[ 32.773316] kauditd_printk_skb: 9 callbacks suppressed [ 32.773324] audit: type=1800 audit(1556538192.713:33): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.799984] audit: type=1800 audit(1556538192.713:34): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.608825] random: sshd: uninitialized urandom read (32 bytes read) [ 38.059561] audit: type=1400 audit(1556538197.993:35): avc: denied { map } for pid=7065 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.110933] random: sshd: uninitialized urandom read (32 bytes read) [ 38.764892] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. [ 44.470118] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/29 11:43:24 fuzzer started [ 44.669247] audit: type=1400 audit(1556538204.603:36): avc: denied { map } for pid=7074 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.663539] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/29 11:43:27 dialing manager at 10.128.0.105:40727 2019/04/29 11:43:27 syscalls: 2434 2019/04/29 11:43:27 code coverage: enabled 2019/04/29 11:43:27 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/29 11:43:27 extra coverage: extra coverage is not supported by the kernel 2019/04/29 11:43:27 setuid sandbox: enabled 2019/04/29 11:43:27 namespace sandbox: enabled 2019/04/29 11:43:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/29 11:43:27 fault injection: enabled 2019/04/29 11:43:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/29 11:43:27 net packet injection: enabled 2019/04/29 11:43:27 net device setup: enabled [ 48.598294] random: crng init done 11:45:58 executing program 0: 11:45:58 executing program 5: 11:45:58 executing program 1: 11:45:58 executing program 2: 11:45:58 executing program 3: 11:45:58 executing program 4: [ 198.423032] audit: type=1400 audit(1556538358.363:37): avc: denied { map } for pid=7074 comm="syz-fuzzer" path="/root/syzkaller-shm733873215" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 198.465671] audit: type=1400 audit(1556538358.403:38): avc: denied { map } for pid=7090 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 198.513365] audit: type=1400 audit(1556538358.403:39): avc: denied { map } for pid=7091 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 198.601521] IPVS: ftp: loaded support on port[0] = 21 [ 198.897947] chnl_net:caif_netlink_parms(): no params data found [ 198.907282] IPVS: ftp: loaded support on port[0] = 21 [ 198.967687] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.974576] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.982030] device bridge_slave_0 entered promiscuous mode [ 198.994567] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.001107] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.008209] device bridge_slave_1 entered promiscuous mode [ 199.034282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.043691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.065243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.072724] IPVS: ftp: loaded support on port[0] = 21 [ 199.072812] team0: Port device team_slave_0 added [ 199.089197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.096440] team0: Port device team_slave_1 added [ 199.101911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.109412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.212361] device hsr_slave_0 entered promiscuous mode [ 199.250640] device hsr_slave_1 entered promiscuous mode [ 199.354026] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 199.369806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 199.384303] chnl_net:caif_netlink_parms(): no params data found [ 199.416012] IPVS: ftp: loaded support on port[0] = 21 [ 199.432739] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.439388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.446616] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.453351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.528565] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.535453] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.543404] device bridge_slave_0 entered promiscuous mode [ 199.552637] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.559162] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.567252] device bridge_slave_1 entered promiscuous mode [ 199.627023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.636359] chnl_net:caif_netlink_parms(): no params data found [ 199.662934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.690832] IPVS: ftp: loaded support on port[0] = 21 [ 199.708785] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.716634] team0: Port device team_slave_0 added [ 199.734680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.742576] team0: Port device team_slave_1 added [ 199.749959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.762374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.799632] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.806745] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.814562] device bridge_slave_0 entered promiscuous mode [ 199.843026] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.849981] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.857687] device bridge_slave_1 entered promiscuous mode [ 199.903627] device hsr_slave_0 entered promiscuous mode [ 199.951146] device hsr_slave_1 entered promiscuous mode [ 200.014292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 200.030302] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 200.037970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.065908] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.079342] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.101631] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 200.147060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 200.188840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.237407] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.261386] IPVS: ftp: loaded support on port[0] = 21 [ 200.276982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.319311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.327299] team0: Port device team_slave_0 added [ 200.360926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.368331] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.376423] team0: Port device team_slave_1 added [ 200.387015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.415394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.426034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 200.432443] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.461505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.481319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.488923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.500577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.511306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.613583] device hsr_slave_0 entered promiscuous mode [ 200.650455] device hsr_slave_1 entered promiscuous mode [ 200.690413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.699250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.707985] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.715773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.723506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.733704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.741939] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.749301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.773343] chnl_net:caif_netlink_parms(): no params data found [ 200.784594] chnl_net:caif_netlink_parms(): no params data found [ 200.802492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 200.816630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.833317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 200.841632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.872748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.885914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.919889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.931771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.941131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.963821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.982506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.037112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.059569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.076267] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.083634] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.091015] device bridge_slave_0 entered promiscuous mode [ 201.123844] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.131066] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.137582] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.145683] device bridge_slave_0 entered promiscuous mode [ 201.153011] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.159794] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.167401] device bridge_slave_1 entered promiscuous mode [ 201.175053] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.182707] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.189833] device bridge_slave_1 entered promiscuous mode [ 201.223164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 201.262803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.271140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.296971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.312829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.326515] chnl_net:caif_netlink_parms(): no params data found [ 201.356962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 201.372984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.385604] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.405365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.415134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.423954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.436451] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 201.446206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.470351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.479376] team0: Port device team_slave_0 added [ 201.488680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.514262] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.522953] team0: Port device team_slave_1 added [ 201.528947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.549424] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.558638] team0: Port device team_slave_0 added [ 201.564435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.586449] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.593695] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.601286] device bridge_slave_0 entered promiscuous mode [ 201.609015] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.616262] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.625909] device bridge_slave_1 entered promiscuous mode [ 201.646911] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.654936] team0: Port device team_slave_1 added [ 201.661689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.677126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.689354] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.698212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.707929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.744373] device hsr_slave_0 entered promiscuous mode [ 201.790607] device hsr_slave_1 entered promiscuous mode [ 201.841024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 201.851986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.859777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.871426] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 201.877616] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.890291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.898827] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.918173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 201.930867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.944120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.961075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.971636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.979343] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.985992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.994225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.002865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.012387] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.019097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.026951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.047762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.077322] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.087261] team0: Port device team_slave_0 added [ 202.093902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 11:46:02 executing program 0: syz_execute_func(&(0x7f0000000fc0)="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") [ 202.143516] device hsr_slave_0 entered promiscuous mode [ 202.190716] device hsr_slave_1 entered promiscuous mode [ 202.221283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 202.231854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.239297] team0: Port device team_slave_1 added [ 202.247086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.256385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.264061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 202.277838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.285767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.294212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.307390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.321035] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.344616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.355924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.364400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.412742] device hsr_slave_0 entered promiscuous mode [ 202.460774] device hsr_slave_1 entered promiscuous mode [ 202.500860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 