Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.284825] audit: type=1800 audit(1569682305.138:33): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 38.309512] audit: type=1800 audit(1569682305.148:34): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.463569] audit: type=1400 audit(1569682307.318:35): avc: denied { map } for pid=7516 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. 2019/09/28 14:51:53 fuzzer started [ 46.968461] audit: type=1400 audit(1569682313.828:36): avc: denied { map } for pid=7526 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/28 14:51:55 dialing manager at 10.128.0.105:34323 2019/09/28 14:51:55 syscalls: 2489 2019/09/28 14:51:55 code coverage: enabled 2019/09/28 14:51:55 comparison tracing: enabled 2019/09/28 14:51:55 extra coverage: extra coverage is not supported by the kernel 2019/09/28 14:51:55 setuid sandbox: enabled 2019/09/28 14:51:55 namespace sandbox: enabled 2019/09/28 14:51:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/28 14:51:55 fault injection: enabled 2019/09/28 14:51:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/28 14:51:55 net packet injection: enabled 2019/09/28 14:51:55 net device setup: enabled 14:54:15 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10080, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@local, r1}, 0x14) r2 = accept(r0, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r3, 0x80000001, 0x3, 0x8001}, &(0x7f0000000340)=0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0xd4766f73aa91f51d, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x200}, &(0x7f0000000400)=0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000440)={0x73, @empty, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x7, 0x2a}, 0x2c) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0xe00, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000580)={0x2, @raw_data="8f0963bc69238b23d31994ab377c1a5097dce238675d33df84f9f78af3e9e11eb38d99ab82d07b4113ea89aaa2cbfc785ecff7c1b154f36f5b924ce5ec423d4598f4eee358fbb7d0fd6902261e63a12860e5c4f417354ca9b367518f1b71b65a285e92cc1cb356c50f91c4eb82adc02abf4725f947494aa66147b45aeeaed76a3133de83a0baefd45ff3874c28b7be524b892490dccfe722c5e8e241a11f157ec1776260a11efd942a2925afe4330387313ec6dead68d340aed633eb719e3eefb27fbac7873f7c74"}) getsockname$inet6(r2, &(0x7f0000000680)={0xa, 0x0, 0x0, @empty}, &(0x7f00000006c0)=0x1c) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000740)={r8, 0x7}) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)=""/160, 0xa0}], 0x1, &(0x7f0000000880)=""/234, 0xea}, 0x5}, {{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/87, 0x57}], 0x1, &(0x7f0000000ac0)=""/63, 0x3f}, 0x10000}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/237, 0xed}], 0x1, &(0x7f0000000cc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=""/253, 0xfd}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e80)=""/169, 0xa9}, {&(0x7f0000001f40)=""/156, 0x9c}, {&(0x7f0000002000)=""/73, 0x49}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4}, 0x10000}, {{&(0x7f00000030c0)=@can, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/142, 0x8e}, {&(0x7f0000003200)=""/111, 0x6f}, {&(0x7f0000003280)}], 0x3, &(0x7f0000003300)=""/23, 0x17}, 0x2}, {{&(0x7f0000003340)=@caif=@dgm, 0x80, &(0x7f00000034c0)=[{&(0x7f00000033c0)=""/246, 0xf6}], 0x1, &(0x7f0000003500)=""/135, 0x87}, 0x12}, {{&(0x7f00000035c0)=@caif, 0x80, &(0x7f0000003900)=[{&(0x7f0000003640)=""/140, 0x8c}, {&(0x7f0000003700)=""/196, 0xc4}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/171, 0xab}], 0x4, &(0x7f0000003940)=""/139, 0x8b}, 0x76}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003a00)=""/180, 0xb4}, {&(0x7f0000003ac0)=""/37, 0x25}, {&(0x7f0000003b00)=""/200, 0xc8}, {&(0x7f0000003c00)=""/126, 0x7e}, {&(0x7f0000003c80)=""/83, 0x53}], 0x5, &(0x7f0000003d80)}, 0xffffffff}, {{&(0x7f0000003dc0)=@generic, 0x80, &(0x7f0000005140)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/225, 0xe1}, {&(0x7f0000004f40)=""/198, 0xc6}, {&(0x7f0000005040)=""/50, 0x32}, {&(0x7f0000005080)=""/171, 0xab}], 0x5, &(0x7f00000051c0)=""/186, 0xba}, 0x7}], 0xa, 0x20000003, &(0x7f0000005500)) sendmsg$kcm(r9, &(0x7f0000006940)={&(0x7f0000005540)=@sco={0x1f, {0x81, 0xbb, 0x8, 0x1, 0x1, 0x1f}}, 0x80, &(0x7f00000068c0)=[{&(0x7f00000055c0)="97b93ee10aac07bb7d7104d279afe3383913470ab3cbfe63c2c1bc22b2aaef9a9dbdf536c07894d0257026d05401ef8cc92dd5137b36c8c1cd1a34e11c5e", 0x3e}, {&(0x7f0000005600)="2ca11359632ddf2c0c61d1722b68f71881e9103815b033727ac1c63f1459185be7922c059f66dd5f94db2b4b2ecda7765727fc9145b55575616748c82dbf9da908e0acca77558c50081b515bdc052b7082155e596f7ad29de9c22075290f3e45794d344ee63d11a373187ddb7064cfb29039b054e896e6c03b2dab5d85d62ebcc17a88345b777f7ba3fd71c3c6e40d9a8461c975a8b22a95ca72737f079d811759c718d86866beeb1b5f80334fbe2091714a97e07c13f5fba778e6d6efcecadfc61629da87a65cbb51db942ef70b817dac", 0xd1}, {&(0x7f0000005700)="bd91ed2809a44c9a3dcecaf62fb1ff6dea5e2286a9d50664d9ffd9352076ba36c87c6bfecb4816f27200b356d0cdb1132321bc0257f09308de0f22fac175dc6aea92e91e7617c91f96fbd1b4f53e42be0b459ea88e92a5cf81bc1a957b0700cff2e14927a31cace948ee96c020afd3a27ff93cde1f00aae556230906560511fb24aa6a632e92659b9f68ed69feebafcd7af76ce9c25dd9012fb4ff0fc02af92bd0b28607e37c0905eaf2cd135626c795ac", 0xb1}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="992c6bc79f11d9059a932a4b9d0993d0b5e20c9d936a9dc1ab74afdf11cd813c0b9aa997102b8c37a1143914bcae4ab0b2f45c53928e2ec506981522deea74f44686a3bf361d606ab70c0f90ddc9ab6a204310cbe88548420379c7516f5e96142aff9cb8a8e56f68a68a1fd86bbf79b724e9d4761497919fd334dcdb81e808307a3f6197cca281a9899af95ffb809225cdbb641189a97460779a4f64c9cf9b11e1e67a3ce4d10a4ef55c24c2fbe2abff10745df67bcc7dc39c82931c993672fccb9b8efb224aed0416598d47933d8fd6abf8cebb0f83687bac35e8203d09b2f88c5665f7684190", 0xe7}], 0x5}, 0x44000001) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000006980)='/dev/ubi_ctrl\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000069c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$P9_RLOCK(r11, &(0x7f0000006a00)={0x8, 0x35, 0x1}, 0x8) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000006a40)='/dev/full\x00', 0x101000, 0x0) getsockname(r12, &(0x7f0000006a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006b00)=0x80) r13 = syz_open_dev$usb(&(0x7f0000006b40)='/dev/bus/usb/00#/00#\x00', 0xdac, 0x4000) connect$vsock_stream(r13, &(0x7f0000006b80)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000006bc0)='/dev/ubi_ctrl\x00', 0x20880, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000006c00)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r14, 0x4008642b, &(0x7f0000006c40)={r15, 0x26}) [ 189.052031] audit: type=1400 audit(1569682455.908:37): avc: denied { map } for pid=7543 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14974 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 189.162447] IPVS: ftp: loaded support on port[0] = 21 14:54:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) r1 = socket(0x4, 0x800, 0x3) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x3, 0x9, 0xa69c, 0x7, 0x0, 0x15, 0x14, "0675c27c004471dd069ae59d3fba94e0b7e9a740", "7b8a821f48ee8beb3215a6304e052a26d02c3b04"}) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x82a02, 0x1) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000900)=0x8001, 0x4) ioctl$RTC_AIE_OFF(r2, 0x7002) getcwd(&(0x7f0000000940)=""/39, 0x27) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000a80)=0xe8) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b80)={r3, r4, r5}, 0xc) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000bc0)) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000c00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000c40)=@srh={0x3a, 0x6, 0x4, 0x3, 0x52, 0x18, 0xcb, [@mcast2, @remote, @loopback]}, 0x38) r7 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000c80)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/status\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000d40)={0x1, 0xff}, 0x2) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000d80)=0x0) syz_open_procfs$namespace(r9, &(0x7f0000000dc0)='ns/mnt\x00') r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000f40)={0x2, 0xe4, &(0x7f0000000e40)="3a17db0c6a3cdbea0bafccd08e9f6e51a1a66a1fff20b35ea382936a5d449edf0301545b9bcaa473c24d81c835e284ed6ba10dcfb9fac095ac30d88366d2776d1f42973ec1f32125a1191f2d07a305e2c5f8cdf2af9d3013869593beb199247b85e3056601c56143a4b1588939dff37acf071aa3b25211ff173dce76f6141d82723ebcddf4acb930deb437d8226ef48e2db0b198912d194d6208cf2557b52093d9263b8935108730b3d289500bc28462eb6b6dddee2d85bf9d2a15ebaa2dfab8438095b8c5bdc6d900bfb33f4780a75f4d0951dee5b20e5b2f8f14a28af8add977cd3483"}) r11 = socket$inet(0x2, 0x3, 0x0) bind$inet(r11, &(0x7f0000000f80)={0x2, 0x4e22}, 0x10) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000fc0)={{0x2, 0x4e22, @local}, {0x1}, 0x1a, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'eql\x00'}) r13 = openat$cgroup_ro(r6, &(0x7f0000001040)='memory.stat\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r13, 0x80287010, &(0x7f0000001080)) r14 = syz_open_dev$mice(&(0x7f00000010c0)='/dev/input/mice\x00', 0x0, 0x280) r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x200000, 0x4) renameat(r14, &(0x7f0000001100)='./file0\x00', r15, &(0x7f0000001180)='./file0\x00') [ 189.289297] chnl_net:caif_netlink_parms(): no params data found [ 189.381771] IPVS: ftp: loaded support on port[0] = 21 [ 189.393638] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.405422] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.416917] device bridge_slave_0 entered promiscuous mode 14:54:16 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2d4, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x67a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x76a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5757}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0xb}, 