syzkaller login: [ 63.862213][ T38] audit: type=1400 audit(1575038698.028:41): avc: denied { map } for pid=7937 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:1121' (ECDSA) to the list of known hosts. [ 65.608410][ T38] audit: type=1400 audit(1575038699.778:42): avc: denied { map } for pid=7948 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 14:44:59 fuzzer started 2019/11/29 14:45:00 dialing manager at 10.0.2.10:40921 2019/11/29 14:45:00 syscalls: 2533 2019/11/29 14:45:00 code coverage: enabled 2019/11/29 14:45:00 comparison tracing: enabled 2019/11/29 14:45:00 extra coverage: extra coverage is not supported by the kernel 2019/11/29 14:45:00 setuid sandbox: enabled 2019/11/29 14:45:00 namespace sandbox: enabled 2019/11/29 14:45:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 14:45:00 fault injection: enabled 2019/11/29 14:45:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 14:45:00 net packet injection: enabled 2019/11/29 14:45:00 net device setup: enabled 2019/11/29 14:45:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 14:45:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 14:45:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) clone(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 71.933149][ T38] audit: type=1400 audit(1575038706.098:43): avc: denied { map } for pid=7972 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=20517 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 14:45:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 72.121204][ T7973] IPVS: ftp: loaded support on port[0] = 21 [ 72.182451][ T7975] IPVS: ftp: loaded support on port[0] = 21 [ 72.201010][ T7973] chnl_net:caif_netlink_parms(): no params data found [ 72.231892][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.239233][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.248206][ T7973] device bridge_slave_0 entered promiscuous mode [ 72.257947][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.265669][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.273551][ T7973] device bridge_slave_1 entered promiscuous mode [ 72.293505][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.305919][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.327917][ T7973] team0: Port device team_slave_0 added [ 72.337033][ T7973] team0: Port device team_slave_1 added [ 72.416352][ T7973] device hsr_slave_0 entered promiscuous mode [ 72.454482][ T7973] device hsr_slave_1 entered promiscuous mode [ 72.571325][ T7975] chnl_net:caif_netlink_parms(): no params data found [ 72.579523][ T38] audit: type=1400 audit(1575038706.758:44): avc: denied { create } for pid=7973 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 72.604047][ T38] audit: type=1400 audit(1575038706.758:45): avc: denied { write } for pid=7973 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 72.604820][ T7973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.628485][ T38] audit: type=1400 audit(1575038706.758:46): avc: denied { read } for pid=7973 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 72.768801][ T7973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.868657][ T7973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.920322][ T7973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.983946][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.992037][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.999865][ T7975] device bridge_slave_0 entered promiscuous mode [ 73.009377][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.016666][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.024457][ T7975] device bridge_slave_1 entered promiscuous mode [ 73.041793][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.052481][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.059643][ T7973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.067272][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.074492][ T7973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.083755][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.104024][ T7975] team0: Port device team_slave_0 added [ 73.111356][ T7975] team0: Port device team_slave_1 added [ 73.176021][ T7975] device hsr_slave_0 entered promiscuous mode [ 73.254492][ T7975] device hsr_slave_1 entered promiscuous mode [ 73.314393][ T7975] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.324395][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.333514][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.363551][ T7975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.438011][ T7975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.496947][ T7975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.595770][ T7975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.668391][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.682194][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.689987][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.702589][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.715857][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.724252][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.732329][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739448][ T7979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.750541][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.759228][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.767801][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.775218][ T7979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.793006][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.801687][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.810866][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.819361][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.828034][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.836767][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.845347][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.858491][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.866857][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.880101][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.889045][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.900241][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.910355][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.924701][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.932608][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.944099][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.952818][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.960589][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.971009][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.979714][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.988152][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.995438][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.003326][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.015012][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.023638][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.032149][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.039452][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.050063][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.058669][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.070563][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.071308][ T38] audit: type=1400 audit(1575038708.238:47): avc: denied { associate } for pid=7973 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 74.087711][ T7975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.112674][ T7975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.125251][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.133759][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.142504][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.151023][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.159800][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.168429][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.177032][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.185008][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.193142][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.201090][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.215692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.220894][ T38] audit: type=1400 audit(1575038708.388:48): avc: denied { map } for pid=7983 comm="syz-executor.0" path=2F6D656D66643AB3202864656C6574656429 dev="tmpfs" ino=34456 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 74.223354][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:45:08 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r7 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) dup2(r9, r8) recvmmsg(r9, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pwritev(r9, &(0x7f0000000340)=[{&(0x7f0000000180), 0xfffffffffffffe00}], 0x1, 0x8180a) sendfile(r6, r7, 0x0, 0x20000102000007) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 74.261811][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 14:45:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 74.422356][ T38] audit: type=1400 audit(1575038708.588:49): avc: denied { open } for pid=7989 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 74.447598][ T38] audit: type=1400 audit(1575038708.588:50): avc: denied { kernel } for pid=7989 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 14:45:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 14:45:08 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r7 