]:6789 connect error 13:48:18 executing program 2: r0 = socket(0x8000000000000010, 0x802, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 13:48:18 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r0, 0x0) 13:48:18 executing program 1: socket$key(0xf, 0x3, 0x2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:48:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/111, 0x6f}, {&(0x7f0000001440)=""/4096, 0xfe42}], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x8) r1 = syz_open_pts(r0, 0x2002) dup3(r1, r0, 0x0) chown(&(0x7f00000016c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 13:48:18 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) clock_nanosleep(0x0, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RWRITE(r3, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x9) getgroups(0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 13:48:18 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x10000006, 0x0, 0x0, 0x50000}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f00000003c0), 0x0) 13:48:18 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 13:48:18 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x2000000000000003, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000df0000002300000000000000f10000000004"]}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00\x00\x00\x00\x00r\xed\x02\x00', @ifru_flags=0x2}) 13:48:18 executing program 0: unshare(0x8000400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/62, 0xff50) 13:48:18 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x7, 0x1, 0x36b3, 0x84800, 0xffffffffffffff9c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x2ff, 0x7, 0x0, 0x81}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000080)=0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x1001, 0x0, 0x0, r4, 0x4}) 13:48:18 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x223}, 0x2) 13:48:18 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820000000000000000a5ddf7", 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="faacb57f3e15b65aaa7754b57469fa1e", 0x10}], 0x1) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff9a, 0x0, 0x0, 0xfffffffffffffef2) 13:48:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x3ff800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) read(r1, &(0x7f0000000000)=""/81, 0xffffffd5) 13:48:18 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820000000000000000a5ddf7", 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="faacb57f3e15b65aaa7754b57469fa1e", 0x10}], 0x1) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff9a, 0x0, 0x0, 0xfffffffffffffef2) [ 184.802659] audit: type=1804 audit(1555681698.970:41): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir359026546/syzkaller.eHHyuU/8/memory.events" dev="sda1" ino=16547 res=1 [ 184.830889] audit: type=1800 audit(1555681698.970:42): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="memory.events" dev="sda1" ino=16547 res=0 [ 184.855603] audit: type=1800 audit(1555681699.020:43): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="memory.events" dev="sda1" ino=16547 res=0 13:48:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x10) 13:48:21 executing program 0: syz_emit_ethernet(0x72, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x6, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x44, 0x34, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}]}]}}}}}}}, 0x0) 13:48:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x0, 0x300) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:48:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x35fd6fde, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) 13:48:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000440)="99", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:48:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0x9, 0x1a, 0x6, 0x8000}, 0x14) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x9, 0x5, 0x9e}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 13:48:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 13:48:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x35fd6fde, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x20032600) [ 187.225348] sg_write: process 25 (syz-executor.1) called from kernel context, this is not allowed. 13:48:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x5}, 0x64) 13:48:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) close(r0) close(r2) close(r1) pipe(&(0x7f0000000000)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x87d, 0x0) splice(r0, 0x0, r2, 0x0, 0x6d5d, 0x0) close(r1) 13:48:21 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x40}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:48:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x400000000000015, &(0x7f0000937fed)=""/16, &(0x7f0000000040)=0x10) 13:48:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$vhci(r0, &(0x7f0000000180)=@HCI_SCODATA_PKT, 0x1) close(r0) 13:48:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 13:48:21 executing program 2: 13:48:21 executing program 3: 13:48:21 executing program 4: 13:48:21 executing program 2: 13:48:21 executing program 0: [ 187.647683] libceph: connect [d::]:6789 error -101 [ 187.652822] libceph: mon0 [d::]:6789 connect error 13:48:21 executing program 2: [ 188.040877] libceph: connect [d::]:6789 error -101 [ 188.045909] libceph: mon0 [d::]:6789 connect error 13:48:22 executing program 1: 13:48:22 executing program 4: 13:48:22 executing program 0: 13:48:22 executing program 3: 13:48:22 executing program 2: 13:48:22 executing program 5: 13:48:22 executing program 4: 13:48:22 executing program 1: 13:48:22 executing program 3: 13:48:22 executing program 0: 13:48:22 executing program 2: [ 188.436193] libceph: connect [d::]:6789 error -101 [ 188.441335] libceph: mon0 [d::]:6789 