0x5db5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc21}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast2}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffff, @ipv4={[], [], @local}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6b5b, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0xffffffffffffffe0, 0x210000) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000480)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000005c0)=""/135) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x400000, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f00000006c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x63, 0x816, 0x6, [@null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer2\x00', 0x4842, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000780)) ioctl$VT_DISALLOCATE(r2, 0x5608) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x8) r8 = syz_open_dev$media(&(0x7f0000000800)='/dev/media#\x00', 0x3, 0x656959106cc722c6) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f0000000840)=""/51, &(0x7f0000000880)=0x33) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vcs\x00', 0x0, 0x0) write$uinput_user_dev(r9, &(0x7f0000000900)={'syz1\x00', {0x1, 0x2, 0x4, 0x7fff}, 0x16, [0x8, 0x6, 0x0, 0x79c000, 0x6, 0x1, 0x800, 0x1, 0x80000001, 0x6, 0x0, 0x400, 0x51, 0x3, 0x0, 0x7, 0x4, 0x22, 0x7ff, 0x5, 0x80, 0x10000, 0x5, 0xfff, 0x8001, 0x4, 0x7, 0xc31, 0xffff95dd, 0xd3, 0xfffffff9, 0x0, 0x1, 0x4, 0xffff8001, 0x0, 0x4, 0x7, 0x40, 0x7, 0x1, 0x1, 0x0, 0x3, 0x7, 0x1fc000, 0x6, 0x1, 0x0, 0x20, 0xa6d, 0x2, 0x2, 0x8ac7, 0x7814, 0x10f, 0x4, 0x4, 0xe6, 0x2, 0x5eb, 0x9, 0x727b, 0xf345], [0x747, 0x40, 0x1, 0x5, 0x5, 0x10000, 0x80000001, 0x7, 0x10000000, 0x2, 0xfffffffd, 0x473, 0x2, 0x7, 0x6eb3, 0x91, 0x8000, 0x80000000, 0x9, 0x401, 0x1ff, 0x97, 0x9, 0x1000, 0xfffffeff, 0x101, 0x2, 0x5c79a9b5, 0x8, 0x2, 0x2, 0x56f, 0x0, 0x7, 0x5, 0x1, 0x0, 0x4, 0x0, 0x2d, 0x8311, 0x0, 0x1, 0x3ff, 0xfffffff7, 0x3, 0x4, 0x1, 0x100, 0x5, 0xfffffffc, 0x4, 0xed82, 0x3, 0x6, 0xfff, 0x8000, 0x1, 0x752, 0x2, 0xa0, 0x1, 0x7, 0x8], [0x0, 0x100, 0x10000, 0x200, 0x4, 0x8, 0xe00, 0x800, 0x200, 0x1, 0x7f, 0x5, 0x8, 0x6, 0x9, 0x12ef, 0x6, 0x5, 0x6ff, 0x0, 0x0, 0x80, 0x800, 0x200, 0x8001, 0xc8, 0x803, 0x2, 0x200, 0x5, 0x80000000, 0x6, 0x6, 0x81, 0x4, 0x1c14, 0x4, 0xffffffc0, 0x9, 0x1, 0x2, 0x400, 0x3, 0x5, 0x40, 0x393, 0x0, 0x3, 0x3, 0x6, 0x59b, 0x4, 0x8bd9, 0xd1e1, 0x7, 0x80000001, 0x7, 0x4fce, 0x3, 0x1, 0x0, 0x2, 0x7f, 0xffffffc0], [0x4, 0x81, 0x7b9, 0xe3f, 0x200, 0x7, 0x2, 0x8, 0x80, 0xa07d, 0x8, 0x400, 0x7, 0x7, 0x3f, 0x6, 0x9, 0x3f, 0x8, 0x2, 0x40, 0x100, 0x7f, 0xcd28, 0xfffffffb, 0x86ad, 0x8, 0x6, 0x81, 0x3, 0x3, 0x4cce, 0x7fffffff, 0x1ff, 0x4, 0x3, 0xfffffff9, 0x10001, 0x1, 0x3f, 0x100, 0x4, 0x67, 0x7, 0x9, 0x4, 0x1000, 0x1, 0x3f, 0x6, 0x8, 0x7ff, 0x5, 0x3fc0000, 0x4, 0x401, 0x800, 0x9, 0x3, 0x3, 0xfffffffd, 0x7fff, 0x4, 0x8001]}, 0x45c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e40)={r2, &(0x7f0000000d80)="9543f931bc302e4a033cd0d8111fb1bd6b063f29af4cb2470e822ade75cb921405112244dbdf7127c9daaa64560a222ffa29e05bf5c145237090b954196a1ae377b9ee0e92d9a9f2dd", &(0x7f0000000e00)=""/57, 0xc}, 0x20) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401) syz_open_pts(r10, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000e80)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000f00)={0xf, 0x8, 0xfa00, {r11, 0xe}}, 0x10) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/zero\x00', 0x400000, 0x0) write$selinux_access(r12, &(0x7f0000000f80)={'system_u:object_r:systemd_systemctl_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x80000001}, 0x68) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000)='/dev/audio\x00', 0x28102, 0x0) setsockopt$bt_BT_POWER(r13, 0x112, 0x9, &(0x7f0000001040)=0x20, 0x1) [ 189.437398] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.443860] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.462662] device bridge_slave_1 entered promiscuous mode [ 189.538389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.556856] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.651688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.661740] team0: Port device team_slave_0 added [ 189.689610] IPVS: ftp: loaded support on port[0] = 21 14:54:16 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x40000}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x8001, &(0x7f0000ffd000/0x2000)=nil, 0x4) io_setup(0x3, &(0x7f0000000100)=0x0) io_destroy(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x2, 0x1, 0x2c2, 0x9, 0xa26, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x1, 0xb13a, 0x103, 0x1, 0x7, 0x1, 0x20, 0x10000, r3}, &(0x7f0000000240)=0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x80000001, {{0x2, 0x4e24, @loopback}}, 0x1, 0x8, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22}}, {{0x2, 0x4e24, @multicast1}}]}, 0x490) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x2a800, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000780)={0x7, 0x1b, 0x1}, 0x7) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000800), &(0x7f0000000840)=0x4) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000008c0)={0x2e, @broadcast, 0x4e20, 0x0, 'lblc\x00', 0x6, 0x1, 0x47}, 0x2c) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000940)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2, 0x13, &(0x7f0000ffd000/0x2000)=nil, 0x101}) bind$llc(r2, &(0x7f0000000980)={0x1a, 0x207, 0xff, 0x7f, 0x1f, 0x0, @dev={[], 0x1a}}, 0x10) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a40)=0x60) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000a80)={r9, 0x9, 0x8, "c369518ab2b305e22d5c2f142b1783ee7b8b4d1b072d3a9869e25ec27752dfb50add5f4534db0f90fd9d791d7c671d07b321182da73fe8ae95680e6a248b98907115559f5679c4a1ec4a0116a2d1f32f6129e07a28cf9190de020a4173f802b43265fe3282d3a21b06ef8849dde791cf1c0447abaf94651d9e523d8882f9ec849f3f42e99f5e94eebe8250"}) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000b80)={0xa, 0x8f, 0x2, 0x1000, r6}) r11 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000bc0)={0x9, 0x7fff, 0xfffffffffffffa6b, 0x5, 0x80, 0x3}) r12 = syz_open_dev$usb(&(0x7f0000000c00)='/dev/bus/usb/00#/00#\x00', 0x3, 0x90000) ioctl$DRM_IOCTL_SET_UNIQUE(r12, 0x40106410, &(0x7f0000000cc0)={0x4f, &(0x7f0000000c40)="96a617b931ebef663bef57badd88bc260b157f4e55b373fd160262ed1f184cba4a8a174292946af08f87fbd236e61d38f1f9430541ec41e80b364d0b08bdcd1af2aef60664369ecc04beb513951a19"}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000e00)=0xe8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000e40)={0x1f, r13, 0x1}, 0xc) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r14, &(0x7f0000002540)={&(0x7f0000000e80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000ec0)="70e12e915c4b629f8987cbb2b0f9ab52f13a970ef2b776fedd6d95197e11d0ee5cd8107af0f3ec0a4725cb74de6f6548890e8acb033bc065f72ecd66e9c57a1dab7c0191fe6951949290f8df8841aba00e3c42d34d96605894259825552f38631130e464bdbc16f4493a79e361b5f74b2d1f2c3d4b277d8d5c45e8cdffd393553f85a23e7b2c7b73e02adaefa4cc9660aaa0f3d7c57f2edd8038668e5bf94334617e44b8474a", 0xa6}, {&(0x7f0000000f80)="c429480f8372712594b18735977a4e29627d3059ef7d24424e8a45d7c99abfab90ffa4ce720df3c9ff368521919abae5e5947a5ce33b4c6c6409617ced7df09a3bbf5a104da3039c2b82f96c0eab050fd18e7cfb3e0afebd629cba5d005b2d323b338824132a06fce9a6cf7da64d78415b7afb13dada267bc0cb27ecf5c2b772d6704a4ce30f02712f7a2b81e07b35e72fb69a91e3b711f81e74a86a557848e8f11a5206290763bc0a10f05081ba4b4701b1b4cf5e6750e5966e87b9533c9a7a361c7f280fdb0d94a0bcf65ada700f679fe0e55d543c2488134dfdefc48ad26bd5c158d600fdef8136b87ed5a88e45a5f8", 0xf1}, {&(0x7f0000001080)="e454c8185037d218849e584e3c9d1c36bcd076dc54f9ab74adfb72967041199f38a0888026e476e4fca6b64fcbb114d770a8ae0f32b4c5342f83774767b70bba4dc163a73cfd4d88837fbad3319fde057425cee1d65598e977c0b3d6b873b1545353e5efdd148d30b91ab4c3dcec802bf2456f355c2ea07813", 0x79}, {&(0x7f0000001100)="4c463c448d2a76369fdddb3a24601a8ace3dd2e9453f11f544d3d7461a18ab9817dbe08f0a4b6075da9eec5d6972e5a55d77d38c62f8dac503e60cf52c6329e4e0a417266dcf7845", 0x48}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="2b4807398f8a5c486be47a021948d51c5f72dc06a4bdd836e7668498b3c3c28831ca2a244b2bb67b9b210897b25af1fcb886a1e2c9dd19926c080192f5754194c8602dc4c45eba0e068d66ecdbd51fc6c842981ebb44beda060b307fe891e8115120b2d08f25203b2e71bed02f9aaa922c39d3cfb4ae77396c5005ef45014b3e0557f2", 0x83}, {&(0x7f0000002240)="51ea120cd71f11780b16953d45a669a11cb4c079aeff4402d998ba16cbbb5436721c64d18d38bef5d897e31cf09a5a2a5cbe88a2218772cd34606966904d34764b1ee1fb55169484d694261786cb8fb2daf898d30c962a7a45a17a258e26c1e442ba3a874663183bd0bc2afb65cfa4b6319e19737f58b2aded122bef49525f62a79b33b9c8fc49e0b8b5d168c83982a2451352fb53e78414e932ac5d4c3abe5c4cf99842af000d3aade5a2b41c6eb386518b", 0xb2}, {&(0x7f0000002300)="b0c85823d00b42a7007856352c9bf8f27feec2ef0d20e11f63ba5793640f1f2971749f1a28995097258bb08ebd9ca5d6b5def311136ddf10de757d6848fad83b60504dda2e5dcc3406923e7d1c3ad5a1c21ccf3c503389a47647", 0x5a}, {&(0x7f0000002380)="d54950dbb2063c709d9e751799cf6f92418c952dabebe2ff0792b871544fc530db5e720a2bc24131d3e8f50821bac4a9fc7ff55b28c095a521c73788ef166a9ad1127e790ad5964f7f6bbc9b3c7ff248d0fb3caf8b86e39c65561c8a7de6700de27cf919bcc5c354369f4e77a7404bd603fd510b9032cafa21e824a6c4ee427ae1014ea086cd7009c6eecddc3629f542fb2d2e7c8a840c60178175bb0e520a3ddf88a9f1c6411cbb1dce410cdec5628196710dd767db27821698a952969d", 0xbe}], 0x9, &(0x7f0000002500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}, 0x4002) [ 189.697562] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.704781] team0: Port device team_slave_1 added [ 