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) dup2(r9, r8) recvmmsg(r9, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pwritev(r9, &(0x7f0000000340)=[{&(0x7f0000000180), 0xfffffffffffffe00}], 0x1, 0x8180a) sendfile(r6, r7, 0x0, 0x20000102000007) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:45:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 14:45:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:08 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:08 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="614dc184f340", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @remote}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 14:45:08 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:08 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:08 executing program 0: ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x18}, 0x3c) 14:45:08 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:08 executing program 0: ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x18}, 0x3c) [ 74.774858][ T38] audit: type=1400 audit(1575038708.948:51): avc: denied { map_create } for pid=8032 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 14:45:08 executing program 0: ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x18}, 0x3c) 14:45:09 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:09 executing program 0: ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x18}, 0x3c) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x18}, 0x3c) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:45:09 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x3c) 14:45:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x3c) 14:45:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x3c) 14:45:09 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 14:45:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 14:45:09 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 75.264194][ C0] hrtimer: interrupt took 22393 ns 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x84f0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) socketpair$unix(0x1, 0x80000000001, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x187) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x80002, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:10 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:45:11 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:25 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x80002, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 14:46:25 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:25 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:25 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) [ 152.553572][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 152.610173][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 152.638073][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.645219][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.652541][ T8171] device bridge_slave_0 entered promiscuous mode [ 152.660778][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.668000][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.675548][ T8171] device bridge_slave_1 entered promiscuous mode [ 152.691182][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.701825][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.720048][ T8171] team0: Port device team_slave_0 added [ 152.727146][ T8171] team0: Port device team_slave_1 added [ 152.796134][ T8171] device hsr_slave_0 entered promiscuous mode [ 152.844488][ T8171] device hsr_slave_1 entered promiscuous mode [ 152.904294][ T8171] debugfs: Directory 'hsr0' with parent '/' already present! [ 152.937017][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.945258][ T8171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.953198][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.961041][ T8171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.008725][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.017833][ T7977] tipc: TX() has been purged, node left! [ 153.021275][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.035838][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.057804][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.076980][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.097343][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.182063][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.215220][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.222632][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.247302][ T8171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.259658][ T8171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.274474][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.283666][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.291587][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.302176][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.312116][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.321188][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.331894][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.342676][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.350992][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.371255][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.379792][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.389549][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:46:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x80002, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 14:46:27 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x80002, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 14:46:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002600)=@sco, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:27 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:27 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket(0x10, 0x80002, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) open(0x0, 0x0, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) socket(0x2, 0x0, 0xff) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) pivot_root(0x0, 0x0) 14:46:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}, {0x0}], 0x2}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:46:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 14:46:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/4, 0x4}], 0x1}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:46:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) bind$inet(r0, 0x0, 0x0) 14:47:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}, 0x8001}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000304, 0x0) 14:47:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x0) 14:47:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x0) 14:47:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x0) 14:47:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) 14:47:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) 14:47:19 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) 14:47:19 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:19 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) 14:47:20 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0), 0x4) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x4) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) socket$inet6_tcp(0xa, 0x1, 0x0) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x4) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x4) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x10010000000036) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 14:47:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 14:47:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x800448d2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x800448d2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x7, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x2}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x8043) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 14:47:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 365.284524][ T1115] INFO: task syz-executor.1:8432 blocked for more than 143 seconds. [ 365.293973][ T1115] Not tainted 5.4.0-syzkaller #0 [ 365.302165][ T1115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.312458][ T1115] syz-executor.1 D27784 8432 8171 0x00004004 [ 365.319938][ T1115] Call Trace: [ 365.323517][ T1115] __schedule+0x8e1/0x1f30 [ 365.328685][ T1115] ? __sched_text_start+0x8/0x8 [ 365.334240][ T1115] ? lock_downgrade+0x920/0x920 [ 365.339640][ T1115] ? rwlock_bug.part.0+0x90/0x90 [ 365.345143][ T1115] schedule+0xdc/0x2b0 [ 365.349381][ T1115] schedule_preempt_disabled+0x13/0x20 [ 365.355644][ T1115] __mutex_lock+0x7ab/0x13c0 [ 365.360812][ T1115] ? perf_event_ctx_lock_nested+0x296/0x4c0 [ 365.627423][ T1115] ? mutex_trylock+0x2f0/0x2f0 [ 365.634454][ T1115] ? find_held_lock+0x35/0x130 [ 365.639340][ T1115] ? perf_event_ctx_lock_nested+0x262/0x4c0 [ 365.645610][ T1115] ? lock_downgrade+0x920/0x920 [ 365.650698][ T1115] mutex_lock_nested+0x16/0x20 [ 365.656168][ T1115] ? mutex_lock_nested+0x16/0x20 [ 365.661216][ T1115] perf_event_ctx_lock_nested+0x296/0x4c0 [ 365.667410][ T1115] ? __perf_event_read+0xe10/0xe10 [ 365.672780][ T1115] perf_event_release_kernel+0x121/0xef0 [ 365.678917][ T1115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.685465][ T1115] ? __perf_event_exit_context+0x170/0x170 [ 365.691109][ T1115] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 365.697485][ T1115] perf_release+0x37/0x50 [ 365.702466][ T1115] __fput+0x2ff/0x890 [ 365.706585][ T1115] ? perf_event_release_kernel+0xef0/0xef0 [ 