connect error 13:48:22 executing program 4: 13:48:22 executing program 1: 13:48:22 executing program 3: 13:48:22 executing program 0: 13:48:22 executing program 2: 13:48:22 executing program 1: 13:48:22 executing program 5: 13:48:22 executing program 3: 13:48:22 executing program 4: 13:48:22 executing program 0: 13:48:22 executing program 2: 13:48:22 executing program 5: 13:48:22 executing program 1: 13:48:22 executing program 0: 13:48:22 executing program 3: 13:48:22 executing program 5: 13:48:22 executing program 2: 13:48:22 executing program 4: 13:48:22 executing program 1: 13:48:22 executing program 0: 13:48:23 executing program 3: 13:48:23 executing program 5: 13:48:23 executing program 1: 13:48:23 executing program 2: 13:48:23 executing program 0: 13:48:23 executing program 4: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 13:48:23 executing program 1: 13:48:23 executing program 3: 13:48:23 executing program 5: 13:48:23 executing program 2: 13:48:23 executing program 0: 13:48:23 executing program 3: 13:48:23 executing program 1: 13:48:23 executing program 4: 13:48:23 executing program 3: 13:48:23 executing program 5: 13:48:23 executing program 2: 13:48:23 executing program 0: 13:48:23 executing program 4: 13:48:23 executing program 1: 13:48:23 executing program 2: 13:48:23 executing program 5: 13:48:23 executing program 1: 13:48:23 executing program 0: 13:48:23 executing program 3: 13:48:23 executing program 2: 13:48:23 executing program 5: 13:48:23 executing program 4: 13:48:23 executing program 1: 13:48:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x20, 0x21, 0x1}, 0x20}}, 0x0) 13:48:23 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) creat(&(0x7f00000001c0)='./file0\x00', 0x80) r1 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:23 executing program 3: 13:48:23 executing program 2: 13:48:23 executing program 5: 13:48:23 executing program 1: 13:48:23 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='K', 0x1, 0x4000001, 0x0, 0x0) [ 189.430135] net_ratelimit: 6 callbacks suppressed [ 189.430141] protocol 88fb is buggy, dev hsr_slave_0 [ 189.440165] protocol 88fb is buggy, dev hsr_slave_1 [ 189.443014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 13:48:23 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007011dfffd940101830020200a000900000000000000010000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:48:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x1000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) [ 189.510152] protocol 88fb is buggy, dev hsr_slave_0 [ 189.515260] protocol 88fb is buggy, dev hsr_slave_1 13:48:23 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x33e, 0x200007ff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x10000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00, 0x0, 0xa8, 0x70010000]}}, 0xfef5) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000280)={0x28, 0x0, 0x5, {{0x0, 0x8, 0x3}}}, 0x28) [ 189.549791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=102 sclass=netlink_route_socket pig=7645 comm=syz-executor.2 [ 189.564420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.619724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=102 sclass=netlink_route_socket pig=7654 comm=syz-executor.2 13:48:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) bind$isdn(0xffffffffffffffff, 0x0, 0x0) getpid() semget(0xffffffffffffffff, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) semget$private(0x0, 0x0, 0x631) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) syz_open_procfs(0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0xc045, 0x0, 0x0) [ 189.674729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.842986] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.046868] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.070225] protocol 88fb is buggy, dev hsr_slave_0 [ 190.075435] protocol 88fb is buggy, dev hsr_slave_1 13:48:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") sendmmsg(r0, &(0x7f0000007fc0), 0x354, 0x0) 13:48:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000040)) 13:48:24 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 13:48:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x33e, 0x200007ff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x10000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00, 0x0, 0xa8, 0x70010000]}}, 0xfef5) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000280)={0x28, 0x0, 0x5, {{0x0, 0x8, 0x3}}}, 0x28) [ 190.550828] protocol 88fb is buggy, dev hsr_slave_0 [ 190.555946] protocol 88fb is buggy, dev hsr_slave_1 13:48:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9eed00000200140002000000400000000000000005000600200000000a00000000000000000500e50000070000001f00000000000003000000000000020001008000000000000002000000040500050000009f000a0000ff17000000000000000000000000001700000000000000000000000000557875e073bdd9989f52dd3b87ad33c842066079b0b5f1460ed788e81bd46f189ce84b6d267216d8994d4ae4b2b09782d9a0b085"], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x32f0460fe8298b6, 0x0) [ 190.710133] protocol 88fb is buggy, dev hsr_slave_0 [ 190.715377] protocol 88fb is buggy, dev hsr_slave_1 13:48:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 13:48:25 executing program 2: 13:48:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffff3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) 13:48:25 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:25 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:25 executing program 0: unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:48:25 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8200003) 13:48:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=':', 0x1) 13:48:26 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 13:48:26 