189.723563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.776921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.786386] chnl_net:caif_netlink_parms(): no params data found 14:54:16 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffff7fff, 0x10000) sendmsg$nfc_llcp(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x9, 0x0, "e330373baa2ee7e91a2ef0d60c5089c4325f2e50cd6e7bc492ebfffd94333745bdb3980482b2b982634edc1fb8a3ddb21363e00d82e7374ec80c847c03b829", 0x1c}, 0x60, &(0x7f0000000440)=[{&(0x7f00000000c0)="f96f1cc3038eb13257be017a47c326862b38559384d0237de3663c359e20a54ced5a6f46941ec7d60dbbe1c600245f9d329c0e09deda9fdc86bdb4a3966d466931012924a7446e08aa148fa7104ee645aca30cbfa9e491553b64e30f025c84ce39d74f2d2263b19e3486f47e41de613237fccc2b33cd3a9aa1e5a1e545d98f9e9b5c7cdfaa72bb1f587fb29ee03c6f4f80", 0x91}, {&(0x7f0000000180)="325d62cb832da7e9b20aef8abbc7d76dd53030435fd21329f6931088573d4587714b16d4c8fbe6ee61304b8d00ae0031990bb2fb6b2101274fcbcb80c1fb1c440a179dbc2df42b24fab764a1fa200a26e93ce0fd1e31b64e8f9ebe117ee8a8b42f069256007dddfb805c3e2df00667462d14ebb350e071058a16801696767853b85301125145a344b80b708619ed7419c6a0253ef90b618839354722eeaade86a6044e6256dc5c7f13ad97d168cf00dad0c7be79a8907cf3d98d91740047a8b57bcd209efae8a9196747ed859c89fbc75f309761d35d185fbcce3624267bdf2c068a17fa30c7a9f7e5fad4116eed8871", 0xf0}, {&(0x7f0000000280)="23d8c0f3596587b4a8cb69cbcb8f5ef0ab4db5bd37b4dd0b5a2e57c5ad2b1ee26b5fccc7d96a45162efc6ff05ce2236917332231c13b5d941c262d4aba74069320fba5b377c17ae6d65e1978657cf1886069b8b3aff3b2c9615a130d33011a2d86e3cad962cb1df3e6f8e175afd11e7dd3ecab68be77947bc891eba462ab5c0f657c3229bdb8167db043d4379e81d842d39d6a0f61dc97660adbc9d6a7a385c1", 0xa0}, {&(0x7f0000000340)="31a3424d3fa8ccd7a10c1d4852dfc15d5a3da8f1d924d4020dbf9328ec85b11fe9e0fc1765c1bfd8a5aa799074ac080d6b8079a81e8be41c0bac432c00785dfc62f1dc8ecd19bef21c809783ad7ac71093b780621a237f95c2744bce6125b5128eaa1c459807ad7df6664c450026e18c6489c6acf0e5a9f58d730ffe679bbfdd5ccd869a23b8fd3b176e91bd731ecf43dcc936ee144f064c9d12c094c19d9e28a0739f9d90cb19f3587e88afa134059c8af95150188132daf822d73710e0df1b5793eb62014afc8303409064e5b1b38ab38b6dbba7aeadd04f4ae00262dda500d45e5287", 0xe4}], 0x4, &(0x7f0000000480)={0x78, 0x107, 0x9, "208bed04a37e5f4405d0aa34d4adf49f925e2ca8172705f80de0be4042ef7102082c5aa6ef39c9d6fd8a49fe45701078abe9db6602580d7cb63dc6267fec038f1b6a3d3a4456c7271ed3bf6444c48d7913f596f9bfb5025c6fc3ff443f51bd00401bfd"}, 0x78, 0x10148}, 0x20080010) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) quotactl(0xfffffffffffff801, &(0x7f0000000540)='./file0\x00', r1, &(0x7f0000000600)="52aa09412f9d628369f6c4157420c041f902779f281e477be7a299976d123acae679a49dd88ef165481f866e") r2 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x3, 0x210000) bind$inet6(r2, &(0x7f0000000680)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, [], 0x24}, 0x8}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {r3, 0xffff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xb4c8}, @ib={0x1b, 0x9, 0x7, {"1c7837227e562e9444b1df629ad68bfb"}, 0xc, 0xff, 0x10000}}}, 0x118) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000880)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000008c0)={0x0, 0x0, {0x20, 0x6, 0x1009, 0x3, 0x2, 0x1, 0x0, 0x3}}) write$P9_RXATTRWALK(r0, &(0x7f0000000940)={0xf, 0x1f, 0x1, 0xffffffffffffffc0}, 0xf) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000980)={0x18, 0x1, 0x0, {0x7fff}}, 0x18) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x1f0dc) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000a00)=""/217, &(0x7f0000000b00)=0xd9) r5 = accept4(0xffffffffffffffff, &(0x7f0000000b40)=@tipc=@name, &(0x7f0000000bc0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000c00)={0x0, 0x80000001, 0x9, 0x101}, &(0x7f0000000c40)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000c80)={r6, 0x1000}, &(0x7f0000000cc0)=0x8) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/capi/capi20\x00', 0x2001, 0x0) ioctl$KDGETKEYCODE(r8, 0x4b4c, &(0x7f0000000d40)={0x4, 0x8001}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/audio\x00', 0x40, 0x0) sendto$isdn(r9, &(0x7f0000000dc0)={0x8, 0x4, "cc2fcf71d47faf2c80c0fb0899a42509928cb9c2538ab033173e1bfe295875c0b6bc32882871e4acfab0c941a6c01ff9d5c11ae4d60f522372f2552fc9ff133dfef84f17349c664441ca"}, 0x52, 0x4, &(0x7f0000000e40)={0x22, 0x80, 0x6, 0x4, 0x9}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)=@mpls_getroute={0xc8, 0x1a, 0x300, 0x70bd27, 0x25dfdbff, {0x1c, 0x80, 0x20, 0x7, 0xff, 0xb881104e06d2b843, 0xff, 0xb, 0x2000}, [@RTA_VIA={0x14, 0x12, {0x8380e8d6b4ba2308, "54214c00dd26b9d65b4b6b5e9d58"}}, @RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x1}, {0x44}, {0x565b}, {0x0, 0x0, 0x1}, {0x1000}, {0x40, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8}, {0x8}, {0x7fff, 0x0, 0x1}, {0xfffe0, 0x0, 0x1}, {0x1}, {0x9}, {0x5d9c, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7}, {0x3}, {0x2, 0x0, 0x1}, {0xbf, 0x0, 0x1}, {0x7ff}, {0x349, 0x0, 0x1}, {0x1}, {0x3}, {0xffff8, 0x0, 0x1}, {0x166}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x49, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x9, "37a345f0c1350e6654da64c00161"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40800}, 0x5) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001040)='/dev/btrfs-control\x00', 0x802400, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000001080)={r7, 0x42, "4880694e6ab108f99ef924ff546d0b366d7ac898fe55dc24534a98ffd3f67727e3ce6f28a2076f9d4bc30bd7fd456fd80fdff39f39aad3b5d85a72d1ae8756f27396"}, &(0x7f0000001100)=0x4a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x4, "ff63f8b2396f48f8a1dd20048d7703c2eebbd73d09d6c9a5c19a939d0aa35e9534c55efc8f516034c25e3d301ac4af934b9f54fad33599d3171ccdc8d4679fcc", "13b8b8abc540f236d997b747e4a43d6a542b0a2d8e68b6ddc35aa3dbb0d1802d9c9880dca6cb827a9841079462edc09cbc3cd6612473340f22a853bb678a7564", "ec62cbdc967e54498999c2caf4902bcbc6ed8ebfbb59115078954fa4d3c60751", [0x101, 0x40]}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001280)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r11 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r11, 0x0, &(0x7f0000001300), 0x80000) [ 189.908004] device hsr_slave_0 entered promiscuous mode [ 189.954772] device hsr_slave_1 entered promiscuous mode [ 189.995644] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 190.002692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 190.027044] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.033428] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.056165] device bridge_slave_0 entered promiscuous mode [ 190.074935] IPVS: ftp: loaded support on port[0] = 21 [ 190.108396] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.114754] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.128354] device bridge_slave_1 entered promiscuous mode [ 190.148638] IPVS: ftp: loaded support on port[0] = 21 14:54:17 executing program 5: r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "18c86fbaa1322f26", "5c8cd39c9a16ae3a427fc9cbc86c4cc345e9ff4878e1e8702a828fcc8e3a7dae", "27f0d26b", "b4a96a0d9182b569"}, 0x38) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x400, 0x281001) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x8, 0x6, 0x10000}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000100)=0x7f) geteuid() r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ftruncate(r4, 0xffffffff) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000200)={0x52, [0x0, 0x8, 0x6, 0x3, 0x6, 0x4, 0x8000, 0x3, 0x9, 0x1, 0x40, 0xc0e8, 0x7c, 0x40, 0x21, 0x8001, 0x90, 0x0, 0x1, 0x3f, 0x7, 0x8000, 0x5, 0xbcbf, 0x1, 0x6, 0x0, 0x6, 0xffff, 0x1e63, 0x0, 0xff, 0x3, 0x20, 0x8, 0x4, 0x8, 0x7, 0x8, 0x800, 0x0, 0x1a15, 0xfc00, 0x7000, 0xff30, 0x8, 0x80, 0xa93], 0x2}) r6 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x3e41, 0x2c4400) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00') r7 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xe55, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000340)='cgroup.type\x00', 0x2, 0x0) dup3(r4, r8, 0x80000) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000380)=0x20, 0x4) r9 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={0x155c}, 0x8) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) sendfile(r9, r10, &(0x7f0000000400), 0x34a) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x2, 0x0) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r14 = socket(0x5, 0x802, 0x7c) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x2, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) socketpair(0x3, 0xa, 0x44, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000380}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x699}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r17}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) [ 190.160271] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.166776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.173763] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.180183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.237569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.265982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.301120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.310379] team0: Port device team_slave_0 added [ 190.319486] chnl_net:caif_netlink_parms(): no params data found [ 190.351734] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.369949] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.381269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.388718] team0: Port device team_slave_1 added [ 190.394477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.403517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.438567] IPVS: ftp: loaded support on port[0] = 21 [ 190.473873] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.481226] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.488934] device