365.712358][ T1115] ____fput+0x16/0x20 [ 365.716469][ T1115] task_work_run+0x145/0x1c0 [ 365.721220][ T1115] exit_to_usermode_loop+0x316/0x380 [ 365.727130][ T1115] do_syscall_64+0x676/0x790 [ 365.731682][ T1115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.737661][ T1115] RIP: 0033:0x413d81 [ 365.741446][ T1115] Code: 89 44 24 10 e8 40 c1 04 00 48 8b 6c 24 18 48 83 c4 20 c3 48 8b 4c 24 30 48 89 0c 24 48 8b 4c 24 38 48 89 4c 24 08 48 89 44 24 <10> e8 99 0c 00 00 48 8b 44 24 40 eb b5 48 8b 44 24 40 eb ae 48 8b [ 365.761396][ T1115] RSP: 002b:00007ffd033b64d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 365.769878][ T1115] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413d81 [ 365.777990][ T1115] RDX: 0000000000000000 RSI: 0000000000000c65 RDI: 0000000000000005 [ 365.786842][ T1115] RBP: 000000000071c980 R08: 00000000e1114c65 R09: 00000000e1114c69 [ 365.794841][ T1115] R10: 00007ffd033b6600 R11: 0000000000000293 R12: 0000000000000001 [ 365.802991][ T1115] R13: 000000000071c980 R14: 0000000000721c98 R15: 00007ffd033b65e0 [ 365.811223][ T1115] [ 365.811223][ T1115] Showing all locks held in the system: [ 365.819192][ T1115] 1 lock held by khungtaskd/1115: [ 365.824283][ T1115] #0: ffffffff895a4080 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 365.833739][ T1115] 1 lock held by rsyslogd/7799: [ 365.838786][ T1115] 2 locks held by getty/7922: [ 365.843403][ T1115] #0: ffff88802955b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.852327][ T1115] #1: ffffc900026ea2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.861949][ T1115] 2 locks held by getty/7923: [ 365.866813][ T1115] #0: ffff88802134a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.876067][ T1115] #1: ffffc900026ee2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.885808][ T1115] 2 locks held by getty/7924: [ 365.890514][ T1115] #0: ffff88802aab0090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.899688][ T1115] #1: ffffc900040062e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.909315][ T1115] 2 locks held by getty/7925: [ 365.914053][ T1115] #0: ffff888029553090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.923142][ T1115] #1: ffffc900026f22e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.933332][ T1115] 2 locks held by getty/7926: [ 365.938201][ T1115] #0: ffff88802aaca090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.947553][ T1115] #1: ffffc900026fe2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.957962][ T1115] 2 locks held by getty/7927: [ 365.962834][ T1115] #0: ffff888029229090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.972142][ T1115] #1: ffffc9000400a2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 365.982166][ T1115] 2 locks held by getty/7928: [ 365.987095][ T1115] #0: ffff888029573090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 365.996522][ T1115] #1: ffffc900026da2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 366.006643][ T1115] 3 locks held by kworker/u16:2/7977: [ 366.012172][ T1115] #0: ffff88802c7e4d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x88b/0x1740 [ 366.022903][ T1115] #1: ffff88806e167dc0 (net_cleanup_work){+.+.}, at: process_one_work+0x8c1/0x1740 [ 366.032768][ T1115] #2: ffffffff8a087e08 (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0xaf0 [ 366.042125][ T1115] 1 lock held by syz-executor.1/8432: [ 366.047764][ T1115] #0: ffff8880245ae4a0 (&ctx->mutex){+.+.}, at: perf_event_ctx_lock_nested+0x296/0x4c0 [ 366.058115][ T1115] 5 locks held by syz-executor.1/8436: [ 366.063615][ T1115] [ 366.066575][ T1115] ============================================= [ 366.066575][ T1115] [ 366.075405][ T1115] NMI backtrace for cpu 0 [ 366.079731][ T1115] CPU: 0 PID: 1115 Comm: khungtaskd Not tainted 5.4.0-syzkaller #0 [ 366.085328][ T1115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 366.085328][ T1115] Call Trace: [ 366.085328][ T1115] dump_stack+0x197/0x210 [ 366.085328][ T1115] nmi_cpu_backtrace.cold+0x70/0xb2 [ 366.085328][ T1115] ? vprintk_func+0x86/0x189 [ 366.085328][ T1115] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 366.085328][ T1115] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 366.085328][ T1115] arch_trigger_cpumask_backtrace+0x14/0x20 [ 366.085328][ T1115] watchdog+0xb11/0x10c0 [ 366.085328][ T1115] kthread+0x361/0x430 [ 366.085328][ T1115] ? reset_hung_task_detector+0x30/0x30 [ 366.085328][ T1115] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 366.085328][ T1115] ret_from_fork+0x24/0x30 [ 366.157965][ T1115] Sending NMI from CPU 0 to CPUs 1-3: [ 366.164149][ C2] NMI backtrace for cpu 2 [ 366.164154][ C2] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 5.4.0-syzkaller #0 [ 366.164159][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 366.164162][ C2] RIP: 0010:native_write_msr+0x6/0x30 [ 366.164170][ C2] Code: d0 c3 0f 21 d8 c3 0f 21 f0 c3 0f 0b 0f 1f 84 00 00 00 00 00 0f 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 89 f9 89 f0 0f 30 <0f> 1f 44 00 00 c3 55 48 c1 e2 20 89 f6 48 89 e5 48 09 d6 31 d2 e8 [ 366.164173][ C2] RSP: 0018:ffff88802d409e88 EFLAGS: 00000082 [ 366.164178][ C2] RAX: 000000007e84316e RBX: 0000000000000000 RCX: 00000000000006e0 [ 366.164182][ C2] RDX: 00000000000000ad RSI: 000000007e84316e RDI: 00000000000006e0 [ 366.164185][ C2] RBP: ffff88802d409ea0 R08: ffff88802c4bc3c0 R09: ffff88802c4bcc50 [ 366.164189][ C2] R10: fffffbfff146dba0 R11: ffffffff8a36dd07 R12: ffff88802d4227c0 [ 366.164192][ C2] R13: 0000000000018588 R14: 0000000000000000 R15: 0000000000000000 [ 366.164196][ C2] FS: 0000000000000000(0000) GS:ffff88802d400000(0000) knlGS:0000000000000000 [ 366.164199][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.164202][ C2] CR2: ffffffffff600400 CR3: 0000000023023000 CR4: 00000000003406e0 [ 366.164206][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.164209][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.164211][ C2] Call Trace: [ 366.164213][ C2] [ 366.164215][ C2] ? lapic_next_deadline+0x4d/0x80 [ 366.164218][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.164221][ C2] clockevents_program_event+0x25c/0x370 [ 366.164223][ C2] tick_program_event+0xb4/0x130 [ 366.164225][ C2] hrtimer_interrupt+0x369/0x770 [ 366.164228][ C2] smp_apic_timer_interrupt+0x160/0x610 [ 366.164230][ C2] apic_timer_interrupt+0xf/0x20 [ 366.164232][ C2] [ 366.164235][ C2] RIP: 0010:native_safe_halt+0xe/0x10 [ 366.164242][ C2] Code: e8 14 f8 f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d f4 7d 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 7d 4e 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ae 78 a8 f9 e8 89 [ 366.164245][ C2] RSP: 0018:ffff88802c4cfd68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 366.164251][ C2] RAX: 1ffffffff12a668e RBX: ffff88802c4bc3c0 RCX: 0000000000000000 [ 366.164254][ C2] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff88802c4bcc54 [ 366.164258][ C2] RBP: ffff88802c4cfd98 R08: ffff88802c4bc3c0 R09: 0000000000000000 [ 366.164261][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 366.164265][ C2] R13: ffffffff8a36dd00 R14: 0000000000000000 R15: 0000000000000002 [ 366.164267][ C2] ? default_idle+0x4e/0x360 [ 366.164269][ C2] arch_cpu_idle+0xa/0x10 [ 366.164271][ C2] default_idle_call+0x84/0xb0 [ 366.164274][ C2] do_idle+0x3c8/0x6e0 [ 366.164276][ C2] ? arch_cpu_idle_exit+0x80/0x80 [ 366.164279][ C2] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 366.164281][ C2] ? complete+0x61/0x80 [ 366.164283][ C2] cpu_startup_entry+0x1b/0x20 [ 366.164285][ C2] start_secondary+0x2f4/0x410 [ 366.164288][ C2] ? set_cpu_sibling_map+0x2140/0x2140 [ 366.164290][ C2] secondary_startup_64+0xa4/0xb0 [ 366.164133][ C3] NMI backtrace for cpu 3 [ 366.164133][ C3] CPU: 3 PID: 8436 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 366.164133][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 366.164133][ C3] RIP: 0010:debug_check_no_locks_freed+0x0/0x290 [ 366.164133][ C3] Code: 84 d2 74 0c 48 c7 c7 d0 0e 37 8a e8 ca da 57 00 8b 05 f4 dd dc 08 85 c0 75 b0 e9 21 e8 00 00 e8 b6 da 57 00 eb 9a 0f 1f 40 00 <48> c7 c0 d4 0e 37 8a 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 [ 366.164133][ C3] RSP: 0018:ffff88802d509688 EFLAGS: 00000246 [ 366.164133][ C3] RAX: 0000000000000000 RBX: ffff888029b6c828 RCX: 0000000000000000 [ 366.164133][ C3] RDX: ffffffff8bd52520 RSI: 0000000000000038 RDI: ffff888029b6c828 [ 366.164133][ C3] RBP: ffff88802d5096a8 R08: 0000000000000000 R09: ffffed1005aa7045 [ 366.164133][ C3] R10: ffffed1005aa7044 R11: ffff88802d538223 R12: ffffffff88b366e0 [ 366.164133][ C3] R13: ffffffff8bd52520 R14: ffffffff8a16af00 R15: ffff888029b6c800 [ 366.164133][ C3] FS: 00007f420a474700(0000) GS:ffff88802d500000(0000) knlGS:0000000000000000 [ 366.164133][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.164133][ C3] CR2: ffffffffff600400 CR3: 000000002967a000 CR4: 00000000003406e0 [ 366.164133][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.164133][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.164133][ C3] Call Trace: [ 366.164133][ C3] [ 366.164133][ C3] ? __rwlock_init+0x1c/0x140 [ 366.164133][ C3] ___neigh_create+0x196/0x2560 [ 366.164133][ C3] ? mark_held_locks+0xf0/0xf0 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.164133][ C3] ? debug_smp_processor_id+0x33/0x18a [ 366.164133][ C3] ? rcu_read_lock_held_common+0xa0/0x130 [ 366.164133][ C3] __neigh_create+0x2f/0x40 [ 366.164133][ C3] ip6_finish_output2+0x94f/0x25c0 [ 366.164133][ C3] ? ip6_frag_next+0xb20/0xb20 [ 366.164133][ C3] ? lock_downgrade+0x920/0x920 [ 366.164133][ C3] ? rcu_read_lock_held+0x9c/0xb0 [ 366.164133][ C3] ? __kasan_check_read+0x11/0x20 [ 366.164133][ C3] __ip6_finish_output+0x444/0xaa0 [ 366.164133][ C3] ? __ip6_finish_output+0x444/0xaa0 [ 366.164133][ C3] ip6_finish_output+0x38/0x1f0 [ 366.164133][ C3] ip6_output+0x25e/0x880 [ 366.164133][ C3] ? ip6_finish_output+0x1f0/0x1f0 [ 366.164133][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 366.164133][ C3] ? __ip6_finish_output+0xaa0/0xaa0 [ 366.164133][ C3] ? rcu_read_lock_held_common+0x130/0x130 [ 366.164133][ C3] ndisc_send_skb+0xf1f/0x1490 [ 366.164133][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 366.164133][ C3] ? memcpy+0x46/0x50 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.164133][ C3] ndisc_send_rs+0x134/0x720 [ 366.164133][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 366.164133][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 366.164133][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 366.164133][ C3] call_timer_fn+0x1ac/0x780 [ 366.164133][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 366.164133][ C3] ? msleep_interruptible+0x150/0x150 [ 366.164133][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 366.164133][ C3] ? trace_hardirqs_on+0x67/0x240 [ 366.164133][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 366.164133][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 366.164133][ C3] run_timer_softirq+0x6c3/0x1790 [ 366.164133][ C3] ? add_timer+0x930/0x930 [ 366.164133][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 366.164133][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 366.164133][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 366.164133][ C3] __do_softirq+0x262/0x98c [ 366.164133][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 366.164133][ C3] irq_exit+0x19b/0x1e0 [ 366.164133][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 366.164133][ C3] apic_timer_interrupt+0xf/0x20 [ 366.164133][ C3] [ 366.164133][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 366.164133][ C3] Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 [ 366.164133][ C3] RSP: 0018:ffff888073fe78d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 366.164133][ C3] RAX: 1ffffffff12a668d RBX: ffff8880295c85c0 RCX: 0000000000000006 [ 366.164133][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8880295c8e54 [ 366.164133][ C3] RBP: ffff888073fe78e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 [ 366.164133][ C3] R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 [ 366.164133][ C3] R13: ffff88802c6c8800 R14: ffff8880225ff5c0 R15: 0000000000000001 [ 366.164133][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 366.164133][ C3] finish_task_switch+0x147/0x750 [ 366.164133][ C3] ? finish_task_switch+0x119/0x750 [ 366.164133][ C3] __schedule+0x8e9/0x1f30 [ 366.164133][ C3] ? __sched_text_start+0x8/0x8 [ 366.164133][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 366.164133][ C3] ? retint_kernel+0x2b/0x2b [ 366.164133][ C3] ? perf_duration_warn+0x40/0x40 [ 366.164133][ C3] ? preempt_schedule+0x4b/0x60 [ 366.164133][ C3] preempt_schedule_common+0x4f/0xe0 [ 366.164133][ C3] ? __perf_event_enable+0x930/0x930 [ 366.164133][ C3] preempt_schedule+0x4b/0x60 [ 366.164133][ C3] ___preempt_schedule+0x16/0x18 [ 366.164133][ C3] ? smp_call_function_single+0x40b/0x480 [ 366.164133][ C3] smp_call_function_single+0x410/0x480 [ 366.164133][ C3] ? perf_duration_warn+0x40/0x40 [ 366.164133][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 366.164133][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 366.164133][ C3] ? __perf_event_enable+0x930/0x930 [ 366.164133][ C3] task_function_call+0xe9/0x180 [ 366.164133][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 366.164133][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 366.164133][ C3] ? __perf_event_enable+0x930/0x930 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.164133][ C3] ? exclusive_event_installable+0x257/0x320 [ 366.164133][ C3] perf_install_in_context+0x308/0x5a0 [ 366.164133][ C3] ? list_add_event+0xed0/0xed0 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.164133][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.164133][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 366.164133][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 366.164133][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.164133][ C3] ? put_timespec64+0xda/0x140 [ 366.164133][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.164133][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.164133][ C3] ? do_syscall_64+0x26/0x790 [ 366.164133][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.164133][ C3] ? do_syscall_64+0x26/0x790 [ 366.164133][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 366.164133][ C3] do_syscall_64+0xfa/0x790 [ 366.164133][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.164133][ C3] RIP: 0033:0x45a759 [ 366.164133][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.164133][ C3] RSP: 002b:00007f420a473c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 366.164133][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 366.164133][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000040 [ 366.164133][ C3] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 366.164133][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f420a4746d4 [ 366.164133][ C3] R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff [ 366.158319][ C1] NMI backtrace for cpu 1 [ 366.158319][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-syzkaller #0 [ 366.158319][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 366.158319][ C1] RIP: 0010:native_write_msr+0x6/0x30 [ 366.158319][ C1] Code: d0 c3 0f 21 d8 c3 0f 21 f0 c3 0f 0b 0f 1f 84 00 00 00 00 00 0f 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 89 f9 89 f0 0f 30 <0f> 1f 44 00 00 c3 55 48 c1 e2 20 89 f6 48 89 e5 48 09 d6 31 d2 e8 [ 366.158319][ C1] RSP: 0018:ffff88802d309e88 EFLAGS: 00000082 [ 366.158319][ C1] RAX: 000000003e2388d8 RBX: 0000000000000000 RCX: 00000000000006e0 [ 366.158319][ C1] RDX: 00000000000000ad RSI: 000000003e2388d8 RDI: 00000000000006e0 [ 366.158319][ C1] RBP: ffff88802d309ea0 R08: ffff88802c4b8380 R09: ffff88802c4b8c10 [ 366.158319][ C1] R10: fffffbfff146dba0 R11: ffffffff8a36dd07 R12: ffff88802d3227c0 [ 366.158319][ C1] R13: 00000000000ec663 R14: 0000000000000000 R15: 0000000000000000 [ 366.158319][ C1] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 366.158319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.158319][ C1] CR2: 00007f6d1c489190 CR3: 0000000029d13000 CR4: 00000000003406e0 [ 366.158319][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.158319][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.158319][ C1] Call Trace: [ 366.158319][ C1] [ 366.158319][ C1] ? lapic_next_deadline+0x4d/0x80 [ 366.158319][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.158319][ C1] clockevents_program_event+0x25c/0x370 [ 366.158319][ C1] tick_program_event+0xb4/0x130 [ 366.158319][ C1] hrtimer_interrupt+0x369/0x770 [ 366.158319][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 366.158319][ C1] apic_timer_interrupt+0xf/0x20 [ 366.158319][ C1] [ 366.158319][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 366.158319][ C1] Code: e8 14 f8 f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d f4 7d 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 7d 4e 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ae 78 a8 f9 e8 89 [ 366.158319][ C1] RSP: 0018:ffff88802c4c7d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 366.158319][ C1] RAX: 1ffffffff12a668e RBX: ffff88802c4b8380 RCX: 0000000000000000 [ 366.158319][ C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff88802c4b8c14 [ 366.158319][ C1] RBP: ffff88802c4c7d98 R08: ffff88802c4b8380 R09: 0000000000000000 [ 366.158319][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 366.158319][ C1] R13: ffffffff8a36dd00 R14: 0000000000000000 R15: 0000000000000001 [ 366.158319][ C1] ? default_idle+0x4e/0x360 [ 366.158319][ C1] arch_cpu_idle+0xa/0x10 [ 366.158319][ C1] default_idle_call+0x84/0xb0 [ 366.158319][ C1] do_idle+0x3c8/0x6e0 [ 366.158319][ C1] ? arch_cpu_idle_exit+0x80/0x80 [ 366.158319][ C1] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 366.158319][ C1] ? complete+0x61/0x80 [ 366.158319][ C1] cpu_startup_entry+0x1b/0x20 [ 366.158319][ C1] start_secondary+0x2f4/0x410 [ 366.158319][ C1] ? set_cpu_sibling_map+0x2140/0x2140 [ 366.158319][ C1] secondary_startup_64+0xa4/0xb0 [ 367.405434][ T1115] Kernel panic - not syncing: hung_task: blocked tasks [ 367.414171][ T1115] CPU: 0 PID: 1115 Comm: khungtaskd Not tainted 5.4.0-syzkaller #0 [ 367.414171][ T1115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 367.414171][ T1115] Call Trace: [ 367.414171][ T1115] dump_stack+0x197/0x210 [ 367.414171][ T1115] panic+0x2e3/0x75c [ 367.764300][ T1115] ? add_taint.cold+0x16/0x16 [ 367.764300][ T1115] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 367.764300][ T1115] ? ___preempt_schedule+0x16/0x18 [ 367.764300][ T1115] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 367.764300][ T1115] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 367.764300][ T1115] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 367.764300][ T1115] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 367.764300][ T1115] watchdog+0xb22/0x10c0 [ 367.764300][ T1115] kthread+0x361/0x430 [ 367.764300][ T1115] ? reset_hung_task_detector+0x30/0x30 [ 367.764300][ T1115] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 367.764300][ T1115] ret_from_fork+0x24/0x30 [ 367.764300][ T1115] Kernel Offset: disabled [ 367.764300][ T1115] Rebooting in 86400 seconds..