202.508220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.516540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.524825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.533115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.541847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.554027] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.566438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 202.574955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.582339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.592239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 202.606646] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 202.614685] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.623449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.632144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.643107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 202.669364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.711303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.737382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.753165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.770571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.783948] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.796676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.809665] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 202.816658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.833597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.846681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.866263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.892257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.911745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.933416] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.952848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.963346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.987935] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 202.996900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.009844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.024247] 8021q: adding VLAN 0 to HW filter on device bond0 11:46:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000080)='p', 0x1, 0x44, 0x0, 0x0) [ 203.035583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.055635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.072889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:46:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400002100001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) close(r1) tkill(r2, 0x1000000000016) pipe(&(0x7f0000000000)) [ 203.087773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.103281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.115762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.141720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.149908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.158239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.165591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.173038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.192670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.208332] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.217403] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.224672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.233560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.245811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.256111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 203.274659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 203.284614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.293541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.302075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.309945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.320728] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.329831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.343898] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 203.352657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.363250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.371032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.378822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.387133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.395277] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.401728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.409635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.432260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 11:46:03 executing program 5: syz_execute_func(&(0x7f0000000a40)="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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7f, 0x6, 0x255f, 0x3, 0x0, 0x9, 0x100, 0x0, 0x3e, 0x9, 0x100000001, 0xfffffffffffffffc, 0x3ff, 0x6, 0x80, 0x6, 0xc0a, 0x4, 0x7, 0x100000000, 0x1, 0xfe4, 0x4, 0xf9, 0x9, 0x3, 0x3, 0x5, 0x200, 0xfff, 0x5, 0x200, 0x1, 0x8, 0x5, 0xd3, 0x0, 0x3, 0x7, @perf_bp={&(0x7f0000000040), 0xe}, 0x10400, 0x20, 0x0, 0x7, 0x400, 0x8, 0x20000000000100}, 0x0, 0x2, 0xffffffffffffffff, 0x1) [ 203.446070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.455283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.471885] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.478316] bridge0: port 2(bridge_slave_1) entered forwarding state 11:46:03 executing program 5: syz_execute_func(&(0x7f0000000280)="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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) [ 203.502961] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.509954] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.534175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.537521] mmap: syz-executor.5 (7155) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 203.552581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.562452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 203.573079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.581186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.592713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.601673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.609600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.617742] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.624182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.631904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.641588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 11:46:03 executing program 5: syz_execute_func(&(0x7f0000000580)="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") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x4, 0x4}, 0x5}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x88, 0x1, 0x4}}, 0x14) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x3) [ 203.652723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.663699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.674416] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.688938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.701583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.711810] audit: type=1400 audit(1556538363.653:40): avc: denied { syslog } for pid=7158 comm="syz-executor.5" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 203.713100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.759610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.778395] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.789516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.798421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.811948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.820570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.827970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.836638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.844716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.859591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.868955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.877652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.886170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.898430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.906443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.916665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 203.927142] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.934320] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.943098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.951269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.960763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.970756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.978369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.986920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.996499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.004819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.012906] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.019281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.028190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.037097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.048574] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 204.054908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.064101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.072069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.081201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.088982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.099455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.110874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.119234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 204.127125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.135868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.144608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.153655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.161811] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.168561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.176236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.191043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.216198] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 204.243143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.258437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 11:46:04 executing program 1: syz_execute_func(&(0x7f0000000140)="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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) [ 204.281728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.302449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.323053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.336507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.348108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.357879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.368432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 11:46:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0xfffffffffffffff6, 0x0, 0x0, 0x100000be}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0xa}) [ 204.378752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.400793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.414742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.425211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.439335] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 204.449420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.458441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.466726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.476314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:46:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, 0x0) [ 204.488713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.498325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 204.507171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.528313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.558955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.576654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.587957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.615932] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 204.628627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.669352] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 204.686382] 8021q: adding VLAN 0 to HW filter on device batadv0 11:46:05 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x8082, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000013c0)={0x302}, 0x2) 11:46:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r1, &(0x7f00000000c0)={'system_u:object_r:smartcard_device_t:s0', 0x20, '/usr/sbin/ntpd'}, 0x4c) 11:46:05 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x5, 0x0, 0x0, @dev={[], 0x19}}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006640)=[{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006440)="754efa33", 0x4}], 0x1}], 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x4}, 0x4) sendmmsg(r1, &(0x7f0000001380), 0x3c2, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)='\n') 11:46:05 executing program 5: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = dup2(r0, r0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20}, 0x20) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0x1380f0d) read$FUSE(r1, &(0x7f00000003c0), 0x1000) 11:46:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$unix(r0, 0x0, 0x0) [ 205.920050] hrtimer: interrupt took 46551 ns [ 205.928801] llc_conn_state_process: llc_conn_service failed 11:46:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/16) 11:46:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f0000000140), 0x137) 11:46:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "c88cbda97f770723c7a160b4d76672db87536b95f4e4924e1189465a92d1ccaf"}) 11:46:06 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f00000000c0)) 11:46:06 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f00000000c0)) 11:46:06 executing program 