bridge_slave_0 entered promiscuous mode [ 190.515287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.557889] device hsr_slave_0 entered promiscuous mode [ 190.615407] device hsr_slave_1 entered promiscuous mode [ 190.655380] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.661747] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.669059] device bridge_slave_1 entered promiscuous mode [ 190.692486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.704698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.712853] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 190.720066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 190.727741] chnl_net:caif_netlink_parms(): no params data found [ 190.755998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.764136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.777810] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 190.783904] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.808307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.815955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.831018] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.838894] team0: Port device team_slave_0 added [ 190.851713] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.858373] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.865894] device bridge_slave_0 entered promiscuous mode [ 190.874461] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.880909] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.888329] device bridge_slave_1 entered promiscuous mode [ 190.899401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.906241] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.913499] team0: Port device team_slave_1 added [ 190.932483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.945482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.965426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.973303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.981221] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.987623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.996621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.025683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.033907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.043593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.058113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.066258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.073821] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.080216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.100340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 191.166910] device hsr_slave_0 entered promiscuous mode [ 191.205407] device hsr_slave_1 entered promiscuous mode [ 191.257598] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 191.264586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.274733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 191.292869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.301508] team0: Port device team_slave_0 added [ 191.311312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 191.320169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.331260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.339802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.347206] team0: Port device team_slave_1 added [ 191.358058] chnl_net:caif_netlink_parms(): no params data found [ 191.378674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.386822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.394726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.408346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.416863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.423978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.461162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.469577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.480139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.491763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 191.501864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.530820] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.537678] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.544655] device bridge_slave_0 entered promiscuous mode [ 191.553164] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.560396] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.567965] device bridge_slave_1 entered promiscuous mode [ 191.574361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.582340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.611919] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 191.628449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 191.641864] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.650978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.660852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.668041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.676030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.738022] device hsr_slave_0 entered promiscuous mode [ 191.785646] device hsr_slave_1 entered promiscuous mode [ 191.855397] chnl_net:caif_netlink_parms(): no params data found [ 191.863626] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 191.871195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 191.879423] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.888390] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 191.894477] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.905189] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 191.911262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.930939] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.952399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.978623] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.987411] team0: Port device team_slave_0 added [ 191.998029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.005974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.013516] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.020459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.027812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.043789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 192.050674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.059951] team0: Port device team_slave_1 added [ 192.067151] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.080314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.096007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.103075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.114392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.133328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.140749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.149410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.157316] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.163650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.170904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.181729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.196969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 192.203942] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.210967] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.218544] device bridge_slave_0 entered promiscuous mode [ 192.229925] audit: type=1400 audit(1569682459.088:38): avc: denied { associate } for pid=7544 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 192.254889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.266005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.279420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.328130] device hsr_slave_0 entered promiscuous mode [ 192.365684] device hsr_slave_1 entered promiscuous mode [ 192.416079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.423688] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.430247] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.437443] device bridge_slave_1 entered promiscuous mode [ 192.454688] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.463988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.472608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.486699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 192.509156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.519689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.530532] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 192.549742] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 192.561800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 14:54:19 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) syz_mount_image$bfs(&(0x7f00000003c0)='bfs\x00', &(0x7f0000000400)='./file0\x00', 0x400, 0x1, &(0x7f0000000440)=[{0xfffffffffffffffe, 0x0, 0x5}], 0x12005, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="be089408e18ecccb57b5e4e29d9fa012f3bed75d5affe5b03ff86d0a136c768b33f187f360edcceb6367f0e82f3ac7a81bf84e76c2c29525cb9ce9ba81d2a2a395d18cf90dc546bfaf3dfdc89c6611303c53f121207a36c87e3a8bad1f64f301a67d654343cce2bfe916a513559a9c8eb7e8a9d8e3b2ed", 0x77, r2) [ 192.570526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.580101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 192.590059] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.602023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.616092] team0: Port device team_slave_0 added [ 192.621542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.634526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.650660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.659509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 192.668243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.676372] team0: Port