Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. [ 38.785769] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/05 18:33:17 fuzzer started [ 38.978023] audit: type=1400 audit(1572978797.440:36): avc: denied { map } for pid=6975 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.506208] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/05 18:33:18 dialing manager at 10.128.0.105:45337 2019/11/05 18:33:18 syscalls: 2529 2019/11/05 18:33:18 code coverage: enabled 2019/11/05 18:33:18 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/05 18:33:18 extra coverage: extra coverage is not supported by the kernel 2019/11/05 18:33:18 setuid sandbox: enabled 2019/11/05 18:33:18 namespace sandbox: enabled 2019/11/05 18:33:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 18:33:18 fault injection: enabled 2019/11/05 18:33:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 18:33:18 net packet injection: enabled 2019/11/05 18:33:18 net device setup: enabled 2019/11/05 18:33:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/05 18:33:18 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 41.058763] random: crng init done 18:34:04 executing program 5: 18:34:04 executing program 0: 18:34:04 executing program 3: 18:34:04 executing program 1: 18:34:04 executing program 2: 18:34:04 executing program 4: [ 85.949661] audit: type=1400 audit(1572978844.410:37): avc: denied { map } for pid=6975 comm="syz-fuzzer" path="/root/syzkaller-shm104427097" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 85.994101] audit: type=1400 audit(1572978844.440:38): avc: denied { map } for pid=6994 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13804 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 86.380906] IPVS: ftp: loaded support on port[0] = 21 [ 87.248198] chnl_net:caif_netlink_parms(): no params data found [ 87.256144] IPVS: ftp: loaded support on port[0] = 21 [ 87.301802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308194] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.315318] device bridge_slave_0 entered promiscuous mode [ 87.323865] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.330407] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.337163] device bridge_slave_1 entered promiscuous mode [ 87.353927] IPVS: ftp: loaded support on port[0] = 21 [ 87.367900] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.378358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.395543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.403032] team0: Port device team_slave_0 added [ 87.410188] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.417209] team0: Port device team_slave_1 added [ 87.422454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.429665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.522186] device hsr_slave_0 entered promiscuous mode [ 87.590260] device hsr_slave_1 entered promiscuous mode [ 87.683930] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 87.697790] chnl_net:caif_netlink_parms(): no params data found [ 87.706412] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 87.741741] IPVS: ftp: loaded support on port[0] = 21 [ 87.769541] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.775977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.782755] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.789086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.828444] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.835277] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.842126] device bridge_slave_0 entered promiscuous mode [ 87.855436] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.862108] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.868910] device bridge_slave_1 entered promiscuous mode [ 87.884551] chnl_net:caif_netlink_parms(): no params data found [ 87.902883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.925262] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.943188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.950481] team0: Port device team_slave_0 added [ 87.958974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.966100] team0: Port device team_slave_1 added [ 87.984287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.995244] IPVS: ftp: loaded support on port[0] = 21 [ 88.001655] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.008037] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.015202] device bridge_slave_0 entered promiscuous mode [ 88.021921] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.028257] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.035277] device bridge_slave_1 entered promiscuous mode [ 88.046677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.105796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.115128] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.161904] device hsr_slave_0 entered promiscuous mode [ 88.200423] device hsr_slave_1 entered promiscuous mode [ 88.278930] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 88.286050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 88.295943] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 88.302120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.324072] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.341344] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.348222] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 88.357328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 88.364374] team0: Port device team_slave_0 added [ 88.379517] chnl_net:caif_netlink_parms(): no params data found [ 88.402654] IPVS: ftp: loaded support on port[0] = 21 [ 88.412697] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.419007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 88.426386] team0: Port device team_slave_1 added [ 88.433334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.441733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.463781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.502496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.509340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.571966] device hsr_slave_0 entered promiscuous mode [ 88.610265] device hsr_slave_1 entered promiscuous mode [ 88.692444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 88.711753] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 88.729579] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 88.736088] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.746222] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 88.756029] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.763768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.771257] device bridge_slave_0 entered promiscuous mode [ 88.777828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.784324] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.792529] device bridge_slave_1 entered promiscuous mode [ 88.813824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.825921] chnl_net:caif_netlink_parms(): no params data found [ 88.837089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 88.845027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.862120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 88.869147] team0: Port device team_slave_0 added [ 88.884843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.893367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.901114] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.907433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.915850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 88.924736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 88.933693] team0: Port device team_slave_1 added [ 88.941237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.948527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.959898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 88.979909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.987924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.995889] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.002271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.036806] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.043806] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.051404] device bridge_slave_0 entered promiscuous mode [ 89.112133] device hsr_slave_0 entered promiscuous mode [ 89.150283] device hsr_slave_1 entered promiscuous mode [ 89.193628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 89.203593] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.209927] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.216883] device bridge_slave_1 entered promiscuous mode [ 89.230895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.239265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 89.248701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 89.272262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.281621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.298088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 89.309776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 89.320872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 89.327935] team0: Port device