1: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xb8, 0x0, 0x0) 11:46:06 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) close(r0) 11:46:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, 0x0) 11:46:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 11:46:06 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0080"]) 11:46:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0080000071"]) 11:46:06 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x12, r0, 0x0) 11:46:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f00000000c0)) 11:46:06 executing program 1: syz_open_dev$dri(0x0, 0x80, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:46:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) connect$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[], 0x19}}, 0x10) sendmmsg$alg(r1, &(0x7f0000006640)=[{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006440)='uN', 0x2}], 0x1}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x101, 0x80000001, 0xd11, 0x5}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) 11:46:06 executing program 4: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 11:46:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17c4f79f", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 11:46:06 executing program 0: syz_execute_func(&(0x7f0000000180)="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") [ 206.766524] audit: type=1400 audit(1556538366.703:41): avc: denied { map } for pid=7275 comm="syz-executor.2" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=15213 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 11:46:06 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4000) [ 206.822628] llc_conn_state_process: llc_conn_service failed 11:46:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f00000000c0)={0x2}) 11:46:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0x39) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b014", 0xc5}], 0x1}, 0x8000) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000)=0x398, 0x1ba) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe35ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade0c74eee1b31a420d7914c9d75db25855ae32798edc1b47e0f0f88429b2b60ae63", 0x2d5}], 0x1}, 0x0) 11:46:06 executing program 2: sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 11:46:06 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x5, 0x0, 0x0, @dev={[], 0x19}}, 0x10) sendmmsg$alg(r2, &(0x7f0000006640)=[{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006440)="754efa33", 0x4}], 0x1}], 0x1, 0x4001) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x4}, 0x4) sendmmsg(r1, &(0x7f0000001380), 0x3c2, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x101, 0x80000001, 0xd11, 0x5}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x81}, 0x0, &(0x7f0000000380)={0x8, 0x80, 0x0, 0x4, 0x6, 0xe6e, 0x8e13, 0x5}, &(0x7f00000003c0)={0x77359400}) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x4880c0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f00000000c0)=0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 11:46:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x77359400}}) [ 206.904513] audit: type=1400 audit(1556538366.733:42): avc: denied { create } for pid=7277 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 206.938831] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #2 11:46:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f00000000c0)) [ 206.988780] llc_conn_state_process: llc_conn_service failed [ 206.997674] audit: type=1400 audit(1556538366.943:43): avc: denied { ioctl } for pid=7307 comm="syz-executor.2" path="socket:[26911]" dev="sockfs" ino=26911 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 207.029832] bond0: Releasing backup interface bond_slave_1 [ 207.106664] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.131794] bond0: Releasing backup interface bond_slave_1 [ 207.178343] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:46:07 executing program 4: ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:46:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x1c0123, 0x2}) 11:46:07 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000000c0)) 11:46:07 executing program 1: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 207.614672] bond0: Error: Device is in use and cannot be enslaved [ 207.642879] bond0: Error: Device is in use and cannot be enslaved 11:46:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x2, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 11:46:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffeb8, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 11:46:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000540)="0adc1f12bc124b319bd070") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x3, [], @ptr}}) 11:46:07 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0xd1}) [ 207.727055] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 207.757867] llc_conn_state_process: llc_conn_service failed 11:46:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 11:46:07 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c6921f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:46:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x3001, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, [], 0x2}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, [], 0x8}, {0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x4}, {}, {0xffffffffffffffe1}]}}) r3 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:46:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000400)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="390000001300090069000000006000009e0080482900000046000107a2770014190002000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) [ 208.443414] audit: type=1400 audit(1556538368.383:44): avc: denied { name_bind } for pid=7380 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 11:46:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="59f3fabb6e72d1858cd1b5c087dc89fa89", 0x11) [ 208.490000] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 208.528618] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:46:08 executing program 5: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, r1, &(0x7f00000000c0)=0x209, 0x5a) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0acc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0xfe19}], 0x1}}], 0x2, 0x0, 0x0) [ 208.627997] audit: type=1400 audit(1556538368.423:45): avc: denied { node_bind } for pid=7380 comm="syz-executor.0" saddr=::1 src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 208.736931] audit: type=1400 audit(1556538368.423:46): avc: denied { name_connect } for pid=7380 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 11:46:08 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80026101, &(0x7f0000000040)) 11:46:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000040)="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") 11:46:08 executing program 1: syz_execute_func(&(0x7f0000000500)="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") 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 5: syz_execute_func(&(0x7f0000000580)="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") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x4, 0x4}, 0x5}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x88, 0x1, 0x4}}, 0x14) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x3) 11:46:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f1a3c123f319bd070") sendto$inet(r0, 0x0, 0x0, 0x97cb06ebee444840, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="80", 0x1, 0x8001, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000001c0)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000540)="03", 0x1, 0x0, 0x0, 0x0) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000000)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0x7a) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) 11:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) [ 208.924530] warning: process `syz-executor.5' used the deprecated sysctl system call with 11:46:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) mkdir(&(0x7f00000002c0)='./bus\x00', 0x20) inotify_init1(0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, r1, &(0x7f00000000c0)=0x209, 0x5a) 11:46:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) 11:46:09 executing program 0: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 209.183093] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 11:46:09 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x10) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200200, 0x0) syz_execute_func(&(0x7f0000000440)="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") 11:46:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) 11:46:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:09 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 11:46:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 11:46:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="59f3fabb6e72d1858cd1b5c087dc89fa89854f94b037e206", 0x18) 11:46:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="dce2b805000000b9a40000000f01d90f01df6667640f070a72093e673e65673e3e0f38f190f56536670f01cb440f20c03501000000440f22c065660f30f20f30", 0x40}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r5, 0xae9a) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:46:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 11:46:09 executing program 1: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000000340)) r1 = syz_open_dev$usbmon(0x0, 0x101, 0x8a03) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280), 0x4) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0xe0b504b9e08c1204) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) syz_open_dev$audion(0x0, 0x0, 0x4200) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='bbr\x00', 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) fsetxattr$security_smack_entry(r2, &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)=']}(eth0#\x00', 0x9, 0x3) 11:46:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x2, 0x0, 0x0}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000080)}, 0x10) [ 210.034776] kvm: emulating exchange as write 11:46:10 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) recvfrom$llc(r0, 0x0, 0x2f1, 0xffffffffffffffff, 0x0, 0xfffffffffffffef6) 11:46:10 executing program 2: ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x801000008912, &(0x7f0000000040)="0a8100121be1f66c93d070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x40000000000013, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 11:46:10 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, [0x2400000018cf63, 0xe00000f, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000, 0xf]}, 0x3c) 11:46:10 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 11:46:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x53]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:46:10 executing program 2: ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) [ 210.649998] audit: type=1400 audit(1556538370.582:47): avc: denied { create } for pid=7521 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:46:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f1a3c123f319bd070") sendto$inet(r0, 0x0, 0x0, 0x97cb06ebee444840, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="80", 0x1, 0x8001, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:46:10 executing program 4: uselib(0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x200000000012, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x8000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f0000000380)=0x54) r2 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffffffffff02) fremovexattr(r2, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0xfffffffffffffe29) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000140)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0xffffffffffffffc7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0xffffffd9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) 11:46:10 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x20001) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0xffffff25) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005000, 0x0) 11:46:10 executing program 2: ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) [ 210.772891] audit: type=1400 audit(1556538370.612:48): avc: denied { write } for pid=7521 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 210.801979] *** Guest State *** [ 210.834785] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 210.855245] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 11:46:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:10 executing program 3: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x79) [ 210.885315] CR3 = 0x00000000fffbc000 [ 210.904095] audit: type=1400 audit(1556538370.732:49): avc: denied { map } for pid=7539 comm="syz-executor.4" path="/dev/binder4" dev="devtmpfs" ino=15597 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 210.941859] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 210.969337] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 210.981971] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 11:46:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) [ 210.988859] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.017738] audit: type=1400 audit(1556538370.752:50): avc: denied { read } for pid=7539 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 211.030759] protocol 88fb is buggy, dev hsr_slave_0 [ 211.048787] protocol 88fb is buggy, dev hsr_slave_1 [ 211.057146] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 11:46:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)=@caif=@dgm={0x25, 0x8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 11:46:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)) 11:46:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x14, 0x3e556ff9, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2c, 0x3501}]}, 