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:26 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 192.033646] audit: type=1400 audit(1555681706.200:44): avc: denied { mac_admin } for pid=7734 comm="syz-executor.0" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 13:48:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x36000, 0x400100]}, 0x2c) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000080)={{}, 0x8, 0x10000}) 13:48:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/21, 0x4}], 0x1) 13:48:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) 13:48:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:48:35 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:35 executing program 0: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) clone(0x20000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x7) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:48:35 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1000000, 0x0, 0x1000000000054}, 0x98) 13:48:35 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) prlimit64(0x0, 0xf, &(0x7f0000000000), 0x0) 13:48:35 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x3, 0x8040) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000600)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) gettid() remap_file_pages(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x81, 0x8020) bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x0, 0x8000b, 0x5, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x401) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000580)=0xc) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) inotify_add_watch(r4, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/88) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syncfs(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) sendmmsg(r7, &(0x7f0000002f00)=[{{&(0x7f0000000200)=@isdn={0x22, 0x9, 0x7, 0x8a, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001700)="d0c08adf7b73a0eb49ec9c0503af477e49482f2826deba9cbcce7cfe11984f0657de5ffbab1f953923c1eccf1db867d07f6c9aad7758740ac74fa3b41f528840d7b75b1787ba60dd3741a716933cf840e73b6adcb9771414e34d3c3d625aab5594e53c3d13969aa3c96327ecb50e00bf09c9eb4584e72db3ca24c39ac3af0ddb8ed601eeaa16412e1ddd5421ba831e157764e33cf4818ea9ff91bfb60c9406ed78c8e5bf6a06718f3d858cb160099b1831fa57294f19dc403edf13b4dbf7434ce1a4c060245333af78d2934cd5c7b0f1c85128c8ee219485556db61be3280fb439", 0xe1}], 0x1}, 0x7}, {{&(0x7f0000000500)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002e00)="c05d2898af67200dfedcd7ad5ec245aa65581d4707c76ab4bc30b9fb5f09a6", 0x1f}], 0x1}}], 0x2, 0x20000081) 13:48:36 executing program 5: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xd5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @multicast2, 0x0, 0x0, 'lblcr\x00'}, 0x2c) [ 201.864508] mmap: syz-executor.0 (7782) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 13:48:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800fdff000000000000000009000000140003000700000000000000"], 0x1}}, 0x0) 13:48:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r2, r1, 0xd}, 0x10) [ 201.910110] net_ratelimit: 12 callbacks suppressed [ 201.910116] protocol 88fb is buggy, dev hsr_slave_0 [ 201.920222] protocol 88fb is buggy, dev hsr_slave_1 13:48:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000100)=0x8) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) tkill(r1, 0x1000000000016) [ 201.975123] audit: type=1400 audit(1555681716.130:45): avc: denied { read } for pid=7780 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 201.999026] protocol 88fb is buggy, dev hsr_slave_0 [ 201.999085] protocol 88fb is buggy, dev hsr_slave_1 13:48:36 executing program 4: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b) r1 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) prctl$PR_SET_UNALIGN(0x6, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) tkill(r1, 0x1000000000016) 13:48:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:36 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1f, 0x3, 0x8}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:48:36 executing program 0: accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast2}, 0x8) 13:48:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x26, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0) [ 202.376247] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. 13:48:36 executing program 2: 13:48:36 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:36 executing program 4: 13:48:36 executing program 0: 13:48:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000400)="eb64c86d4f66732e6661740002044100050c077008f8", 0x16}], 0x0, 0x0) 13:48:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc}, 0x10) close(r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 202.550150] protocol 88fb is buggy, dev hsr_slave_0 [ 202.555333] protocol 88fb is buggy, dev hsr_slave_1 13:48:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60b409000543290002024300800080000000ffffe0000024fe0200000000000000000000fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb057befa3ac80b0e4b9448ea4e25d1813f4d488fe2a1d90bb7480280354182d06da9f00"/140], 0x0) 13:48:36 executing program 2: [ 202.660468] FAT-fs (loop4): bogus number of directory entries (1804) [ 202.694488] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.775468] FAT-fs (loop4): bogus number of directory entries (1804) [ 202.805596] FAT-fs (loop4): Can't find a valid FAT filesystem [ 203.030257] protocol 88fb is buggy, dev hsr_slave_0 [ 203.035473] protocol 88fb is buggy, dev hsr_slave_1 [ 203.190169] protocol 88fb is buggy, dev hsr_slave_0 [ 203.195274] protocol 88fb is buggy, dev hsr_slave_1 13:48:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:39 executing program 5: 13:48:39 executing program 2: 13:48:39 executing program 0: 13:48:39 