device team_slave_1 added [ 192.684927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.694803] isofs_fill_super: bread failed, dev=md0, iso_blknum=16, block=32 [ 192.704608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.713428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.723727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.735254] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 192.741307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.756110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.776651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.783647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.793472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 192.800243] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.812377] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 192.833393] isofs_fill_super: bread failed, dev=md0, iso_blknum=16, block=32 [ 192.852577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 192.868651] 8021q: adding VLAN 0 to HW filter on device batadv0 14:54:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000000)=""/200) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004ffc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e20, @empty}, {0x0, @dev={[], 0x1a}}, 0xca, {0x2, 0x4e23, @multicast1}, 'lapb0\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) socketpair(0x1e, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000380)={0x0, 0x50323234, 0x3, @discrete={0x8}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r3, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7", 0x10b, 0x24008086, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0x200, 0x4) [ 192.881657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.889551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.906702] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.913088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.930609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.970136] hrtimer: interrupt took 26171 ns [ 192.988590] device hsr_slave_0 entered promiscuous mode [ 193.015813] device hsr_slave_1 entered promiscuous mode [ 193.057979] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 193.065706] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 193.087695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.111127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.135756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.143462] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.149873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.180775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.201501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.214392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 14:54:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0xffffffffffffffa6) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7fffffff, @ipv4={[], [], @empty}, 0x4}, @in={0x2, 0x4e23, @remote}], 0x2c) [ 193.243323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.265969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.279819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 14:54:20 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000e05000)=ANY=[@ANYBLOB="020d000018000000000000000001000004ab040002000000000000000000000000000000000000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xc0}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = shmget(0x2, 0x3000, 0x202, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = msgget$private(0x0, 0x2) r4 = getegid() r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) r6 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r5, r7, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000040)=0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000080)={{0x9, 0x0, r4, 0xee00, r8, 0x4}, 0x9, 0x1e8, 0x7, 0xe306, 0x7, 0x369e, 0x0, r10}) r11 = getpgid(r10) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x1b1000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x81, 0x6, 0x31, 0x9, 0x0, 0x1, 0x80, 0xfe68abc2dd415b1c, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x92, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x8, 0x5a, 0x1, 0x4, 0x6, 0x2, 0xd80e}, r11, 0xc, r12, 0x8) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) [ 193.294724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.307439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.322072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.342495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.363096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 193.385505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.392863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.404683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.424190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.434250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.451078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.462609] audit: type=1400 audit(1569682460.308:39): avc: denied { create } for pid=7601 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.471796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.505646] audit: type=1400 audit(1569682460.348:40): avc: denied { write } for pid=7601 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.507338] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.540424] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.549191] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.552818] audit: type=1400 audit(1569682460.408:41): avc: denied { read } for pid=7601 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.568127] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 193.591564] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.602267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.622185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:54:20 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7e4, 0x40000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x3, 0xffffffffffffff67) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) r3 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r2, r4, r5) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000200)='#^#user@trusted{usereth0trustedwlan1(+^cgrouptrustedsecurityproc\'vmnet1\x00', &(0x7f0000000280)) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 193.639028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.649016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.665445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.675571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.683280] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.689805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.700559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.712349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.723681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 14:54:20 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) r3 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5cf, 0x30, 0x8, 0xffff}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r4}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x520000, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r6, 0x6609, 0x0) [ 193.740935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.758292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.776547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.794289] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.800731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.808308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.824902] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 193.826770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.849881] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.851094] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.856339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.885517] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 193.898051] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 193.907319] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 193.916920] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31784!=0) [ 193.920018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.933793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.937446] EXT4-fs error (device loop1): ext4_fill_super:4395: inode #2: comm syz-executor.1: iget: root inode unallocated [ 193.943494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.964553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.977270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.987218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 193.994621] EXT4-fs (loop1): get root inode failed [ 194.000422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.008699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.016254] EXT4-fs (loop1): mount failed [ 194.020886] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.027327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.035804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.045330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.053035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.063698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.073482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.087610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.106661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.117633] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.123995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.142420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 