0xfffffffffffffc2a}}, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x4, 0x9, 0x565, 'queue1\x00'}) [ 211.078897] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.094284] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.136252] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.168424] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.217923] GDTR: limit=0x00000000, base=0x0000000000000000 [ 211.238394] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.260236] IDTR: limit=0x00000000, base=0x0000000000000000 [ 211.280168] protocol 88fb is buggy, dev hsr_slave_0 [ 211.283018] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 211.285374] protocol 88fb is buggy, dev hsr_slave_1 [ 211.293951] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 211.306234] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 211.318445] Interruptibility = 00000000 ActivityState = 00000000 [ 211.325771] *** Host State *** [ 211.329616] RIP = 0xffffffff811749aa RSP = 0xffff88807f08f998 [ 211.337684] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 211.349526] FSBase=00007f14da27b700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 211.357775] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 211.367061] CR0=0000000080050033 CR3=000000008d6b9000 CR4=00000000001426e0 [ 211.374698] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 [ 211.382364] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 211.388780] *** Control State *** [ 211.392863] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000c2 [ 211.400428] EntryControls=0000d1ff ExitControls=002fefff [ 211.406474] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 11:46:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 11:46:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 11:46:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) [ 211.414554] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 211.422107] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 211.429490] reason=80000021 qualification=0000000000000000 [ 211.439002] IDTVectoring: info=00000000 errcode=00000000 [ 211.450894] TSC Offset = 0xffffff8bfed28037 [ 211.461346] EPT pointer = 0x000000008b67b01e [ 211.510131] protocol 88fb is buggy, dev hsr_slave_0 [ 211.516573] protocol 88fb is buggy, dev hsr_slave_1 11:46:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 11:46:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1205531, &(0x7f0000000100)) 11:46:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000100)="1cffb5b598cd801b69e4f56962f5696200d9d9d017795b69f9f9680c00c46239011d000000008fe9589b26c7e4c753fbc46580c70fbde1fed4f47d82663ed107c4c2b90a23f21e657051c422b18cb6070000005151ccc4a27d181e1eea01eff265dc5f000f676d005b5b45de16af000f9a99030faee42c240f54635bde3ef3407104a1e1e0ef2640a58fe91893f0fe5ff6e30fad6736660fd2938c00e400ed1700edc4c1795d98751280590013376666450f17720d2e440fc7bf0d00008066660f3a0b0865") ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x8}) 11:46:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:11 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) inotify_init() perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)='/dev/dlm_plock\x00', 0xf, 0x2) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) renameat2(r0, &(0x7f0000000200)='./bus\x00', r0, &(0x7f0000000300)='./bus\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1}, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a40)={0x8, {{0xa, 0x4e20, 0x80000000, @loopback, 0x6}}, 0x0, 0x4, [{{0xa, 0x0, 0x7fff, @mcast1, 0x6}}, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x1000}}, {{0xa, 0x4e24, 0x80010000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}]}, 0x290) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r1, r2, &(0x7f00000000c0)=0x209, 0x5a) 11:46:11 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) mkdir(&(0x7f00000002c0)='./bus\x00', 0x20) r1 = inotify_init1(0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)='/dev/dlm_plock\x00', 0xf, 0x2) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) renameat2(r0, &(0x7f0000000200)='./bus\x00', r0, &(0x7f0000000300)='./bus\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1}, 0x20) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000100)=0xd5, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a40)={0x8, {{0xa, 0x4e20, 0x80000000, @loopback, 0x6}}, 0x0, 0x6, [{{0xa, 0x4e23, 0x7fff, @mcast1, 0x6}}, {{0xa, 0x4e23, 0x9, @remote, 0xfff}}, {{0xa, 0x4e23, 0x9, @remote, 0x5}}, {{0xa, 0x4e24, 0x4, @local, 0x2}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x1000}}, {{0xa, 0x4e24, 0x80010000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}]}, 0x390) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r2, r3, &(0x7f00000000c0)=0x209, 0x5a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) 11:46:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x15002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:46:11 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40000) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000440)) syz_execute_func(&(0x7f00000002c0)="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") 11:46:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) [ 212.062743] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 11:46:12 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00', 0x4c00}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 11:46:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) write$binfmt_misc(r0, 0x0, 0x1000000) 11:46:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 11:46:12 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:46:12 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) mkdir(&(0x7f00000002c0)='./bus\x00', 0x20) r1 = inotify_init1(0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)='/dev/dlm_plock\x00', 0xf, 0x2) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) renameat2(r0, &(0x7f0000000200)='./bus\x00', r0, &(0x7f0000000300)='./bus\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1}, 0x20) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000100)=0xd5, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a40)={0x8, {{0xa, 0x4e20, 0x80000000, @loopback, 0x6}}, 0x0, 0x6, [{{0xa, 0x4e23, 0x7fff, @mcast1, 0x6}}, {{0xa, 0x4e23, 0x9, @remote, 0xfff}}, {{0xa, 0x4e23, 0x9, @remote, 0x5}}, {{0xa, 0x4e24, 0x4, @local, 0x2}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x1000}}, {{0xa, 0x4e24, 0x80010000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}]}, 0x390) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r2, r3, &(0x7f00000000c0)=0x209, 0x5a) 11:46:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x81785501, &(0x7f0000000100)) 11:46:12 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, r1, &(0x7f00000000c0)=0x209, 0x5a) [ 212.394780] device team0 entered promiscuous mode [ 212.400470] device team_slave_0 entered promiscuous mode [ 212.407454] device team_slave_1 entered promiscuous mode [ 212.432331] 8021q: adding VLAN 0 to HW filter on device team0 11:46:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:12 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x805c6103, &(0x7f0000000040)) 11:46:12 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00', 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 212.580848] device team0 left promiscuous mode [ 212.585753] device team_slave_0 left promiscuous mode [ 212.613836] device team_slave_1 left promiscuous mode [ 212.647673] device team0 entered promiscuous mode [ 212.653326] device team_slave_0 entered promiscuous mode [ 212.665992] device team_slave_1 entered promiscuous mode [ 212.681902] 8021q: adding VLAN 0 to HW filter on device team0 11:46:12 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000000), 0x426e) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f0000001340)='./file0\x00', 0x10000000141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$FUSE_WRITE(r5, &(0x7f0000000080)={0x18}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 11:46:12 executing program 4: syz_execute_func(&(0x7f0000000140)="1cffb5b598cd801b69e4f56962f5696200d9d9d017795b69f9f9680c00c46239011d000000008fe9589b26c7e4c753fbc46580c70fbde1fed4f47d82663ed107c40209b8810b000000f21e41830a5ec422b18cb6070000005151ccc4a27d181e1eea01eff265dc5f000f676d005b5b45de16af000f9a99030f2ee42c66460fad7af454635bde3ef3407104a1e1e0ef2640a58fe91893f0fe5ff6e30f36b5adb5ad660fd2938c00e400ed1700edc4c1795d9875128059001337defa2e440fc7bf0d00008066660f3a0b0865") 11:46:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) [ 212.703843] device team0 entered promiscuous mode [ 212.708804] device team_slave_0 entered promiscuous mode [ 212.714610] device team_slave_1 entered promiscuous mode [ 212.721406] 8021q: adding VLAN 0 to HW filter on device team0 11:46:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="70eedcfdf8cc6b940889e1ae403e1fceae4d675e3bf26225eecaf5b3495d497d9ecd070000005e4962484650a158e2cc461b431f2df8186e9be28fafa912fddedffb60c445b7e525e42548353dfc8c44f32e167e67cfc8"], 0x57) 11:46:12 executing program 0: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0xe0b504b9e08c1204) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 11:46:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) gettid() 11:46:12 executing program 3: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 212.815202] device team0 left promiscuous mode [ 212.820010] device team_slave_0 left promiscuous mode [ 212.826963] device team_slave_1 left promiscuous mode [ 212.853285] device team0 entered promiscuous mode [ 212.858239] device team_slave_0 entered promiscuous mode 11:46:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x44}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket$inet6(0xa, 0x200000000003, 0xb) r3 = getpid() ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000440)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00l\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r4, 0x891d, &(0x7f00000004c0)={'netdevsim0\x00', @ifru_hwaddr=@random="a0725dd3a7b6"}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000640)="ac364e27e0e481f6574cacfa30c75bd9c3fac15f790fb658f27f28efd95ceb5f7d984e67a131fa73d9f278e8788d11f1919abc27c856c6f88a9ecb6840c3d2ffe1803d4e12d2d446047074573e205b279b07976505cc795b949e9ddfefc691fda68310eb85826b6029020a7c6523bf7f0013ac8d5872a903f482daf9a20dd41d9d358ab198e359e6f4087133e8ea1b90d0bcf7e59fb41ed45a07b4bf7282172abdfaf34561112f944cf3d326a309135e717b81fbc5e0f21175754a9f8aaf0c1fc5d3d74077447e5c12693f8f8265d26b1edfa820764f7d7a33400c042ac42ea33891c13a093eb421", 0xe8) ioctl$UI_DEV_DESTROY(r1, 0x5502) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x210000, 0x0) clock_gettime(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1, 0x0, 0x3, 0x0, 0x9, 0x3}, 0x20) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x8) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="af978515738b61f7aa26177394d6f5f579665de6b25b0916efa9a149d438b263b5ccd5deb7717a237a3bc01822f8a6934d3f2558f4669b2976f9498489e90aa70c35bff1b6cee6705f69ca00dd8ebb2653356cd93a1ffbe692a0a232c32d34fc473f01abf18d658cf265c43d55c6e4c321166c49a09431d4cfa07140e3345f89a5613cfff8d8fb3308c17feb39719d7953599281ec3ca2a3a52cfb2c0c3ad6dd91ae02129bacdc40c3bac4e91ba22162c12ab0671f5d5bc97f09848a2a74a9dd0ccbec87997cb03332ee1e18e537"], 0x0, 0x400) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x8, 0x6, 0x10000, 0x79, 0x8}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0xfff}, &(0x7f0000000380)=0x8) [ 212.898613] device team_slave_1 entered promiscuous mode [ 212.917411] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.918153] IPVS: length: 4096 != 8 [ 212.942011] IPVS: length: 4096 != 8 11:46:12 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00', 0x2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 11:46:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:13 executing program 1: 11:46:13 executing program 0: 11:46:13 executing program 3: [ 213.104245] device team0 left promiscuous mode [ 213.109126] device team_slave_0 left promiscuous mode [ 213.110794] protocol 88fb is buggy, dev hsr_slave_0 [ 213.120360] protocol 88fb is buggy, dev hsr_slave_1 11:46:13 executing program 0: [ 213.171323] device team_slave_1 left promiscuous mode 11:46:13 executing program 3: 11:46:13 executing program 1: syz_open_procfs$namespace(0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="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") 11:46:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:13 executing program 0: [ 213.290631] bond0: Releasing backup interface bond_slave_1 11:46:13 executing program 3: [ 213.350130] protocol 88fb is buggy, dev hsr_slave_0 [ 213.355325] protocol 88fb is buggy, dev hsr_slave_1 [ 213.397717] device team0 entered promiscuous mode [ 213.403209] device team_slave_0 entered promiscuous mode [ 213.445256] device team_slave_1 entered promiscuous mode [ 213.497026] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.723610] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:46:37 executing program 0: 11:46:37 executing program 3: 11:46:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:37 executing program 4: 11:46:37 executing program 5: 11:46:37 executing program 1: 11:46:37 executing program 5: 11:46:37 executing program 0: 11:46:37 executing program 3: 11:46:37 executing program 4: 11:46:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:37 executing program 0: 11:46:37 executing program 1: 11:46:37 executing program 4: 11:46:37 executing program 3: 11:46:37 executing program 5: 11:46:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:37 executing program 5: 11:46:37 executing program 0: 11:46:37 executing program 1: 11:46:37 executing program 4: 11:46:37 executing program 3: 11:46:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 4: 11:46:38 executing program 3: 11:46:38 executing program 5: 11:46:38 executing program 4: 11:46:38 executing program 1: 11:46:38 executing program 0: 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 5: 11:46:38 executing program 0: 11:46:38 executing program 1: 11:46:38 executing program 3: socket(0x1d, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 5: 11:46:38 executing program 4: 11:46:38 executing program 0: 11:46:38 executing program 1: 11:46:38 executing program 5: 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 4: [ 238.503580] can: request_module (can-proto-0) failed. 