team_slave_0 added [ 89.333604] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 89.340877] team0: Port device team_slave_1 added [ 89.346483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.354206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.361976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.369632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.385105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 89.392628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 89.408102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.415724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.424016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 89.462664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 89.474315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 89.493756] chnl_net:caif_netlink_parms(): no params data found [ 89.504199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 89.511055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.518464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.526450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.534178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.544378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.602034] device hsr_slave_0 entered promiscuous mode [ 89.640287] device hsr_slave_1 entered promiscuous mode [ 89.720938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 89.728254] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 89.740103] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 89.746099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.768959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.776881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.791805] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 89.814957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.825062] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.833061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 89.839290] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.846392] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.853796] device bridge_slave_0 entered promiscuous mode [ 89.863426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 89.871040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.877808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.884975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.891851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.899091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.906660] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 89.912951] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.920996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.927331] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.934594] device bridge_slave_1 entered promiscuous mode [ 89.954009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.962214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.969023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.978351] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 89.984693] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.992818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.001657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.015030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.022887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.031034] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.037427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.049493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.058629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.068390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.089509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.098117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.106114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.113738] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.120101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.126887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.134936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.142532] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.148856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.156102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.166893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 90.174455] team0: Port device team_slave_0 added [ 90.181076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 90.189936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 90.206491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.217699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.226581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.234356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.242418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 90.249412] team0: Port device team_slave_1 added [ 90.256359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 90.265740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.275188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 18:34:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 90.284555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 90.298693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.310774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.329794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.339653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.347629] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.354021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.361034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.367780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.374783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.385509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 90.397476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.404276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 90.419776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.428232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.441584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 90.449689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 90.459038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 90.512098] device hsr_slave_0 entered promiscuous mode [ 90.550311] device hsr_slave_1 entered promiscuous mode [ 90.630949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 90.638275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.644629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.652175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.659463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.667110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.676452] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 90.683777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.691250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 90.704178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 90.711777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 90.720481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 18:34:09 executing program 0: socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1000000010, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xfffffe53) socket$inet6_tcp(0xa, 0x1, 0x0) [ 90.727872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.735398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.743279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.750996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.758975] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 90.766245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.775333] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.796894] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 90.805658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.814936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.822756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.829529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.837491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.845423] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.851822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.867721] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 90.877465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 90.887761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 90.895393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.905534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.915014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.925644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.935120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.947023] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 90.955615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.965510] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 90.979136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 90.990339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.997867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.004937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.012823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.026579] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.032984] bridge0: port 2(bridge_slave_1) entered forwarding state 18:34:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffe5, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000563ed0080637e6394f21100d2000500fcb711407f480f0003000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) [ 91.047443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.067013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 91.075669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.089512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.097217] audit: type=1400 audit(1572978849.550:39): avc: denied { create } for pid=7042 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 91.097950] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.127462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.138997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 18:34:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x321}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) [ 91.148623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.161957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 91.171224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.176289] audit: type=1400 audit(1572978849.590:40): avc: denied { write } for pid=7042 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 91.217799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.237890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.251852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.259666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.267855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.274378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.288428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.296213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.307987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.317659] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 91.327908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.338744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 91.350903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.360609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.369085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.382830] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 91.392546] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 91.407078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.413575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.421778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.429170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.437022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.444107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.452655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 91.461968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.473971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.484813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.492461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.501132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.508806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.517095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.525201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.536590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.544891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 18:34:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000a80)='gfs2\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}]}) [ 91.559539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.575914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.583694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.590727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.598395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.602798] gfs2: not a GFS2 filesystem [ 91.612754] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 91.618908] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.627412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 91.635126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 91.645653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 91.664306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.672684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.680387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.686248] gfs2: not a GFS2 filesystem [ 91.688105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.699080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.707193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.716622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 91.728220] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 91.734570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.748082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.755788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 18:34:10 executing program 3: syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x200, 0x0) [ 91.768508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.777250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.789716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.804359] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.810766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.819270] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 91.827765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.839094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.850866] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 91.857889] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 91.874326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.885578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.892647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.899279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.907091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.915272] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.921641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.934837] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 91.943130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 91.956706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.966634] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 91.974965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.984940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.991640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.998470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.005496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.019018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 92.036042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.049915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.063267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.077263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.086404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.106245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.114598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.129023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 92.142833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.150486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.159795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 92.168799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.176746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.186533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 92.192694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.207492] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 92.215437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 92.223140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.229795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.240175] 8021q: adding VLAN 0 to HW filter on device batadv0 18:34:11 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={0x0}}, 0x0) write(r0, &(0x7f0000000080)="1b0000001a005f0014f9f407000904000200"/27, 0x1b) 18:34:11 executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) 18:34:11 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0x2, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="53e8f7c8502332c6a200"], 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000100), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = dup(r2) setsockopt$inet_int(r4, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10010000000035) fcntl$setstatus(r2, 0x4, 0x80000000002000) 18:34:11 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 93.152434] ptrace attach of "/root/syz-executor.0"[7119] was attempted by "/root/syz-executor.0"[7122] [ 93.224042] hrtimer: interrupt took 46600 ns 18:34:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e2bcfe87b3071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001d80)="1e30ca4f03ab5f9b3234b602176ee31231ee06028f58ceb1378f997f33eee25e56702790c4558a3dccb5c8fb780aa0f13778904bab3c9dc02f21ee9a3c9a98b51366828e02696ed07c54de0e40da2f50bb8b6570e50290af8c4ad4e087d1250af2fd50d3919f361984600ef80e8f658d919e175c57ce014debb1791fd7c6faef7e397ded3e2954b239a56b256b44a905", 