14:54:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="380e289a3c1638f33999e223224333be8eb822bb3fb13827cf7d9e2bab9ed46a09568faf0ca016e8d7b2788196fd589924f4b44979378a197d1ca7e4f4432d337cc80aa15cf427faa79ce11260cef8b0878cc254044fcf039f446c08f10c9b693add35b9baa2ad680341002de77da925ec05fe8d2e2ca8bb359eecea12b91c7c077c1b0a94d471000000"], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x10098) [ 194.153899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.171789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.183151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.194915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.212606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.227735] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.237841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.253759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.264590] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 194.284214] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.299409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.311741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.332834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.354005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.380496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.401032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.423199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.444335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.463446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.478285] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.484377] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.500209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.514695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.529234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.550415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.570837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.590730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.628030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 194.639825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.652946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.666501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 14:54:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="380e289a3c1638f33999e223224333be8eb822bb3fb13827cf7d9e2bab9ed46a09568faf0ca016e8d7b2788196fd589924f4b44979378a197d1ca7e4f4432d337cc80aa15cf427faa79ce11260cef8b0878cc254044fcf039f446c08f10c9b693add35b9baa2ad680341002de77da925ec05fe8d2e2ca8bb359eecea12b91c7c077c1b0a94d471000000"], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x10098) [ 194.674105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.688535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.697249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.706128] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.712506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.726502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.745864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.755458] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.762599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.793865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.820376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 194.844770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.855789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.876841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.884697] bridge0: port 2(bridge_slave_1) entered blocking state 14:54:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0x3f, 0x29, 0x9, 0x18, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0x1da5eaa3b58c6f11}, 0x30, 0xae7, 0x9c1, 0x0, 0x30000000, 0x2, 0x39}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x18d74aab51b03728) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0xd}) fchmod(r1, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) fallocate(r0, 0x44, 0x4, 0x4) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x1, 0x1) [ 194.891248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.923840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.939217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.957092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.973765] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 194.981189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.996253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.016682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.036262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.046095] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.058149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.070337] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.080437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.090788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.101473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.112935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.121908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.129580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.138742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.163154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.206906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 195.215106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.222694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.244264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.268970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.280029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.290638] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.297584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.323407] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.344622] QAT: Invalid ioctl [ 195.347911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.360659] QAT: Invalid ioctl 14:54:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="380e289a3c1638f33999e223224333be8eb822bb3fb13827cf7d9e2bab9ed46a09568faf0ca016e8d7b2788196fd589924f4b44979378a197d1ca7e4f4432d337cc80aa15cf427faa79ce11260cef8b0878cc254044fcf039f446c08f10c9b693add35b9baa2ad680341002de77da925ec05fe8d2e2ca8bb359eecea12b91c7c077c1b0a94d471000000"], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x10098) 14:54:22 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) r3 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5cf, 0x30, 0x8, 0xffff}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r4}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x520000, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r6, 0x6609, 0x0) 14:54:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0x3f, 0x29, 0x9, 0x18, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0x1da5eaa3b58c6f11}, 0x30, 0xae7, 0x9c1, 0x0, 0x30000000, 0x2, 0x39}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x18d74aab51b03728) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0xd}) fchmod(r1, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) fallocate(r0, 0x44, 0x4, 0x4) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x1, 0x1) 14:54:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0x3f, 0x29, 0x9, 0x18, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0x1da5eaa3b58c6f11}, 0x30, 0xae7, 0x9c1, 0x0, 0x30000000, 0x2, 0x39}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x18d74aab51b03728) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0xd}) fchmod(r1, 0x2) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) fallocate(r0, 0x44, 0x4, 0x4) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x1, 0x1) 14:54:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) r1 = msgget$private(0x0, 0x2) r2 = getegid() r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) r4 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, r5, r6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000040)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x9, 0x0, r2, 0xee00, r6, 0x4}, 0x9, 0x1e8, 0x7, 0xe306, 0x7, 0x369e, 0x0, r8}) r9 = syz_open_procfs(r8, &(0x7f0000000400)='projid_map\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='ppp1,\x00', r9}, 0x10) readv(r0, &(0x7f0000000880), 0x2) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x81, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5c, 0x183001) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r12 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r13 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r15, 0x84, 0x1, &(0x7f0000000000)={r17}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f00000000c0)={r17, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000080)={r17, 0x9, 0x1, 0x1, 0x3, 0x28d8}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000580)={r17, 0x68, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x9, @mcast1, 0x8}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x9}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={r18, 0xcea2}, &(0x7f0000000640)=0x8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x88001, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r11, @ANYBLOB="01ff6098e6d4ba4e931b17647d", @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000080000000,default_permissions,blksize=0x0000000000001c00,default_permissions,default_permissions,max_read=0x0000000000001262,default_permissions,fscontext=user_u,smackfsroot=nodev,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r19 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r19, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x02\xc4', @ifru_flags}) 14:54:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000400)="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", 0x4000, 0x1200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x10) fcntl$notify(r2, 0x402, 0x1d) 14:54:22 executing program 