executing program 4: 13:48:39 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:39 executing program 0: 13:48:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000004c0)={0x0, &(0x7f0000000240)}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x40200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xdf1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 13:48:39 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 13:48:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/195, 0xc3}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 13:48:39 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 13:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/195, 0xc3}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 13:48:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a5"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x8) 13:48:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="a5"], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x8) [ 205.659439] xt_connbytes: cannot load conntrack support for proto=7 [ 205.668476] xt_connbytes: Forcing CT accounting to be enabled 13:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/195, 0xc3}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 13:48:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1, &(0x7f0000000040)=""/31, 0x1f}}], 0x1, 0x0, 0x0) 13:48:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2de, 0x0, [{}, {}, {0x0, 0x5, 0x0, [], 0xffff}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:48:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 13:48:40 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 13:48:40 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000003c0)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xc, 0x0, "89033ed8"}, 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xc, 0x0, "670984b6"}, 0x0, 0x1000) 13:48:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:48:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x408000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13:48:40 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000180)) 13:48:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2de, 0x0, [{}, {}, {0x0, 0x5, 0x0, [], 0xffff}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:48:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) exit(0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000380)=ANY=[], 0x0) 13:48:40 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000004c0)={0x0, &(0x7f0000000240)}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xdf1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1000000, 0x0, 0x1000000000054}, 0x98) [ 206.642341] hfsplus: unable to find HFS+ superblock [ 206.724124] hfsplus: unable to find HFS+ superblock 13:48:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) [ 207.191327] net_ratelimit: 14 callbacks suppressed [ 207.191332] protocol 88fb is buggy, dev hsr_slave_0 [ 207.201589] protocol 88fb is buggy, dev hsr_slave_1 13:48:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)=""/250) 13:48:41 executing program 5: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) 13:48:41 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x8}, 0x0, 0x1400) 13:48:41 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 207.350232] protocol 88fb is buggy, dev hsr_slave_0 [ 207.355431] protocol 88fb is buggy, dev hsr_slave_1 13:48:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 207.510533] protocol 88fb is buggy, dev hsr_slave_0 [ 207.517312] protocol 88fb is buggy, dev hsr_slave_1 13:48:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 13:48:41 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x304) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/62, 0x3e}, 0x120) write$UHID_INPUT2(r0, &(0x7f0000000380), 0x6) 13:48:41 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 13:48:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 207.734775] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.769706] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.793508] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.802452] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.814376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.837018] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.855130] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.867252] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.886092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.895637] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.905563] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.915190] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.925463] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.939719] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.947084] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.954263] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.961191] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.967980] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.975089] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.981910] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.988633] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 