0x90}], 0x1}}], 0x2, 0x20048000) 18:34:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000400)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 18:34:11 executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) 18:34:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 18:34:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x1081082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) ioctl$void(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 18:34:11 executing program 5: clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000a4f000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="380edc7732e35561be23f420fd475923b513c9f7b461e68a738ec0721dfb8dc15f916819a98f350b1b59e9e1552dd6139b19c36d2df563e0aaea119ed329000411a01776b8cc7ef3d3f8b255bdade03c95a8d7bc366e846d4054dd09a433223cd4f5ddaea387f3a688de3bbabba946ff0859a827425f62a85a161c7f54994009d59040314904120cc3a1b2c9d47e153eebea0630704aae42f8dbd8ab9aabe334ca32bc65785cc22b3cfc77c1e0fe9fdc2127ba5e028c75f9b8fb7c", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 18:34:11 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00') 18:34:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0xe02a1a47d4f3f38d) [ 93.564311] print_req_error: I/O error, dev loop6, sector 2304 [ 93.570605] Buffer I/O error on dev loop6, logical block 288, lost async page write 18:34:12 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:12 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0x2, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="53e8f7c8502332c6a200"], 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:12 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:12 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:12 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000002) fcntl$dupfd(r1, 0x0, r2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 18:34:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:14 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:14 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0x2, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="53e8f7c8502332c6a200"], 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954e72ba0322fc4318f819b1e2b1a17fb939a5db9c1a0a83b44abcffc3dd555d4dd30c0a4bd524c29d4d57bc906c012446c99a882162f3f72cce0702d7394288807fe2a308e01adc9bbf2a9cd78fabaa3c10640777e0813726a70df3323924035b235fd39ae4ab08d3f09bd231b38dca4389b098b0d3538dd3ef5bf068c1df8fbe00b0b2aa9ec3de5d3fba56594328a643c2799b8371adc6ecdfd9b9c4e52102eaa83b57da14645e442b4b7ad5f555d872dc50c330d145ca853b768b990dbaa18ab7f7e2e2d695e980f96d646e8c893ad912bc71237e9aa3ef2d8a4", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:14 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:14 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="b72471ad8fa807bc1b3e164c5554d5b2"], &(0x7f0000000080)='GPL\x005t\xea\xdca$\r\x01\xf4\x10\xfd\xf0\xcc*\xf3r!\x04\xe5\xc1@\xf8\xee\xe2\xab\xe2\xc7s\x04\xc1y\xe7\f\x9a\x7f\xd9\xb2\xfb\x03\xf0\xe6\xc3O\x1ai\xa6\xc0\xfd\x9f\x8b\x13\f\x13M\xaf\xf1\xd0\x81Z?F\xfbM-^a\'\xed\xfe\xcc\x9b_\x83\x99f\x93C\x8f\'g\xaeq\x92GFu[\xf5\xd5\xf0\x924(\xe1\xdc\x81\x86C\x7f\xb1\xc4\xfb\xb3e\xa4\x94\xfcYI\x03\xaf\x19\x9bp9-PG\xe5\xf8{v\xe0\xbb\xe4\xef[\x9b\xc3\v\xc6;4\x18\xbb\x83\xdc\x13q\t`\xf1X!\xf5\xb9\xdc\xf6 \xc4\x04\xbe\x14\x16DI\xa1<\x97\xecb\'>f\x8c\xd0\xb0e', 0x1, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:34:15 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:15 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:15 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0x2, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="53e8f7c8502332c6a200"], 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}, {0x0}], 0x2, 0x81808) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r4, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954e72ba0322fc4318f819b1e2b1a17fb939a5db9c1a0a83b44abcffc3dd555d4dd30c0a4bd524c29d4d57bc906c012446c99a882162f3f72cce0702d7394288807fe2a308e01adc9bbf2a9cd78fabaa3c10640777e0813726a70df3323924035b235fd39ae4ab08d3f09bd231b38dca4389b098b0d3538dd3ef5bf068c1df8fbe00b0b2aa9ec3de5d3fba56594328a643c2799b8371adc6ecdfd9b9c4e52102eaa83b57da14645e442b4b7ad5f555d872dc50c330d145ca853b768b990dbaa18ab7f7e2e2d695e980f96d646e8c893ad912bc71237e9aa3ef2d8a4", 0x261, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:34:15 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x123, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x4000040000002, 0x1, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @str='ife\x00'}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 18:34:15 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:34:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$getsig(0x4202, 0x0, 0xef, &(0x7f0000000180)) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, 0x0, 0x0, 0x0) 18:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 18:34:15 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) [ 97.259408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) [ 97.303443] audit: type=1400 audit(1572978855.770:41): avc: denied { create } for pid=7252 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:34:15 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 18:34:15 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 97.346040] audit: type=1400 audit(1572978855.800:42): avc: denied { write } for pid=7252 comm="syz-executor.2" path="socket:[27794]" dev="sockfs" ino=27794 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:34:15 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x123, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x4000040000002, 0x1, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @str='ife\x00'}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 18:34:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$getsig(0x4202, 0x0, 0xef, &(0x7f0000000180)) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, 0x0, 0x0, 0x0) [ 97.443843] BUG: unable to handle kernel NULL pointer dereference at (null) [ 97.451850] IP: (null) [ 97.455205] PGD 91f83067 P4D 91f83067 PUD 9f627067 PMD 0 [ 97.460748] Oops: 0010 [#1] PREEMPT SMP KASAN [ 97.465792] Modules linked in: [ 97.468977] CPU: 0 PID: 7270 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 97.475883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.485216] task: ffff8880673b40c0 task.stack: ffff8880673b8000 [ 97.491249] RIP: 0010: (null) [ 97.496936] RSP: 0018:ffff8880673bfd48 EFLAGS: 00010246 [ 97.502278] RAX: dffffc0000000000 RBX: ffffffff88151060 RCX: ffffc90005e1d000 [ 97.509525] RDX: 1ffffffff102a223 RSI: 0000000000000000 RDI: ffff88809f44a800 [ 97.516774] RBP: ffff8880673bfd68 R08: 0000000000000001 R09: ffff8880673b4960 [ 97.524110] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809f44a800 [ 97.531355] R13: ffff88809f44a80e R14: 000000000000001c R15: 0000000000000002 [ 97.538605] FS: 00007feaa2da4700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 97.546993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.552860] CR2: 0000000000000000 CR3: 000000008b0c6000 CR4: 00000000001406f0 [ 97.560111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.568092] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.575336] Call Trace: [ 97.577904] inet_autobind+0xae/0x180 [ 97.581696] inet_dgram_connect+0x136/0x1e0 [ 97.586007] SYSC_connect+0x1f6/0x2d0 [ 97.589785] ? SYSC_bind+0x220/0x220 [ 97.593483] ? nsecs_to_jiffies+0x30/0x30 [ 97.597608] ? SyS_clock_gettime+0xf8/0x180 [ 97.601906] SyS_connect+0x24/0x30 [ 97.605422] ? SyS_accept+0x30/0x30 [ 97.609029] do_syscall_64+0x1e8/0x640 [ 97.612894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.617715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 97.622881] RIP: 0033:0x45a219 [ 97.626046] RSP: 002b:00007feaa2da3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 97.633731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 18:34:16 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) [ 97.640980] RDX: 000000000000001c RSI: 0000000020000200 RDI: 0000000000000003 [ 97.648229] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 97.655476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feaa2da46d4 [ 97.663247] R13: 00000000004c09aa R14: 00000000004d3358 R15: 00000000ffffffff [ 97.670500] Code: Bad RIP value. [ 97.673950] RIP: (null) RSP: ffff8880673bfd48 [ 97.679287] CR2: 0000000000000000 [ 97.688777] kobject: 'loop1' (ffff8880a4a511e0): kobject_uevent_env [ 97.695643] kobject: 'loop1' (ffff8880a4a511e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 97.708553] kobject: 'kvm' (ffff8880a72b89d0): kobject_uevent_env [ 97.715821] kobject: 'kvm' (ffff8880a72b89d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 97.720731] kobject: 'loop4' (ffff8880a4b06220): kobject_uevent_env [ 97.747248] kobject: 'loop4' (ffff8880a4b06220): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 97.759797] ---[ end trace ce96c2ded5835fb7 ]--- [ 97.765984] kobject: 'loop2' (ffff8880a4a79260): kobject_uevent_env [ 97.767022] Kernel panic - not syncing: Fatal exception [ 97.779147] Kernel Offset: disabled [ 97.782778] Rebooting in 86400 seconds..