5: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x2000000000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x160, 0x0, 0x0, 0x0, 0xa6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x11, 0x2}) tkill(r1, 0x4000000000002e) ptrace(0x10, 0x0) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x3, 0x1f, 0x7, 0x2, 0x401, 0xcd13}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, 0x0, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x13) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000002c0)={0x1000, 0x400, 0x7, 0x1, 0x6, 0x3}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x52e7fdb0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f00000001c0), 0x4) 14:54:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) 14:54:22 executing program 4: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x80, 0x8}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0x6, 0x4, 0x800, {0x0, 0x7530}, {0x1, 0xa, 0x7, 0x8, 0x2, 0x3, "dd3b91b3"}, 0x8001, 0x3, @planes=&(0x7f0000000000)={0x7, 0x0, @fd, 0xfbd}, 0x4}) perf_event_open(&(0x7f0000000180)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 14:54:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000200"], 0xfdef) [ 196.097291] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 14:54:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) r1 = msgget$private(0x0, 0x2) r2 = getegid() r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) r4 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, r5, r6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000040)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x9, 0x0, r2, 0xee00, r6, 0x4}, 0x9, 0x1e8, 0x7, 0xe306, 0x7, 0x369e, 0x0, r8}) r9 = syz_open_procfs(r8, &(0x7f0000000400)='projid_map\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='ppp1,\x00', r9}, 0x10) readv(r0, &(0x7f0000000880), 0x2) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x81, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5c, 0x183001) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r12 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r13 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r15, 0x84, 0x1, &(0x7f0000000000)={r17}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f00000000c0)={r17, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000080)={r17, 0x9, 0x1, 0x1, 0x3, 0x28d8}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000580)={r17, 0x68, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x9, @mcast1, 0x8}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x9}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={r18, 0xcea2}, &(0x7f0000000640)=0x8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x88001, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r11, @ANYBLOB="01ff6098e6d4ba4e931b17647d", @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000080000000,default_permissions,blksize=0x0000000000001c00,default_permissions,default_permissions,max_read=0x0000000000001262,default_permissions,fscontext=user_u,smackfsroot=nodev,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r19 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r19, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x02\xc4', @ifru_flags}) [ 196.359551] device nr0 entered promiscuous mode 14:54:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) [ 196.542433] audit: type=1400 audit(1569682463.398:42): avc: denied { map_create } for pid=7719 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 14:54:23 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='#!!'], 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:54:23 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) r3 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5cf, 0x30, 0x8, 0xffff}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r4}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x520000, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r6, 0x6609, 0x0) [ 196.674801] audit: type=1400 audit(1569682463.398:43): avc: denied { map_read map_write } for pid=7719 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 14:54:23 executing program 4: r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team0\x00\n\xfa\xff\xff\xff\xff\xae\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000240)={'team0\x00\xfd\xff\xfd\xff\xc0\x00\a\x00\"\xff', 0x4bfd}) 14:54:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffe26}, 0x46) [ 196.777174] audit: type=1400 audit(1569682463.408:44): avc: denied { prog_load } for pid=7719 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 196.800707] audit: type=1400 audit(1569682463.498:45): avc: denied { prog_run } for pid=7719 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 14:54:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000034c0)={0x1, 0x7, 0x100, 0x211b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) 14:54:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 14:54:24 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 14:54:24 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6(0xa, 0x3, 0xf4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x170, 0x0) recvmmsg(r0, &(0x7f0000007c40)=[{{&(0x7f00000024c0)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) 14:54:24 executing program 2: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@statfs_percent={'statfs_percent'}}]}) [ 197.351385] gfs2: not a GFS2 filesystem [ 197.444589] gfs2: not a GFS2 filesystem [ 197.445453] protocol 88fb is buggy, dev hsr_slave_0 [ 197.454564] protocol 88fb is buggy, dev hsr_slave_1 [ 197.728774] ýK: renamed from team0 14:54:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={0x14, 0x16, 0xfffffffffffffffd}, 0x14}}, 0x0) 14:54:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x212, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') write$cgroup_int(r2, &(0x7f0000000300), 0x12) r3 = gettid() write$cgroup_pid(r0, &(0x7f0000000380)=r3, 0x12) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/83, 0x53}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) sendmsg(r0, &(0x7f0000001840)={&(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x4}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001800)="a216649b373c34", 0x7}], 0x1}, 0x1) r4 = perf_event_open(&(0x7f0000001b00)={0x7, 0x70, 0x9, 0x3ff, 0x8000, 0x5, 0x0, 0x7, 0x402a4, 0x2, 0x3, 0x3, 0xb41a, 0x2, 0x9, 0x1, 0xd6, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair(0x0, 0x7, 0x40000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0x0, 0x0}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000580)={'veth0\x00', 0x200}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0xe, 0xbc, &(0x7f0000000780), 0x0, 0x1a3}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x6, 0x101, 0x3, 0x1, 0x0, 0x9, 0x8010, 0xb, 0x6, 0xfffffffffffffffc, 0x1914, 0x3f, 0xd, 0x93, 0x5, 0x5, 0x40, 0x6, 0x5, 0x2, 0x7, 0x8, 0x1, 0x6, 0x100000000, 0xa0000000, 0x0, 0x2, 0xf7f5, 0x5, 0x0, 0x2, 0xe1, 0x4, 0xffffffff, 0x400, 0x0, 0x0, 0x0, @perf_config_ext={0x80b2, 0x4}, 0x6000, 0x7, 0xffffffffffffffc1, 0xf, 0xb9, 0x35f489f2, 0x2}, 0x0, 0x8, r4, 0xa) write$cgroup_pid(r5, &(0x7f0000000340), 0x12) 14:54:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:54:24 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 14:54:24 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x1000000000016) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:54:24 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 197.821471] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.822356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 197.859801] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) socket(0x400000000000010, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f00000007c0)) [ 198.108216] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.122699] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) 14:54:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x212, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') write$cgroup_int(r2, &(0x7f0000000300), 0x12) r3 = gettid() write$cgroup_pid(r0, &(0x7f0000000380)=r3, 0x12) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/83, 0x53}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) sendmsg(r0, &(0x7f0000001840)={&(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x4}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001800)="a216649b373c34", 0x7}], 0x1}, 0x1) r4 = perf_event_open(&(0x7f0000001b00)={0x7, 0x70, 0x9, 0x3ff, 0x8000, 0x5, 0x0, 0x7, 0x402a4, 0x2, 0x3, 0x3, 0xb41a, 0x2, 0x9, 0x1, 0xd6, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair(0x0, 0x7, 0x40000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0x0, 0x0}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000580)={'veth0\x00', 0x200}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0xe, 0xbc, &(0x7f0000000780), 0x0, 0x1a3}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x6, 0x101, 0x3, 0x1, 0x0, 0x9, 0x8010, 0xb, 0x6, 0xfffffffffffffffc, 0x1914, 0x3f, 0xd, 0x93, 0x5, 0x5, 0x40, 0x6, 0x5, 0x2, 0x7, 0x8, 0x1, 0x6, 0x100000000, 0xa0000000, 0x0, 0x2, 0xf7f5, 0x5, 0x0, 0x2, 0xe1, 0x4, 0xffffffff, 0x400, 0x0, 0x0, 0x0, @perf_config_ext={0x80b2, 0x4}, 0x6000, 0x7, 0xffffffffffffffc1, 0xf, 0xb9, 0x35f489f2, 0x2}, 0x0, 0x8, r4, 0xa) write$cgroup_pid(r5, &(0x7f0000000340), 0x12) 14:54:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') [ 198.353247] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.362809] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 14:54:25 executing program 5: 14:54:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:25 executing program 5: 14:54:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0xfffffffffffff801}) 14:54:25 executing program 4: 14:54:25 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:25 executing program 5: 