11:46:38 executing program 0: 11:46:38 executing program 1: [ 238.570679] can: request_module (can-proto-0) failed. 11:46:38 executing program 4: 11:46:38 executing program 3: 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 5: 11:46:38 executing program 0: 11:46:38 executing program 1: 11:46:38 executing program 4: 11:46:38 executing program 3: 11:46:38 executing program 5: 11:46:38 executing program 1: 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 0: 11:46:38 executing program 4: 11:46:38 executing program 1: 11:46:38 executing program 3: 11:46:38 executing program 5: 11:46:38 executing program 0: 11:46:38 executing program 4: 11:46:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:38 executing program 5: 11:46:38 executing program 0: 11:46:39 executing program 3: 11:46:39 executing program 4: 11:46:39 executing program 1: 11:46:39 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) unshare(0x600) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000180)={0x6, 0x0, "07424a0ea015311c7227c3b6cf6e8eca17c435a81eb8c1fff4fc3bb9394c465c", 0x0, 0x502f, 0x3, 0x9}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000200)="5688f506935199c18c7c3f184a4d9bfb2916df059f71b325b121ffdb1852cfed8cffe09a89d847120f4131c3a3be51e40cf71a7054142707985ac132e77e46bb0642b8f795fbed26f136184adc463a6eb54fe666874af528e69298ab0e6e81d413272f913acb7694f56f73e59a71e41bf23afd", 0x73) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0xa180, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000380)=0x225, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@int=0x4, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x88a8ffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x6c000000]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11:46:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x82) dup3(r1, r0, 0x0) 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x0, 0x0, 0x40000021]}) 11:46:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000240)=""/121) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000005f80)) 11:46:39 executing program 0: 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:39 executing program 5: 11:46:39 executing program 0: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000040)='nr0\x01:\xf2.\xa3\'>\xf8]\x81$?\xfa\xbf1UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x94\xa8>\xb1\xb1\xa2_&') 11:46:39 executing program 4: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86139) r0 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f00000000c0)="670dc3", 0x3) write(r0, &(0x7f0000000140)="601232f937e2103e7ac746319a0001", 0xf) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0) fsync(r0) 11:46:39 executing program 5: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86138) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0) close(r0) [ 239.411351] syz-executor.3 (8138) used greatest stack depth: 23760 bytes left 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40086436, &(0x7f0000000380)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) [ 239.482215] ¿1UM¿ï©¬xôD3A}: renamed from nr0 11:46:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 11:46:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002c00), 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003140)={'vcan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000047c0)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000005ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, &(0x7f0000005f40)={0x0, @remote, @remote}, &(0x7f0000005f80)=0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 11:46:39 executing program 3: 11:46:39 executing program 4: 11:46:39 executing program 1: 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) 11:46:39 executing program 3: syz_execute_func(&(0x7f00000005c0)="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") 11:46:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) socket$kcm(0xa, 0x2, 0x3a) 11:46:39 executing program 4: syz_execute_func(&(0x7f00000007c0)="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") 11:46:39 executing program 1: 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) 11:46:39 executing program 5: 11:46:39 executing program 3: 11:46:39 executing program 1: 11:46:39 executing program 5: 11:46:39 executing program 0: 11:46:39 executing program 3: 11:46:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)) 11:46:40 executing program 1: 11:46:40 executing program 5: 11:46:40 executing program 4: 11:46:40 executing program 0: 11:46:40 executing program 3: 11:46:40 executing program 1: 11:46:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, 0x0) 11:46:40 executing program 5: 11:46:40 executing program 5: 11:46:40 executing program 1: 11:46:40 executing program 0: 11:46:40 executing program 3: 11:46:40 executing program 4: 11:46:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, 0x0) 11:46:40 executing program 5: 11:46:40 executing program 1: 11:46:40 executing program 4: 11:46:40 executing program 0: 11:46:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, 0x0) 11:46:40 executing program 3: 11:46:40 executing program 5: 11:46:41 executing program 1: 11:46:41 executing program 4: 11:46:41 executing program 3: 11:46:41 executing program 5: 11:46:41 executing program 0: 11:46:41 executing program 3: 11:46:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) write$binfmt_misc(r0, 0x0, 0x0) 11:46:41 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000000), 0x426e) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 11:46:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{}, {0xf000}, {}, {0x0, 0x0, 0x0, 0x0, 0x539c}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x53]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:46:41 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89e0, &(0x7f0000000080)={@null, @netrom, 0x0, [@netrom, @netrom, @netrom, @default, @netrom, @null, @default, @null]}) 11:46:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) delete_module(&(0x7f00000015c0)='$\x00', 0xa00) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket(0xf, 0x4, 0x3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x98, r2, 0x104, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xc0280) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000001780), &(0x7f00000017c0)=0x4) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000180)={0x3, &(0x7f0000000100)=""/1, &(0x7f0000001480)=[{0x9, 0xb3, 0x800, &(0x7f0000001200)=""/179}, {0x7, 0xc1, 0x7, &(0x7f00000012c0)=""/193}, {0x6, 0x8b, 0x1, &(0x7f00000013c0)=""/139}]}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = fcntl$dupfd(r3, 0x406, r0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0x8, "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", 0xfffffffffffffd91}, 0x1006) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000001540)={0xc5cc000000000000, 0x0, 0x10003, 0xffffffffffffc97c}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001580)={0x458, r6}) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0xa000000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) 11:46:41 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xf) setresuid(0x0, 0xee01, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) r1 = geteuid() setresuid(0x0, r1, r1) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) sendto$unix(r0, &(0x7f0000000200)="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", 0x1000, 0x10, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) uselib(&(0x7f0000000000)='./file0\x00') 11:46:41 executing program 4: setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300), 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="13c9a708aac8e6ca72f8531f5b02bdc41b5d50de8cd54b1df32d3a5d35b12aa3bc4de597b71393cd1a147331de092bb0e13f6cd7e564240a3eb645e5ff7d437fcc39054cabaf6f0724360b1cfcd3cf3586505e391ba9ffad379e09c43d3f399fd8e49753eb169dcfff5f61bd48fa3f2b115040ae76689e66903625c20f3835d4f409727ec7d00fdd0b374d5726a4f26c1e1aa94ed1c72bf20f308ee65c9f1b92e0ecaa43eca1c0a790f1c852cfb67a09fea9f8e153caeb9c627e240f7566296526d252278973f7f7bbb71f52bfcced2943cce1503c4dea26614cce0b68c438624de5c565161439a629"], 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6ae52554, 0x400000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x880, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x8002, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r1, 0x7001) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @default}, [@rose, @netrom, @bcast, @remote, @rose, @null, @bcast, @bcast]}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000a80)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x200, 0x0) 11:46:41 executing program 2: 11:46:41 executing program 2: 11:46:41 executing program 0: 11:46:41 executing program 2: [ 241.623881] *** Guest State *** 11:46:41 executing program 1: [ 241.698486] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 11:46:41 executing program 2: [ 241.835725] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 241.881492] CR3 = 0x00000000fffbc000 [ 241.896858] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 241.914941] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 241.921338] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 241.931178] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 241.955135] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x000000000000f000 [ 241.978995] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 241.994832] XFS (loop4): Invalid superblock magic number [ 242.020620] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 242.058656] FS: sel=0x0000, attr=0x00001, limit=0x00000000, base=0x0000000000000000 [ 242.096218] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 242.109834] GDTR: limit=0x00000000, base=0x0000000000000000 [ 242.129120] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 242.156056] IDTR: limit=0x00000000, base=0x0000000000000000 [ 242.176664] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 242.186578] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 242.217035] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 242.224944] Interruptibility = 00000000 ActivityState = 00000000 [ 242.247032] *** Host State *** [ 242.257730] RIP = 0xffffffff811749aa RSP = 0xffff8880854df998 [ 242.270553] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 242.284815] FSBase=00007f5520c0d700 GSBase=ffff8880aee00000 TRBase=fffffe0000003000 [ 242.296232] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 11:46:42 executing program 0: [ 242.320990] CR0=0000000080050033 CR3=00000000a87e5000 CR4=00000000001426f0 [ 242.348168] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86201910 [ 242.366342] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 242.383193] *** Control State *** [ 242.395002] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000c2 [ 242.420830] EntryControls=0000d1ff ExitControls=002fefff [ 242.426637] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 242.436322] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 242.470300] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 242.478002] reason=80000021 qualification=0000000000000000 [ 242.494853] IDTVectoring: info=00000000 errcode=00000000 [ 242.514880] TSC Offset = 0xffffff7b79aaffce [ 242.519399] EPT pointer = 0x00000000917f901e 11:46:42 executing program 5: 11:46:42 executing program 1: 11:46:42 executing program 2: 11:46:42 executing program 4: 11:46:42 executing program 0: 11:46:42 executing program 4: 11:46:42 executing program 3: 11:46:42 executing program 4: 11:46:42 executing program 5: 11:46:42 executing program 2: 11:46:42 executing program 1: 11:46:42 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:43 executing program 1: 11:46:43 executing program 3: 11:46:43 executing program 4: 11:46:43 executing program 5: 11:46:43 executing program 2: 11:46:43 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x290200, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c001}, 0x40000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x4, 0x8, 0x8, 0x80, 0x7b8efde7]}, &(0x7f0000000140)=0xe) poll(&(0x7f0000000380)=[{r0, 0x2001}, {r2, 0x8200}, {r4, 0x8000}, {r0, 0x276}], 0x4, 0x0) fcntl$getown(r3, 0x9) ioctl(r2, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e21, 0x2f28, @rand_addr="e8548f451321b1b4a60a74f35082effb", 0x9}, {0xa, 0x4e20, 0x2, @remote, 0x1}, 0xe7d, [0x0, 0x1, 0x100, 0x81, 0x40, 0x2, 0x40, 0x80000000000000]}, 0x5c) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000040)) 11:46:43 executing program 4: 11:46:43 executing program 1: 11:46:43 executing program 5: 11:46:43 executing program 3: 11:46:43 executing program 2: 11:46:43 executing program 0: r0 = getpgid(0x0) prlimit64(r0, 0xf, &(0x7f0000000280)={0xf480000000000000, 0x6a4b}, &(0x7f00000002c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000300)=[0xee00]) r7 = gettid() r8 = getuid() r9 = getegid() r10 = request_key(&(0x7f00000005c0)='big_key\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='cgroup\x00', 0xfffffffffffffffb) r11 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r10, 0x5, 0xfff, r11) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="fcdb08e41b6f0029e3ac53c807d3b25c9cf5614575ede166644cc56a50a1d0bc507cb6e9868c84e13545a2c73950d6eda7040c6224fb1678233109de32d8f68c9a10c9815d7adb964306fcac4e45d6330ff79d7d253a0f203c22761da709ce40374e9ad30188724f96", 0x69}], 0x1, &(0x7f0000000340)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r1, r3, r3, r2, r2]}], 0x68, 0x44000}, 0x4000000) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000040)) 11:46:43 executing program 1: 11:46:43 executing program 4: 11:46:43 executing program 5: 11:46:43 executing program 3: 11:46:43 executing program 2: [ 243.382182] audit: type=1400 audit(1556538403.309:51): avc: denied { getrlimit } for pid=8381 