207.995439] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.002227] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.008919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.015705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.022481] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.029170] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.035919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.042690] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.049381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.056120] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.062837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.069511] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.076286] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.083088] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.089843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.096753] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.103611] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.110516] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.110547] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.124010] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.130796] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.130811] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.132928] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.146604] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.151362] protocol 88fb is buggy, dev hsr_slave_0 [ 208.160095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.163174] protocol 88fb is buggy, dev hsr_slave_1 [ 208.169757] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.185075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.191851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.198544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.205365] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.212136] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.218849] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.225623] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232430] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232443] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232456] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232468] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232481] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232494] protocol 88fb is buggy, dev hsr_slave_0 [ 208.232497] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 208.232544] protocol 88fb is buggy, dev hsr_slave_1 [ 208.298986] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 13:48:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:42 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) 13:48:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:42 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="a5"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x8) 13:48:42 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0x2, 0x3, 0x1c) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x80000001}}}, 0x0) 13:48:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 13:48:42 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x80) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 13:48:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) prlimit64(0x0, 0x8, &(0x7f0000000380), 0x0) 13:48:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 208.601719] binder: 8040:8045 unknown command 536871360 [ 208.620881] binder: 8040:8045 ioctl c0306201 20000040 returned -22 [ 208.706020] binder: 8040:8045 unknown command 536871360 [ 208.719598] binder: 8040:8045 ioctl c0306201 20000040 returned -22 13:48:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000a40)="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", 0xf0c) sendto$unix(r0, &(0x7f0000000000)="a6a1a9a4c01544d1865a33e4490ad5c442213f2db4f7e3d4ee284ca4e230779c981c2bda25ce1630a939abffc4b2839ea0fb75e82169d9f20300ddba3e84846bf6b5fcc1103b4c500053d8f372d80fed5ba2c8a7bcc53b1d1d9faeffc44ddee2e5dd8d56cb4ad0a1f0a07a4cc7e589253cee59ddb599fd7cec09704a8c51315d8fb049807d07cca4c4e33d48a1dbb1e194f50f52df76af28bc07896e03ec5ee73a146622bc104ab59603cfa3fc608afd6b676f2a5175eb42b4054d1c2330d31446d863de767bc3ac1c8325909c84600c9af62cb993b1930018c272a8a9353c01e266157280e9ce511766353c5f32e58af5397c509e", 0xf5, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 13:48:43 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) renameat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000440)='./bus\x00') lstat(0x0, &(0x7f0000000300)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='^posix_acl_accessppp1\\\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="080026bd7000fedbdf250d0000002c0007000c00040006000000000000000c00040006000000000000000800020001000000080001000600000014000600040002"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x48085) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0) 13:48:43 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:43 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4044000, 0x0, 0x0) 13:48:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:43 executing program 2: 13:48:43 executing program 4: 13:48:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:43 executing program 4: 13:48:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:44 executing program 2: 13:48:44 executing program 4: 13:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:44 executing program 0: 13:48:44 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:44 executing program 2: 13:48:44 executing program 4: 13:48:44 executing program 0: 13:48:44 executing program 2: 13:48:44 executing program 4: 13:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:45 executing program 0: 13:48:45 executing program 2: 13:48:45 executing program 4: 13:48:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:45 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:45 executing program 0: 13:48:45 executing program 4: 13:48:45 executing program 2: 13:48:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:45 executing program 0: 13:48:45 executing program 4: 13:48:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:46 executing program 2: 13:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:46 executing program 4: 13:48:46 executing program 0: 13:48:46 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:46 executing program 4: 13:48:46 executing program 0: 13:48:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0xd4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000009000000000000000000766c616e3000000000000000000000007663616e30000000000000000040000000616d3000000000000000000000000065727370616e300000000000000000000180c200000000000000000000000000000000000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000"]}, 0x14c) 13:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:46 executing program 4: 13:48:46 executing program 0: [ 212.310913] net_ratelimit: 20 callbacks suppressed [ 212.310918] protocol 88fb is buggy, dev hsr_slave_0 [ 212.321464] protocol 88fb is buggy, dev hsr_slave_1 [ 212.390233] protocol 88fb is buggy, dev hsr_slave_0 [ 212.395602] protocol 88fb is buggy, dev hsr_slave_1 [ 212.950749] protocol 88fb is buggy, dev hsr_slave_0 [ 212.956361] protocol 88fb is buggy, dev hsr_slave_1 13:48:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:47 executing program 2: 13:48:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:47 executing program 4: 13:48:47 executing program 0: 13:48:47 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:47 executing program 0: 13:48:47 executing program 4: 13:48:47 executing program 2: 13:48:47 executing program 4: 13:48:47 executing program 0: 13:48:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 213.430197] protocol 88fb is buggy, dev hsr_slave_0 [ 213.435359] protocol 88fb is buggy, dev hsr_slave_1 [ 213.590958] protocol 88fb is buggy, dev hsr_slave_0 [ 213.596203] protocol 88fb is buggy, dev hsr_slave_1 13:48:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:48 executing program 4: 13:48:48 executing program 0: 13:48:48 executing program 2: 13:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:48 executing program 4: 13:48:48 executing program 2: 13:48:48 executing program 0: 13:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:48 executing program 4: 13:48:48 executing program 2: 13:48:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:49 executing program 0: 13:48:49 executing program 2: 13:48:49 executing program 4: 13:48:49 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:49 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:49 executing program 2: 13:48:49 executing program 0: 13:48:49 executing program 4: 13:48:49 executing program 2: 13:48:49 executing program 0: 13:48:49 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:50 executing program 2: 13:48:50 executing program 0: 13:48:50 executing program 4: 13:48:50 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:50 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000440)}], 0x1, 0x1) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000200), 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) semget(0xffffffffffffffff, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') 13:48:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000a00)=""/171, 0xab}, {0x0}], 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) timer_getoverrun(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, 0x0, 0x0) 13:48:50 executing program 0: 13:48:50 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:50 executing program 0: 13:48:50 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:51 executing program 0: 13:48:51 executing program 4: 13:48:51 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") poll(&(0x7f0000000100)=[{r0}], 0x20000000000000d0, 0x0) 13:48:51 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) 13:48:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x37, 0x0, 0x0) 13:48:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x17cd, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79fd, 0x0) 13:48:51 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:51 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8000, 0x0, 0x0) [ 217.014195] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:48:51 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 217.590141] net_ratelimit: 20 callbacks suppressed [ 217.590146] protocol 88fb is buggy, dev hsr_slave_0 [ 217.600305] protocol 88fb is buggy, dev hsr_slave_1 [ 217.750157] protocol 88fb is buggy, dev hsr_slave_0 [ 217.755361] protocol 88fb is buggy, dev hsr_slave_1 13:48:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x4004002, 0x0, 0x0) 13:48:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) 13:48:52 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:52 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) chdir(0x0) r0 = creat(0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000004c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055", 0x5f, 0x1a0}]) ftruncate(0xffffffffffffffff, 0x208200) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) add_key(&(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x80) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) get_thread_area(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1000, 0x7fffffff, 0x7fff, 0x81}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x54) 13:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 217.910178] protocol 88fb is buggy, dev hsr_slave_0 [ 217.915368] protocol 88fb is buggy, dev hsr_slave_1 [ 217.937171] xt_connbytes: cannot load conntrack support for proto=7 13:48:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)="1f", 0x1) [ 218.112246] xt_connbytes: cannot load conntrack support for proto=7 [ 218.550183] protocol 88fb is buggy, dev hsr_slave_0 [ 218.555356] protocol 88fb is buggy, dev hsr_slave_1 [ 218.630176] protocol 88fb is buggy, dev hsr_slave_0 [ 218.635329] protocol 88fb is buggy, dev hsr_slave_1 13:48:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) creat(&(0x7f00000001c0)='./file0\x00', 