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 11:46:43 executing program 4: 11:46:43 executing program 1: 11:46:43 executing program 5: 11:46:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x0, 0x2000, 0x308, &(0x7f0000000000/0x2000)=nil) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:43 executing program 2: 11:46:43 executing program 3: 11:46:43 executing program 4: 11:46:43 executing program 1: 11:46:43 executing program 5: 11:46:43 executing program 2: 11:46:43 executing program 3: 11:46:43 executing program 4: 11:46:43 executing program 1: 11:46:43 executing program 5: 11:46:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:43 executing program 2: 11:46:43 executing program 3: 11:46:43 executing program 4: 11:46:43 executing program 5: 11:46:43 executing program 1: 11:46:43 executing program 4: 11:46:43 executing program 2: 11:46:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f0000000140)=@access={'system_u:object_r:var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x3}, 0x59) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)) prctl$PR_SVE_GET_VL(0x33, 0xd885) 11:46:43 executing program 3: 11:46:43 executing program 1: 11:46:43 executing program 4: 11:46:43 executing program 5: 11:46:43 executing program 1: 11:46:44 executing program 2: 11:46:44 executing program 3: 11:46:44 executing program 5: 11:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0xffffffffffffffff, 0x80000000000000}) 11:46:44 executing program 4: 11:46:44 executing program 3: 11:46:44 executing program 2: 11:46:44 executing program 4: 11:46:44 executing program 1: 11:46:44 executing program 5: 11:46:44 executing program 2: 11:46:44 executing program 3: 11:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xa, 0x1000000000000005) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="4b9ce84b6435f86a8fe2202a3fcc0c45fb3014682f5aab15e2ce881059b54108965a01b36d9b9a9a82eafea8f54eafc65742947cf462c3aa65ac8396d49426bd7635867b13a1dbc1316f345d7125d43edbbff5b0ba024d44", 0x58, 0x1, &(0x7f00000001c0)={0x11, 0xf, r3, 0x1, 0x9}, 0x14) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400000, 0x0) 11:46:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) recvfrom(r0, &(0x7f0000000040)=""/133, 0x85, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000300)="edd008000000000019a65155921e11879a2d3d176c9cc2ad000012ac6a612e2ae6d0e5dafb34c31fa76fa9d500", 0x2d, 0x8000, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000)="dde20f100fc1c79a93edf7e95fd2a3ceb954bf7b28df4f7b", 0x18, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:46:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) 11:46:44 executing program 3: 11:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x595282, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x3f}}}, &(0x7f0000000340)=0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x11, 0x5, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x2}, @sadb_key={0x9, 0x0, 0x200, 0x0, "d32c570b5f1decfef4bd55884579207f0dd5d795ac66f223d1a00a1b0b14242348c21824913c02d50ccf0d7147ff6ba9caab997888e6afa1136d0d91f5442bbe"}]}, 0x60}}, 0x20008000) 11:46:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x700000000000000, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 11:46:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/72) 11:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 11:46:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) 11:46:44 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17c4", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 11:46:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x40, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x700000000000000, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 11:46:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xdc, "9b3738684c9896ab21d25776995448127a3b4508d5e2025521f330f55e45791ac79fc519ded71cf54941bf912baa315cf842342891d1ae0b65856dcf169e02da7af3382f915375a341ca2522c4d95d7b34888b829a57e08cdaa4738f0b678541e059f95e0af5dd5a7923291bdab547afa0a3b2b370f8271bbfd59c547f2e5f0b605082dcf8ae117e659839f46b6d3029cfba022e8e5c12c7624285642ebacca6db726fa4d753d71c31a955a5e169d82b4d3000883f9a7b44a5a79b57286426aa93aee19402f4c83bf72426b0a1738c77aeef994698b4281d5006e15b"}, &(0x7f00000000c0)=0xe4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @rand_addr=0x2f}}, 0x560a}, 0x90) 11:46:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17c4f79ffcb669ef51", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 11:46:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) 11:46:46 executing program 3: openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="c482f932f74a2ae92c3542980f05bf03105ba1c4a37bf0c57d41e2e922ebaabb90029d00004eba004e66c4029d8e123a9e02000000f2d2de5bc443d9682005f5491e2f16c2e54cbec54cbec5c4037d3912e55f46eef30f7e500067f047814f09ce73489f8fa97c81c8c4022d9e5b475dc423c96c4c3d000000fec20808a3bd4877f88a0383397fd3ff3a0065f20ffe7cd8d8c4c27992ac19020000006766f222440fec3f67ddeac4c2801d9c96c9e8e93626dbf22665e94612c8009a818194d8000f092ddd8f0b7210f2e303dd250000ffffffd2f0c4f81636b2aac42171afa26b970000c4e39978c104c041a8599e5974fb0707076564660f3807da0b0000e5c53e400f01c49780470000c461792ed5c1045ccc1a7d656100a0a008000000faf2420dc7c75ea5a9bb0000bedc4e61c9c4813de2a6030000003131360fee3a813bec") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 11:46:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x6, 0xffffffff, 0x1f, 0x3f}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:46 executing program 1: open(0x0, 0x0, 0x0) truncate(0x0, 0x0) r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080)={0x4d11}, 0x8) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) 11:46:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@multicast1, @remote}, &(0x7f0000000280)=0xfffffffffffffdf5) open_by_handle_at(r0, &(0x7f0000000440)={0x7f, 0x3, "e2bcf1d8eac1d7cd099bc112ec051045686182e16da704ffc7d01e2b7679debc8a5e246881623721e4bdf98561f981d5414ce9731326112605da7ba10a00de124ab9e0db6f46be7b676bd76f05e57085a7b4443d0392235e145c120369fec352b7b4cabeed3317e97cb3b7d25db95872f88876fd0d7188"}, 0x101000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$RTC_UIE_ON(r1, 0x7003) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="b8010000000f01c1b8010000000f01d966b8e1008ed066b833008ec86766f30f7e3c700f20e035040000000f22e0f2460f001848b8ccd40000000000000f23d00f21f835100000080f23f866470f3a4445f20db9de010000b800000000ba000000800f30", 0x64}], 0x1, 0x1, &(0x7f0000000240)=[@cr4={0x1, 0x4}], 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req={0x6, 0x7, 0x0, 0x8}, 0x10) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x7fffffff, 0x0, [], {0x0, @bt={0x800, 0x9, 0x1, 0x2, 0x1ff, 0x1, 0x3, 0x4, 0xffff, 0x1ff, 0x81, 0x7fff, 0x7, 0x400, 0x11, 0xc}}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)) 11:46:46 executing program 4: syz_execute_func(&(0x7f0000000300)="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") 11:46:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x40, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x700000000000000, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 11:46:46 executing program 2: syz_execute_func(&(0x7f0000000c80)="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") 11:46:46 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f0000000740)="c4e379614832074a2ae92cbd42980f053ef3aec4a37bf0c50141e2e922ebaabb3c00ba00262e67660f56383d637979a4ea70db000000000f383a9e02000000f2d2de8f698099005bc4813d73d4aff5491e2f16c2e54cbec54cbec5c481f96f5b005f46eec42102584243f30f7e500067f047814f09ce73489f8fa97c81c80f66420f5dc423c96cb83d000000fec2080826d8660fdf530909d3ff3a0065a8f25cf25c7cd8d8a1a12ad764d3cf53afc4c27992ac19020000006766f2ab440fec3fc46159db8e586c8722c4c2801d9c96c9e8e93626dbf22665e94612c8009a818194d8000f092ddd8f0b001036007b1c4e53ffd2fbddc45df81636b2aac42171afa26b970000c4e39978c104c041a8598374fb0707b3ddaccdcdcdf2473af600e5c5f897804700000000c1045ccc1a7d6575802d08000000faf242a70f5ea5a9bb0000bedc4e61c9d53131fbeac423514a6dfd00") 11:46:46 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xae6a0ea11b79aa, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17c4f79ffcb669ef51eb", 0xa, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) write$vnet(r0, 0x0, 0x0) 11:46:47 executing program 5: syz_execute_func(&(0x7f0000000b40)="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") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x4, 0x4}, 0x5}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x88, 0x1, 0x4}}, 0x14) 11:46:47 executing program 3: syz_execute_func(&(0x7f0000000500)="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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 11:46:47 executing program 2: syz_execute_func(&(0x7f0000000540)="c482f932f74a2ae92cb50f05bf03105ba1c4a37bf0c57d41e2e92164aabb90029d00dede004eba004e660f383d6379c4029d8e123a9e02000000f2d2de8f698099005bc443d9682005f5491e2f16c2e54cbec54cbec5c461816600c4e1e7594b0d46eec483994151fc16f30f7e500067f047814f09ce73489f8fa97c81c8c4022d9e5b47c482bbf7b3b3b2c785c423c96cb83d000000fec20808a3bd4877f88a0383393587d3d33a0065f20ffe7cd8d8c4c27992ac19020000006766f222440fec3f67ddeac4c2801d9c96c9e8e93626dbf22665e94612c8009ac422919ffcf2e303dd250000ffffffd2f0c4f81636b2aac42171afa26b970000c4e39978c104c041a8599ee974fb060707ddaccdcdcdf2c40b0000e5c53e400f01c49780470000c461792ed5c1045ccc1a7d656100a0a008000000faf242a7c4c17d70690c00bedc4e61c9c4813de2a6030000003131360fee3af3410f1b62c7") 11:46:47 executing program 4: syz_execute_func(&(0x7f0000000500)="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") 11:46:47 executing program 3: syz_execute_func(&(0x7f0000000580)="c4e379614832074a2ae92cb542980f05dad9c4a37bf0c57d41e2e922ebaabb907b009eba004eba004e660f383d63793a9e02000000f2d2de8f698099005bc443d9682005f5491e2f16c2e54cbec54cbec5c4618166005f46ee679bf30f7e500067f047814f09ce73489f8fa97c81c80f66420f5dc423c96cb83d000000fec20808a3bd4877f88a0383397fd3ff3a0065f20ffe7cd8d8c4c27992ac19020000006766f222440fec3f67ddeac4c2801d9c96c9e8e93626dbf22665e94612c8009a818194d8000f092ddd8f0b001036007b1cdd250000ffffffd2f0c4c40119f3c31636b2aac42171afa26b970000c4e39978c104c041a8598374fb0707b3ddaccdcdcdf2c40379630b0000e5c5f866460f63e9804700000000c1045ccc1a7d6575012d08000000faf242a70f5ea5a9bb0000bedc4e61c9d53131360fee3a183bec") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RLOPEN(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x88, 0x1, 0x4}}, 0x14) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x3) 11:46:47 executing program 1: syz_execute_func(&(0x7f0000000580)="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") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x4, 0x4}, 0x5}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x88, 0x1, 0x4}}, 0x14) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x3) 11:46:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xc00, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0xfa1e, 0x81, 0x8, 0x7, 0xd, 0x0, 0x200, 0x5, 0x6, 0x0, 0xa929, 0x3}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)) 11:46:49 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xfffffffffffffec2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xe00000000000000) 11:46:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0xffffff1f, 0x0, @ioapic}) 11:46:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x80000001, 0x40000) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000500)=0x2, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x2000) 11:46:49 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) tkill(r0, 0x16) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) 11:46:49 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000240), 0x40800, 0x7fffffff}]) 11:46:49 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xfffffffffffffec2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xe00000000000000) 11:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x800) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x40000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x5) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000040)) 11:46:49 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89e9, &(0x7f0000000080)={@null, @netrom, 0x0, [@netrom, @netrom, @netrom, @default, @netrom, @null, @default, @null]}) 11:46:49 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) [ 427.990891] INFO: task syz-executor.0:7094 blocked for more than 140 seconds. [ 427.998664] Not tainted 4.14.114 #4 [ 428.005555] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.013661] syz-executor.0 D24992 7094 1 0x00000004 [ 428.019513] Call Trace: [ 428.024951] __schedule+0x7be/0x1cf0 [ 428.029568] ? __mutex_lock+0x737/0x1470 [ 428.033742] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.038831] schedule+0x92/0x1c0 [ 428.044827] schedule_preempt_disabled+0x13/0x20 [ 428.049828] __mutex_lock+0x73c/0x1470 [ 428.053858] ? trace_hardirqs_on+0x10/0x10 [ 428.058496] ? lo_release+0x1e/0x1b0 [ 428.064916] ? save_trace+0x250/0x290 [ 428.068801] ? mutex_trylock+0x1c0/0x1c0 [ 428.073929] ? __blkdev_put+0x397/0x7f0 [ 428.078078] ? find_held_lock+0x35/0x130 [ 428.085268] ? __blkdev_put+0x397/0x7f0 [ 428.089277] ? loop_clr_fd+0xae0/0xae0 [ 428.093262] mutex_lock_nested+0x16/0x20 [ 428.097396] ? mutex_lock_nested+0x16/0x20 [ 428.104243] lo_release+0x1e/0x1b0 [ 428.107804] ? loop_clr_fd+0xae0/0xae0 [ 428.111768] __blkdev_put+0x436/0x7f0 [ 428.115644] ? bd_set_size+0xb0/0xb0 [ 428.119377] ? wait_for_completion+0x420/0x420 [ 428.126443] blkdev_put+0x88/0x510 [ 428.130000] ? fcntl_setlk+0xb90/0xb90 [ 428.133989] ? blkdev_put+0x510/0x510 [ 428.137815] blkdev_close+0x8b/0xb0 [ 428.143935] __fput+0x277/0x7a0 [ 428.147215] ____fput+0x16/0x20 [ 428.150653] task_work_run+0x119/0x190 [ 428.154573] exit_to_usermode_loop+0x1da/0x220 [ 428.159171] do_syscall_64+0x4a9/0x630 [ 428.163161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.168031] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.173281] RIP: 0033:0x412b40 [ 428.176486] RSP: 002b:00007ffd7842ead8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 428.184256] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000412b40 [ 428.191612] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.198902] RBP: 0000000000000090 R08: 0000000000000000 R09: 000000000000000a [ 428.206240] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.213620] R13: 00007ffd7842eb10 R14: 000000000003cda1 R15: 00007ffd7842eb20 [ 428.221026] INFO: task syz-executor.5:7096 blocked for more than 140 seconds. [ 428.228367] Not tainted 4.14.114 #4 [ 428.232596] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.240675] syz-executor.5 D24992 7096 1 0x00000004 [ 428.246438] Call Trace: [ 428.249049] __schedule+0x7be/0x1cf0 [ 428.252867] ? __mutex_lock+0x737/0x1470 [ 428.256948] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.262021] schedule+0x92/0x1c0 [ 428.265407] schedule_preempt_disabled+0x13/0x20 [ 428.270269] __mutex_lock+0x73c/0x1470 [ 428.274180] ? trace_hardirqs_on+0x10/0x10 [ 428.278418] ? lo_open+0x1d/0xb0 [ 428.281846] ? refcount_add+0x40/0x50 [ 428.285691] ? mutex_trylock+0x1c0/0x1c0 [ 428.289766] ? find_held_lock+0x35/0x130 [ 428.293912] ? disk_get_part+0x9c/0x140 [ 428.297918] ? lock_downgrade+0x6e0/0x6e0 [ 428.302137] ? loop_unregister_transfer+0x90/0x90 [ 428.307000] mutex_lock_nested+0x16/0x20 [ 428.311116] ? mutex_lock_nested+0x16/0x20 [ 428.315371] lo_open+0x1d/0xb0 [ 428.318568] __blkdev_get+0x2c9/0x1120 [ 428.322613] ? __blkdev_put+0x7f0/0x7f0 [ 428.326611] ? bd_acquire+0x178/0x2c0 [ 428.330499] ? find_held_lock+0x35/0x130 [ 428.334597] blkdev_get+0xa8/0x8e0 [ 428.338140] ? bd_may_claim+0xd0/0xd0 [ 428.341991] ? _raw_spin_unlock+0x2d/0x50 [ 428.346219] blkdev_open+0x1d1/0x260 [ 428.349946] ? security_file_open+0x8f/0x1a0 [ 428.354424] do_dentry_open+0x73e/0xeb0 [ 428.358418] ? bd_acquire+0x2c0/0x2c0 [ 428.362371] vfs_open+0x105/0x230 [ 428.365842] path_openat+0x8bd/0x3f70 [ 428.369656] ? trace_hardirqs_on+0x10/0x10 [ 428.374157] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.378861] ? find_held_lock+0x35/0x130 [ 428.383011] ? __alloc_fd+0x1d4/0x4a0 [ 428.386843] do_filp_open+0x18e/0x250 [ 428.390832] ? may_open_dev+0xe0/0xe0 [ 428.394672] ? _raw_spin_unlock+0x2d/0x50 [ 428.398917] ? __alloc_fd+0x1d4/0x4a0 [ 428.402813] do_sys_open+0x2c5/0x430 [ 428.406556] ? filp_open+0x70/0x70 [ 428.410201] SyS_open+0x2d/0x40 [ 428.413503] ? do_sys_open+0x430/0x430 [ 428.417412] do_syscall_64+0x1eb/0x630 [ 428.421411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.426282] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.431539] RIP: 0033:0x412d20 [ 428.434759] RSP: 002b:00007ffe2eab1a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.442532] RAX: ffffffffffffffda RBX: 000000000003ce2c RCX: 0000000000412d20 [ 428.449925] RDX: 00007ffe2eab1aaa RSI: 0000000000000002 RDI: 00007ffe2eab1aa0 [ 428.457288] RBP: 000000000000008c R08: 0000000000000000 R09: 000000000000000a [ 428.464615] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.471972] R13: 00007ffe2eab1a50 R14: 000000000003cda1 R15: 00007ffe2eab1a60 [ 428.479308] INFO: task syz-executor.4:7099 blocked for more than 140 seconds. [ 428.486790] Not tainted 4.14.114 #4 [ 428.491013] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.499001] syz-executor.4 D25168 7099 1 0x00000004 [ 428.504759] Call Trace: [ 428.507445] __schedule+0x7be/0x1cf0 [ 428.511224] ? __mutex_lock+0x737/0x1470 [ 428.515309] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.520489] schedule+0x92/0x1c0 [ 428.523903] schedule_preempt_disabled+0x13/0x20 [ 428.528894] __mutex_lock+0x73c/0x1470 [ 428.532962] ? trace_hardirqs_on+0x10/0x10 [ 428.537225] ? lo_open+0x1d/0xb0 [ 428.540642] ? refcount_add+0x40/0x50 [ 428.544468] ? mutex_trylock+0x1c0/0x1c0 [ 428.548539] ? find_held_lock+0x35/0x130 [ 428.552944] ? disk_get_part+0x9c/0x140 [ 428.557087] ? lock_downgrade+0x6e0/0x6e0 [ 428.561292] ? loop_unregister_transfer+0x90/0x90 [ 428.566161] mutex_lock_nested+0x16/0x20 [ 428.570295] ? mutex_lock_nested+0x16/0x20 [ 428.574559] lo_open+0x1d/0xb0 [ 428.577755] __blkdev_get+0x2c9/0x1120 [ 428.581745] ? __blkdev_put+0x7f0/0x7f0 [ 428.585744] ? bd_acquire+0x178/0x2c0 [ 428.589555] ? find_held_lock+0x35/0x130 [ 428.593741] blkdev_get+0xa8/0x8e0 [ 428.597353] ? bd_may_claim+0xd0/0xd0 [ 428.601234] ? _raw_spin_unlock+0x2d/0x50 [ 428.605406] blkdev_open+0x1d1/0x260 [ 428.609198] ? security_file_open+0x8f/0x1a0 [ 428.613715] do_dentry_open+0x73e/0xeb0 [ 428.617799] ? bd_acquire+0x2c0/0x2c0 [ 428.621938] vfs_open+0x105/0x230 [ 428.625437] path_openat+0x8bd/0x3f70 [ 428.629255] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.634127] ? __alloc_fd+0x1d4/0x4a0 [ 428.638040] do_filp_open+0x18e/0x250 [ 428.641905] ? may_open_dev+0xe0/0xe0 [ 428.645744] ? _raw_spin_unlock+0x2d/0x50 [ 428.649906] ? __alloc_fd+0x1d4/0x4a0 [ 428.653808] do_sys_open+0x2c5/0x430 [ 428.657563] ? filp_open+0x70/0x70 [ 428.661188] SyS_open+0x2d/0x40 [ 428.664490] ? do_sys_open+0x430/0x430 [ 428.668501] do_syscall_64+0x1eb/0x630 [ 428.672485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.677363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.682606] RIP: 0033:0x412d20 [ 428.685841] RSP: 002b:00007ffdc09e1b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 428.693753] RAX: ffffffffffffffda RBX: 000000000003ce16 RCX: 0000000000412d20 [ 428.701098] RDX: 00007ffdc09e1b9a RSI: 0000000000000002 RDI: 00007ffdc09e1b90 [ 428.708385] RBP: 0000000000000077 R08: 0000000000000000 R09: 000000000000000a [ 428.715751] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.723071] R13: 00007ffdc09e1b40 R14: 000000000003cd9f R15: 00007ffdc09e1b50 [ 428.730492] INFO: task syz-executor.1:7738 blocked for more than 140 seconds. [ 428.737793] Not tainted 4.14.114 #4 [ 428.741986] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.750102] syz-executor.1 D28592 7738 7098 0x00000004 [ 428.755799] Call Trace: [ 428.758393] __schedule+0x7be/0x1cf0 [ 428.762159] ? __mutex_lock+0x737/0x1470 [ 428.766247] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.771338] schedule+0x92/0x1c0 [ 428.774811] schedule_preempt_disabled+0x13/0x20 [ 428.779577] __mutex_lock+0x73c/0x1470 [ 428.783814] ? mempool_free_slab+0x1e/0x30 [ 428.788094] ? mempool_kmalloc+0x30/0x30 [ 428.792222] ? iterate_bdevs+0xc4/0x263 [ 428.796261] ? mutex_trylock+0x1c0/0x1c0 [ 428.800401] ? find_held_lock+0x35/0x130 [ 428.804572] ? iterate_bdevs+0xb2/0x263 [ 428.808573] ? lock_downgrade+0x6e0/0x6e0 [ 428.812801] ? lock_downgrade+0x6e0/0x6e0 [ 428.816980] mutex_lock_nested+0x16/0x20 [ 428.821107] ? mutex_lock_nested+0x16/0x20 [ 428.825373] iterate_bdevs+0xc4/0x263 [ 428.829179] ? fdatawait_one_bdev+0x70/0x70 [ 428.833586] sys_sync+0xa8/0x130 [ 428.836973] ? sync_filesystem+0x230/0x230 [ 428.841362] ? do_syscall_64+0x53/0x630 [ 428.845364] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.850451] ? sync_filesystem+0x230/0x230 [ 428.854709] do_syscall_64+0x1eb/0x630 [ 428.858610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.863530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.868748] RIP: 0033:0x200002d0 [ 428.872197] RSP: 002b:00007f1d022bbbd8 EFLAGS: 00000a83 ORIG_RAX: 00000000000000a2 [ 428.880108] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200002d0 [ 428.887401] RDX: 3f3171cfeca47408 RSI: 0000000000000000 RDI: 00007f1d02445471 [ 428.894734] RBP: 00000000000000f0 R08: 0000000000000005 R09: 0000000000000006 [ 428.902135] R10: 0000000000000007 R11: 0000000000000a83 R12: 000000000000000b [ 428.909410] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 428.916996] INFO: task syz-executor.1:7819 blocked for more than 140 seconds. [ 428.924322] Not tainted 4.14.114 #4 [ 428.928472] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.936592] syz-executor.1 D29056 7819 7098 0x00000004 [ 428.942303] Call Trace: [ 428.944900] __schedule+0x7be/0x1cf0 [ 428.948615] ? __mutex_lock+0x737/0x1470 [ 428.952756] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.957790] schedule+0x92/0x1c0 [ 428.961200] schedule_preempt_disabled+0x13/0x20 [ 428.966102] __mutex_lock+0x73c/0x1470 [ 428.970115] ? mempool_free_slab+0x1e/0x30 [ 428.974536] ? mempool_kmalloc+0x30/0x30 [ 428.978606] ? iterate_bdevs+0xc4/0x263 [ 428.982660] ? mutex_trylock+0x1c0/0x1c0 [ 428.986751] ? find_held_lock+0x35/0x130 [ 428.990962] ? iterate_bdevs+0xb2/0x263 [ 428.994968] ? lock_downgrade+0x6e0/0x6e0 [ 428.999128] ? lock_downgrade+0x6e0/0x6e0 [ 429.003558] mutex_lock_nested+0x16/0x20 [ 429.007657] ? mutex_lock_nested+0x16/0x20 [ 429.011951] iterate_bdevs+0xc4/0x263 [ 429.015867] ? fdatawait_one_bdev+0x70/0x70 [ 429.020275] sys_sync+0xa8/0x130 [ 429.023657] ? sync_filesystem+0x230/0x230 [ 429.027988] ? do_syscall_64+0x53/0x630 [ 429.032043] ? trace_hardirqs_on_caller+0x400/0x590 [ 429.037077] ? sync_filesystem+0x230/0x230 [ 429.041361] do_syscall_64+0x1eb/0x630 [ 429.045340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.050270] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.055479] RIP: 0033:0x200002d0 [ 429.058844] RSP: 002b:00007f1d022bbbd8 EFLAGS: 00000a83 ORIG_RAX: 00000000000000a2 [ 429.066739] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200002d0 [ 429.074238] RDX: 3f3171cfeca47408 RSI: 0000000000000000 RDI: 00007f1d0269e871 [ 429.081585] RBP: 00000000000000f0 R08: 0000000000000005 R09: 0000000000000006 [ 429.088899] R10: 0000000000000007 R11: 0000000000000a83 R12: 000000000000000b [ 429.096234] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 429.103576] INFO: task syz-executor.2:8632 blocked for more than 140 seconds. [ 429.111225] Not tainted 4.14.114 #4 [ 429.115389] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.123398] syz-executor.2 D26736 8632 7100 0x00000004 [ 429.129059] Call Trace: [ 429.131718] __schedule+0x7be/0x1cf0 [ 429.135451] ? __mutex_lock+0x737/0x1470 [ 429.139537] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.144614] schedule+0x92/0x1c0 [ 429.148012] schedule_preempt_disabled+0x13/0x20 [ 429.152900] __mutex_lock+0x73c/0x1470 [ 429.156814] ? lo_ioctl+0x87/0x1c70 [ 429.160512] ? lock_downgrade+0x620/0x6e0 [ 429.164689] ? mutex_trylock+0x1c0/0x1c0 [ 429.168793] ? avc_has_extended_perms+0x8ec/0xe40 [ 429.173804] ? preempt_count_sub+0x19/0x130 [ 429.178305] ? avc_ss_reset+0x110/0x110 [ 429.182326] ? finish_task_switch+0x14d/0x660 [ 429.186848] mutex_lock_nested+0x16/0x20 [ 429.191010] ? mutex_lock_nested+0x16/0x20 [ 429.195270] lo_ioctl+0x87/0x1c70 [ 429.198739] ? retint_kernel+0x2d/0x2d [ 429.202681] ? loop_probe+0x160/0x160 [ 429.206546] blkdev_ioctl+0x983/0x1880 [ 429.210514] ? blkpg_ioctl+0x980/0x980 [ 429.214574] ? retint_kernel+0x2d/0x2d [ 429.218559] ? trace_hardirqs_on_caller+0x400/0x590 [ 429.223661] block_ioctl+0xde/0x120 [ 429.227312] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.231895] do_vfs_ioctl+0x7b9/0x1070 [ 429.235809] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.240301] ? selinux_file_ioctl+0x103/0x560 [ 429.244818] ? selinux_file_ioctl+0x12d/0x560 [ 429.249324] ? security_file_ioctl+0x8f/0xc0 [ 429.253818] SyS_ioctl+0x8f/0xc0 [ 429.257212] ? do_vfs_ioctl+0x1070/0x1070 [ 429.261409] do_syscall_64+0x1eb/0x630 [ 429.265330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.270294] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.275504] RIP: 0033:0x458c17 [ 429.278706] RSP: 002b:00007f84a4c50a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.286591] RAX: ffffffffffffffda RBX: 00007f84a4c50b40 RCX: 0000000000458c17 [ 429.293915] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000006 [ 429.301250] RBP: 0000000000000001 R08: 00007f84a4c50b40 R09: 00007f84a4c50ae0 [ 429.308651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 429.316067] R13: 00000000004c79d9 R14: 00000000004dda18 R15: 00000000ffffffff [ 429.323478] INFO: task syz-executor.2:8646 blocked for more than 140 seconds. [ 429.330828] Not tainted 4.14.114 #4 [ 429.334990] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.343040] syz-executor.2 D27856 8646 7100 0x00000004 [ 429.348703] Call Trace: [ 429.351446] __schedule+0x7be/0x1cf0 [ 429.355184] ? __mutex_lock+0x737/0x1470 [ 429.359274] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.364374] schedule+0x92/0x1c0 [ 429.367763] schedule_preempt_disabled+0x13/0x20 [ 429.372666] __mutex_lock+0x73c/0x1470 [ 429.376592] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.381502] ? __blkdev_get+0x145/0x1120 [ 429.385595] ? mutex_trylock+0x1c0/0x1c0 [ 429.389781] ? check_preemption_disabled+0x3c/0x250 [ 429.394874] ? retint_kernel+0x2d/0x2d [ 429.398790] mutex_lock_nested+0x16/0x20 [ 429.402947] ? mutex_lock_nested+0x16/0x20 [ 429.407214] __blkdev_get+0x145/0x1120 [ 429.411207] ? __blkdev_put+0x7f0/0x7f0 [ 429.415199] ? bd_acquire+0x178/0x2c0 [ 429.419001] ? find_held_lock+0x35/0x130 [ 429.423113] blkdev_get+0xa8/0x8e0 [ 429.426682] ? bd_may_claim+0xd0/0xd0 [ 429.430686] ? _raw_spin_unlock+0x2d/0x50 [ 429.434857] blkdev_open+0x1d1/0x260 [ 429.438585] ? security_file_open+0x8f/0x1a0 [ 429.443109] do_dentry_open+0x73e/0xeb0 [ 429.447107] ? bd_acquire+0x2c0/0x2c0 [ 429.455018] vfs_open+0x105/0x230 [ 429.458503] path_openat+0x8bd/0x3f70 [ 429.462374] ? trace_hardirqs_on+0x10/0x10 [ 429.466791] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.471679] ? __alloc_fd+0x1d4/0x4a0 [ 429.475514] do_filp_open+0x18e/0x250 [ 429.479377] ? may_open_dev+0xe0/0xe0 [ 429.483357] ? _raw_spin_unlock+0x2d/0x50 [ 429.487715] ? __alloc_fd+0x1d4/0x4a0 [ 429.491637] ? getname_flags+0x138/0x580 [ 429.495947] do_sys_open+0x2c5/0x430 [ 429.499724] ? filp_open+0x70/0x70 [ 429.503439] SyS_open+0x2d/0x40 [ 429.506798] ? do_sys_open+0x430/0x430 [ 429.510872] do_syscall_64+0x1eb/0x630 [ 429.514816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.519823] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.525071] RIP: 0033:0x412d41 [ 429.528291] RSP: 002b:00007f84a4c0ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 429.536307] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000412d41 [ 429.543656] RDX: 00007f84a4c0eb0a RSI: 0000000000000002 RDI: 00007f84a4c0eb00 [ 429.551222] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 429.558597] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 429.565986] R13: 00000000004c79d9 R14: 00000000004dda18 R15: 00000000ffffffff [ 429.573943] INFO: task syz-executor.1:8629 blocked for more than 140 seconds. [ 429.581466] Not tainted 4.14.114 #4 [ 429.585727] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.593758] syz-executor.1 D27408 8629 7098 0x00000004 [ 429.599705] Call Trace: [ 429.602428] __schedule+0x7be/0x1cf0 [ 429.606544] ? __mutex_lock+0x737/0x1470 [ 429.610929] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.616091] schedule+0x92/0x1c0 [ 429.619446] schedule_preempt_disabled+0x13/0x20 [ 429.630169] __mutex_lock+0x73c/0x1470 [ 429.634165] ? blkdev_reread_part+0x1f/0x40 [ 429.643308] ? mutex_trylock+0x1c0/0x1c0 [ 429.647391] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 429.652576] ? __wake_up_common_lock+0xe3/0x160 [ 429.657321] mutex_lock_nested+0x16/0x20 [ 429.661548] ? mutex_lock_nested+0x16/0x20 [ 429.665830] blkdev_reread_part+0x1f/0x40 [ 429.670152] loop_reread_partitions+0x7c/0x90 [ 429.674677] loop_set_status+0xc28/0x1200 [ 429.678833] loop_set_status64+0xa6/0xf0 [ 429.682950] ? loop_set_status_old+0x2d0/0x2d0 [ 429.687599] lo_ioctl+0x5c1/0x1c70 [ 429.691321] ? trace_hardirqs_on_caller+0x400/0x590 [ 429.696370] ? retint_kernel+0x2d/0x2d [ 429.700354] ? loop_probe+0x160/0x160 [ 429.704185] blkdev_ioctl+0x983/0x1880 [ 429.708092] ? blkpg_ioctl+0x980/0x980 [ 429.712151] ? __might_sleep+0x93/0xb0 [ 429.716350] ? __fget+0x210/0x370 [ 429.719883] block_ioctl+0xde/0x120 [ 429.723636] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.728059] do_vfs_ioctl+0x7b9/0x1070 [ 429.732036] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.736821] ? lock_downgrade+0x6e0/0x6e0 [ 429.741038] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.745473] ? __fget+0x237/0x370 [ 429.749036] ? security_file_ioctl+0x8f/0xc0 [ 429.753543] SyS_ioctl+0x8f/0xc0 [ 429.756980] ? do_vfs_ioctl+0x1070/0x1070 [ 429.761207] do_syscall_64+0x1eb/0x630 [ 429.765136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.769989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.775311] RIP: 0033:0x458c17 [ 429.778672] RSP: 002b:00007f1d022bb9f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 429.786484] RAX: ffffffffffffffda RBX: 00007f1d022bc6d4 RCX: 0000000000458c17 [ 429.793941] RDX: 00007f1d022bbab0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 429.801442] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 429.808743] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000004 [ 429.816136] R13: 0000000000000004 R14: 0000000000000005 R15: 00000000ffffffff [ 429.823765] INFO: task syz-executor.3:8630 blocked for more than 140 seconds. [ 429.831148] Not tainted 4.14.114 #4 [ 429.835385] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.843625] syz-executor.3 D27744 8630 7101 0x00000004 [ 429.849376] Call Trace: [ 429.852037] __schedule+0x7be/0x1cf0 [ 429.855777] ? __mutex_lock+0x737/0x1470 [ 429.859860] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.865628] schedule+0x92/0x1c0 [ 429.869094] schedule_preempt_disabled+0x13/0x20 [ 429.873931] __mutex_lock+0x73c/0x1470 [ 429.877849] ? trace_hardirqs_on+0x10/0x10 [ 429.882175] ? lo_release+0x84/0x1b0 [ 429.886020] ? save_trace+0x251/0x290 [ 429.889916] ? mutex_trylock+0x1c0/0x1c0 [ 429.894121] ? __blkdev_put+0x397/0x7f0 [ 429.898303] ? find_held_lock+0x35/0x130 [ 429.902424] ? __blkdev_put+0x397/0x7f0 [ 429.906425] ? loop_clr_fd+0xae0/0xae0 [ 429.910471] mutex_lock_nested+0x16/0x20 [ 429.914557] ? mutex_lock_nested+0x16/0x20 [ 429.918794] lo_release+0x84/0x1b0 [ 429.922468] ? loop_clr_fd+0xae0/0xae0 [ 429.926472] __blkdev_put+0x436/0x7f0 [ 429.930508] ? bd_set_size+0xb0/0xb0 [ 429.934354] ? wait_for_completion+0x420/0x420 [ 429.938959] blkdev_put+0x88/0x510 [ 429.942588] ? filemap_write_and_wait+0x6f/0xb0 [ 429.947371] kill_block_super+0xbd/0xf0 [ 429.951468] deactivate_locked_super+0x79/0xe0 [ 429.956171] deactivate_super+0x85/0xa0 [ 429.960282] cleanup_mnt+0xb2/0x150 [ 429.964019] __cleanup_mnt+0x16/0x20 [ 429.967832] task_work_run+0x119/0x190 [ 429.971891] exit_to_usermode_loop+0x1da/0x220 [ 429.976541] do_syscall_64+0x4a9/0x630 [ 429.980525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.985455] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.990755] RIP: 0033:0x458da9 [ 429.993977] RSP: 002b:00007f697dce1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 430.001771] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000458da9 [ 430.009099] RDX: 0000000000000000 RSI: 0e00000000000000 RDI: 0000000020000280 [ 430.016495] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.023891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f697dce26d4 [ 430.031471] R13: 00000000004c7e35 R14: 00000000004de060 R15: 00000000ffffffff [ 430.038843] INFO: task syz-executor.3:8649 blocked for more than 140 seconds. [ 430.046284] Not tainted 4.14.114 #4 [ 430.051292] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.059295] syz-executor.3 D29184 8649 7101 0x00000004 [ 430.065062] Call Trace: [ 430.067722] __schedule+0x7be/0x1cf0 [ 430.072033] ? __mutex_lock+0x737/0x1470 [ 430.076147] ? pci_mmcfg_check_reserved+0x150/0x150 [ 430.081467] schedule+0x92/0x1c0 [ 430.084888] schedule_preempt_disabled+0x13/0x20 [ 430.089682] __mutex_lock+0x73c/0x1470 [ 430.093716] ? __mutex_unlock_slowpath+0x71/0x800 [ 430.098622] ? __blkdev_get+0x145/0x1120 [ 430.102797] ? mutex_trylock+0x1c0/0x1c0 [ 430.106931] ? exact_match+0xd/0x20 [ 430.110678] ? kobj_lookup+0x319/0x410 [ 430.114614] ? blkdev_ioctl+0x1880/0x1880 [ 430.118801] mutex_lock_nested+0x16/0x20 [ 430.122965] ? mutex_lock_nested+0x16/0x20 [ 430.127260] __blkdev_get+0x145/0x1120 [ 430.131258] ? __blkdev_put+0x7f0/0x7f0 [ 430.135277] ? bd_acquire+0x178/0x2c0 [ 430.139113] ? find_held_lock+0x35/0x130 [ 430.143306] blkdev_get+0xa8/0x8e0 [ 430.146901] ? bd_may_claim+0xd0/0xd0 [ 430.150793] ? _raw_spin_unlock+0x2d/0x50 [ 430.154996] blkdev_open+0x1d1/0x260 [ 430.158741] ? security_file_open+0x8f/0x1a0 [ 430.163264] do_dentry_open+0x73e/0xeb0 [ 430.167315] ? bd_acquire+0x2c0/0x2c0 [ 430.171237] vfs_open+0x105/0x230 [ 430.174771] path_openat+0x8bd/0x3f70 [ 430.178645] ? trace_hardirqs_on+0x10/0x10 [ 430.183002] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.187761] ? find_held_lock+0x35/0x130 [ 430.191978] ? __alloc_fd+0x1d4/0x4a0 [ 430.195904] do_filp_open+0x18e/0x250 [ 430.199900] ? may_open_dev+0xe0/0xe0 [ 430.203822] ? _raw_spin_unlock+0x2d/0x50 [ 430.208127] ? __alloc_fd+0x1d4/0x4a0 [ 430.212123] do_sys_open+0x2c5/0x430 [ 430.216867] ? filp_open+0x70/0x70 [ 430.220528] ? fput+0xd4/0x150 [ 430.223788] ? SyS_pwrite64+0xca/0x140 [ 430.227711] SyS_open+0x2d/0x40 [ 430.231091] ? do_sys_open+0x430/0x430 [ 430.235034] do_syscall_64+0x1eb/0x630 [ 430.240234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.245131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.250429] RIP: 0033:0x412d41 [ 430.253648] RSP: 002b:00007f697dc7ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 430.261467] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000412d41 [ 430.268790] RDX: 00007f697dc7eb0a RSI: 0000000000000002 RDI: 00007f697dc7eb00 [ 430.276202] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 430.283597] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 430.290975] R13: 00000000004c79d9 R14: 00000000004dda18 R15: 00000000ffffffff [ 430.298317] [ 430.298317] Showing all locks held in the system: [ 430.304741] 1 lock held by khungtaskd/1008: [ 430.309258] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 430.318437] 2 locks held by getty/7053: [ 430.322504] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.331346] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.340739] 2 locks held by getty/7054: [ 430.344771] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.353584] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.362965] 2 locks held by getty/7055: [ 430.366965] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.375760] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.385142] 2 locks held by getty/7056: [ 430.389239] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.398093] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.407478] 2 locks held by getty/7057: [ 430.411582] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.420377] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.429728] 2 locks held by getty/7058: [ 430.433813] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.442651] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.452156] 2 locks held by getty/7059: [ 430.456168] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.465009] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.474472] 2 locks held by syz-executor.0/7094: [ 430.479277] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 430.487888] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 430.496419] 2 locks held by syz-executor.5/7096: [ 430.501267] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.510316] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.518452] 2 locks held by syz-executor.4/7099: [ 430.523290] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.532096] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.540268] 1 lock held by syz-executor.1/7738: [ 430.544979] #0: (&bdev->bd_mutex){+.+.}, at: [] iterate_bdevs+0xc4/0x263 [ 430.553682] 1 lock held by syz-executor.1/7819: [ 430.558398] #0: (&bdev->bd_mutex){+.+.}, at: [] iterate_bdevs+0xc4/0x263 [ 430.567216] 1 lock held by syz-executor.2/8632: [ 430.571994] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.580466] 1 lock held by syz-executor.2/8646: [ 430.585180] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.594016] 2 locks held by syz-executor.1/8629: [ 430.598818] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.607250] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 430.616345] 3 locks held by syz-executor.3/8630: [ 430.621212] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 430.629771] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 430.638582] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x84/0x1b0 [ 430.647194] 1 lock held by syz-executor.3/8649: [ 430.651959] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.660746] 2 locks held by blkid/8637: [ 430.664790] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.673619] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.681806] 1 lock held by blkid/8641: [ 430.685730] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.694539] 2 locks held by blkid/8643: [ 430.698566] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.707469] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.715671] 1 lock held by blkid/8644: [ 430.719588] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.728383] [ 430.730064] ============================================= [ 430.730064] [ 430.737225] NMI backtrace for cpu 1 [ 430.740938] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 430.747640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.757464] Call Trace: [ 430.760069] dump_stack+0x138/0x19c [ 430.763715] nmi_cpu_backtrace.cold+0x57/0x94 [ 430.768495] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.774069] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 430.779495] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.784801] watchdog+0x5e7/0xb90 [ 430.788490] kthread+0x31c/0x430 [ 430.791912] ? hungtask_pm_notify+0x60/0x60 [ 430.796892] ? kthread_create_on_node+0xd0/0xd0 [ 430.801609] ret_from_fork+0x3a/0x50 [ 430.805610] Sending NMI from CPU 1 to CPUs 0: [ 430.810619] NMI backtrace for cpu 0 [ 430.810624] CPU: 0 PID: 78 Comm: kworker/u4:3 Not tainted 4.14.114 #4 [ 430.810629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.810632] Workqueue: bat_events batadv_nc_worker [ 430.810638] task: ffff8880a98b84c0 task.stack: ffff8880a98c0000 [ 430.810641] RIP: 0010:debug_lockdep_rcu_enabled.part.0+0xb/0x60 [ 430.810644] RSP: 0018:ffff8880a98c7c58 EFLAGS: 00000202 [ 430.810650] RAX: dffffc0000000000 RBX: ffff888092c1b8a0 RCX: 1ffffffff0f56424 [ 430.810654] RDX: 0000000000000004 RSI: ffffffff869d1e40 RDI: ffff8880aee2394c [ 430.810657] RBP: ffff8880a98c7c68 R08: 0000000000000000 R09: ffff8880a98b8db0 [ 430.810661] R10: ffff8880a98b8d90 R11: ffff8880a98b84c0 R12: 0000000000000000 [ 430.810664] R13: ffff88809c22f2c0 R14: ffff8880633d9400 R15: dffffc0000000000 [ 430.810668] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 430.810671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.810675] CR2: 0000000002236000 CR3: 00000000950cd000 CR4: 00000000001406f0 [ 430.810678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.810682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.810684] Call Trace: [ 430.810686] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 430.810689] batadv_nc_process_nc_paths.part.0+0x1e8/0x350 [ 430.810694] ? batadv_nc_to_purge_nc_path_decoding+0x130/0x130 [ 430.810696] batadv_nc_worker+0x54f/0x6d0 [ 430.810699] process_one_work+0x868/0x1610 [ 430.810702] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 430.810705] worker_thread+0x5d9/0x1050 [ 430.810707] kthread+0x31c/0x430 [ 430.810709] ? process_one_work+0x1610/0x1610 [ 430.810712] ? kthread_create_on_node+0xd0/0xd0 [ 430.810715] ret_from_fork+0x3a/0x50 [ 430.810716] Code: 00 00 00 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 57 ff ff ff 5d c3 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 <48> 89 e5 53 65 48 8b 1c 25 40 ee 01 00 48 8d bb 7c 08 00 00 48 [ 430.812085] Kernel panic - not syncing: hung_task: blocked tasks [ 431.011335] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 431.018118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.027470] Call Trace: [ 431.030309] dump_stack+0x138/0x19c [ 431.033939] panic+0x1f2/0x438 [ 431.037152] ? add_taint.cold+0x16/0x16 [ 431.041126] ? ___preempt_schedule+0x16/0x18 [ 431.045543] watchdog+0x5f8/0xb90 [ 431.049002] kthread+0x31c/0x430 [ 431.052374] ? hungtask_pm_notify+0x60/0x60 [ 431.056711] ? kthread_create_on_node+0xd0/0xd0 [ 431.061383] ret_from_fork+0x3a/0x50 [ 431.066445] Kernel Offset: disabled [ 431.070094] Rebooting in 86400 seconds..