0x80) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11070000000bceec7be070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x200000000000011, &(0x7f0000000280)=0x5, 0x4) connect$inet6(r1, &(0x7f0000001ff2)={0xa, 0x0, 0x0, @mcast2}, 0x1a) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000500), 0x4) 13:48:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) gettid() 13:48:52 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 218.807415] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:48:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)) 13:48:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$get_security(0x11, 0x0, 0x0, 0x5e05125f215a213c) [ 218.915148] xt_connbytes: cannot load conntrack support for proto=7 13:48:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x6c, r2, 0x80000201, 0x0, 0x0, {0x3, 0xf6020000}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0xc0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0) [ 219.175522] Bearer rejected, not supported in standalone mode [ 219.194420] xt_connbytes: cannot load conntrack support for proto=7 [ 219.211306] Bearer rejected, not supported in standalone mode 13:48:53 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="dc", 0x1, 0x8000, 0x0, 0x0) 13:48:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001600)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 13:48:53 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:53 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x3, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:48:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x11, 0x400000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000f6bffb), 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_ifreq(r1, 0x80000008922, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 13:48:53 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:54 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) 13:48:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:54 executing program 4: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0, 0x0) 13:48:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @win={{0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001280)={0x0, 0x1ff, 0x4, {0xb, @win={{0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 13:48:54 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x11\x00\x00\x88\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/528]}, 0x288) [ 220.049209] kasan: CONFIG_KASAN_INLINE enabled 13:48:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)='<', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x394) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 13:48:54 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 220.077619] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 220.143138] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 220.149412] Modules linked in: [ 220.152611] CPU: 0 PID: 8479 Comm: syz-executor.2 Not tainted 4.14.112 #2 [ 220.159538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.168899] task: ffff888092b7a440 task.stack: ffff88805fe18000 [ 220.175028] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 220.180213] RSP: 0018:ffff88805fe1fb98 EFLAGS: 00010202 [ 220.185568] RAX: dffffc0000000000 RBX: ffff88809527f5c0 RCX: ffffffff84258400 [ 220.192830] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 220.200092] RBP: ffff88805fe1fbc0 R08: 000000006e92476e R09: ffff888092b7ad08 [ 220.207354] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 220.214618] R13: 0000000000000001 R14: ffff88809527f5d4 R15: 0000000000000000 [ 220.221901] FS: 0000000001b1f940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 220.230122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.235996] CR2: 00007f3d84788518 CR3: 0000000084291000 CR4: 00000000001406f0 [ 220.243261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.250523] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.257802] Call Trace: [ 220.260402] refcount_dec_and_test+0x1b/0x20 [ 220.264827] vb2_vmalloc_put+0x18/0x70 [ 220.268740] __vb2_buf_mem_free+0x106/0x1e0 [ 220.273065] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 220.278525] __vb2_queue_free+0x63a/0x7e0 [ 220.282671] vb2_core_queue_release+0x64/0x80 [ 220.287157] _vb2_fop_release+0x1cf/0x2a0 [ 220.291300] vb2_fop_release+0x75/0xc0 [ 220.295186] vivid_fop_release+0x180/0x3f0 [ 220.299410] ? vivid_remove+0x3d0/0x3d0 [ 220.303385] ? dev_debug_store+0xe0/0xe0 [ 220.307439] v4l2_release+0xfb/0x190 [ 220.311175] __fput+0x277/0x7a0 [ 220.314447] ____fput+0x16/0x20 [ 220.317747] task_work_run+0x119/0x190 [ 220.321638] exit_to_usermode_loop+0x1da/0x220 [ 220.326215] do_syscall_64+0x4a9/0x630 [ 220.330088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.334960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 220.340147] RIP: 0033:0x4129e1 [ 220.343343] RSP: 002b:00007fffcd77c3e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 220.351043] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1 [ 220.358317] RDX: 0000001b32220000 RSI: 0000000000000000 RDI: 0000000000000003 [ 220.365595] RBP: 0000000000740868 R08: 0000000015c23545 R09: 0000000015c23549 [ 220.372861] R10: 00007fffcd77c4b0 R11: 0000000000000293 R12: 0000000000000001 [ 220.380142] R13: 0000000000035b87 R14: 0000000000035bb4 R15: 000000000073bf0c [ 220.387409] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 d6 e0 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 220.406797] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff88805fe1fb98 [ 220.428185] kobject: 'loop0' (ffff8880a490a560): kobject_uevent_env [ 220.438655] kobject: 'loop0' (ffff8880a490a560): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 220.469810] ---[ end trace c4473eca368f53d5 ]--- [ 220.482668] Kernel panic - not syncing: Fatal exception [ 220.489043] Kernel Offset: disabled [ 220.492774] Rebooting in 86400 seconds..