14:54:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='.', 0x0, 0x1009, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 14:54:25 executing program 3: fchdir(0xffffffffffffffff) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffffffffffffd}}}}, 0x30}}, 0x0) 14:54:25 executing program 2: 14:54:25 executing program 2: 14:54:25 executing program 5: 14:54:25 executing program 4: 14:54:25 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:25 executing program 3: 14:54:25 executing program 0: 14:54:25 executing program 5: 14:54:25 executing program 2: 14:54:26 executing program 4: 14:54:26 executing program 3: 14:54:26 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:26 executing program 5: 14:54:26 executing program 0: 14:54:26 executing program 2: 14:54:26 executing program 3: 14:54:26 executing program 5: 14:54:26 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:26 executing program 4: 14:54:26 executing program 0: 14:54:26 executing program 3: 14:54:26 executing program 5: 14:54:26 executing program 4: 14:54:26 executing program 0: 14:54:26 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:26 executing program 2: 14:54:26 executing program 3: 14:54:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f32f30f38f67d000f2334b8fe000400d026660ff2150faf51830f20e06635000020000f22e0ba0f090fc775f3"}], 0x177, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20000000fb], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:54:26 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='#'], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:54:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:26 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:26 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000100)={0x0, r0+30000000}, 0x0) 14:54:26 executing program 2: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d, 0xe0ff, &(0x7f0000000500)="b9ff0300000d698cb89e14f008001fffffff00004000633277fbac141414e934a0a662079f4b4d2f87e5feca6a", 0x0, 0x100000000000100}, 0x28) [ 199.797385] audit: type=1400 audit(1569682466.658:46): avc: denied { wake_alarm } for pid=7929 comm="syz-executor.3" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 14:54:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7628e274da69bbfcb608dee02b6025234c01565243db88ce83170a894815f22a9c96a35dbc10cacec5089f895b3e8992eca3affa1525a108b5075a380739abd40fa3a6eec8635c62ef90f39530ccb6ff12f996e8beb720556367496e67f8d1d3e2fe7c8ee71315"], 0x67) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 14:54:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x54) 14:54:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:27 executing program 5: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d, 0xe0ff, &(0x7f0000000500)="b9ff0300000d698cb89e14f008001fffffff00004000632177fbac141414e934a0a662079f4b4d2f87e5feca6a", 0x0, 0x100000000000100}, 0x28) 14:54:27 executing program 4: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d, 0xe0ff, &(0x7f0000000500)="b9ff0300000d698cb89e14f008001fffffff00004000630677fbac141412e934a0a662079f4b4d2f87e5feca6a", 0x0, 0x100000000000100}, 0x28) 14:54:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:27 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0/bus\x00') 14:54:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:27 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) 14:54:27 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') [ 200.621869] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 14:54:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) [ 200.778727] ------------[ cut here ]------------ [ 200.784945] ODEBUG: free active (active state 1) object type: rcu_head hint: (null) [ 200.794490] WARNING: CPU: 1 PID: 7560 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 200.803337] Kernel panic - not syncing: panic_on_warn set ... [ 200.803337] [ 200.811057] CPU: 1 PID: 7560 Comm: syz-executor.5 Not tainted 4.19.75 #0 [ 200.817921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.827362] Call Trace: [ 200.829953] dump_stack+0x172/0x1f0 [ 200.833591] panic+0x263/0x507 [ 200.836797] ? __warn_printk+0xf3/0xf3 [ 200.840698] ? debug_print_object+0x168/0x250 [ 200.845205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.846377] kobject: 'loop4' (00000000947f2b10): kobject_uevent_env [ 200.850768] ? __warn.cold+0x5/0x4a [ 200.850783] ? __warn+0xe8/0x1d0 [ 200.857312] kobject: 'loop4' (00000000947f2b10): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 200.860794] ? debug_print_object+0x168/0x250 [ 200.860805] __warn.cold+0x20/0x4a [ 200.860819] ? debug_print_object+0x168/0x250 [ 200.864845] kobject: 'loop1' (000000004c74cda0): kobject_uevent_env [ 200.873601] report_bug+0x263/0x2b0 [ 200.873617] do_error_trap+0x204/0x360 [ 200.873630] ? math_error+0x340/0x340 [ 200.873645] ? vprintk_emit+0x1ab/0x690 [ 200.880635] kobject: 'loop1' (000000004c74cda0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 200.881662] ? error_entry+0x7c/0xe0 [ 200.881681] ? trace_hardirqs_off_caller+0x65/0x220 14:54:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) 14:54:27 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000780)='wlan1\x00\a\xd3~\xd4\xa2\'\x8f\xf3\xc7\xae\xcc\xa0\x89\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01Q\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 14:54:27 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) 14:54:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) [ 200.916476] kobject: 'loop0' (0000000026180d91): kobject_uevent_env [ 200.917811] ? vprintk_default+0x28/0x30 [ 200.917830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.921556] kobject: 'loop0' (0000000026180d91): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 200.926541] do_invalid_op+0x1b/0x20 [ 200.926554] invalid_op+0x14/0x20 [ 200.926568] RIP: 0010:debug_print_object+0x168/0x250 [ 200.926582] Code: dd 20 56 82 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 20 56 82 87 48 c7 c7 60 4b 82 87 e8 d6 04 19 fe <0f> 0b 83 05 cb 83 17 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 200.968356] kobject: 'loop2' (0000000073944356): kobject_uevent_env [ 200.982449] RSP: 0018:ffff88805aa5f9d0 EFLAGS: 00010082 [ 200.982460] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 200.982466] RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed100b54bf2c [ 200.982473] RBP: ffff88805aa5fa10 R08: ffff88805aa52580 R09: ffffed1015d23ee3 [ 200.982480] R10: ffffed1015d23ee2 R11: ffff8880ae91f717 R12: 0000000000000001 [ 200.982486] R13: ffffffff8879f200 R14: 0000000000000000 R15: ffff88808db57420 [ 200.982508] ? vprintk_func+0x86/0x189 [ 200.982528] debug_check_no_obj_freed+0x29f/0x464 [ 200.997055] kobject: 'loop2' (0000000073944356): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.001569] kmem_cache_free+0x18f/0x260 [ 201.001582] free_task+0xdd/0x120 [ 201.001597] __put_task_struct+0x20f/0x4c0 [ 201.060733] finish_task_switch+0x52b/0x780 [ 201.065075] __schedule+0x86e/0x1dc0 [ 201.068975] ? hrtimer_start_range_ns+0x665/0xc70 [ 201.071151] ------------[ cut here ]------------ [ 201.073835] ? pci_mmcfg_check_reserved+0x170/0x170 [ 201.078601] ODEBUG: free active (active state 1) object type: rcu_head hint: (null) [ 201.083605] ? __hrtimer_get_remaining+0x1a0/0x1a0 [ 201.092850] WARNING: CPU: 0 PID: 7547 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 201.097543] ? lockdep_hardirqs_on+0x415/0x5d0 [ 201.106458] Modules linked in: [ 201.111050] schedule+0x92/0x1c0 [ 201.111064] do_nanosleep+0x201/0x690 [ 201.114245] CPU: 0 PID: 7547 Comm: syz-executor.1 Not tainted 4.19.75 #0 [ 201.117591] ? __debug_object_init+0x190/0xc30 [ 201.121627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.128451] ? schedule_timeout_idle+0x90/0x90 [ 201.133019] RIP: 0010:debug_print_object+0x168/0x250 [ 201.142358] ? memset+0x32/0x40 [ 201.146923] Code: dd 20 56 82 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 20 56 82 87 48 c7 c7 60 4b 82 87 e8 d6 04 19 fe <0f> 0b 83 05 cb 83 17 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 201.152008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.155260] RSP: 0018:ffff88808f89f9d0 EFLAGS: 00010082 [ 201.174153] ? __hrtimer_init+0xe1/0x250 [ 201.185373] hrtimer_nanosleep+0x2a6/0x570 [ 201.189404] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 201.194751] ? nanosleep_copyout+0x110/0x110 [ 201.202001] RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed1011f13f2c [ 201.206393] ? _copy_from_user+0xdd/0x150 [ 201.213653] RBP: ffff88808f89fa10 R08: ffff88808f2be280 R09: ffffed1015d03ee3 [ 201.217784] ? clock_was_set_work+0x30/0x30 [ 201.225028] R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: 0000000000000002 [ 201.229343] __x64_sys_nanosleep+0x1a6/0x220 [ 201.236669] R13: ffffffff8879f200 R14: 0000000000000000 R15: ffff888052c274e0 [ 201.236682] FS: 0000555556c04940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 201.241075] ? hrtimer_nanosleep+0x570/0x570 [ 201.248680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.256889] ? do_syscall_64+0x26/0x620 [ 201.256904] ? lockdep_hardirqs_on+0x415/0x5d0 [ 201.261289] CR2: 0000001b2bd23000 CR3: 000000008d1f8000 CR4: 00000000001406f0 [ 201.267158] ? trace_hardirqs_on+0x67/0x220 [ 201.271116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.275684] do_syscall_64+0xfd/0x620 [ 201.282950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.287277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.294532] Call Trace: [ 201.298330] RIP: 0033:0x457ed0 [ 201.305590] debug_check_no_obj_freed+0x29f/0x464 [ 201.310755] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 81 e8 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 201.313358] kmem_cache_free+0x18f/0x260 [ 201.316527] RSP: 002b:00007ffeb739f0a8 EFLAGS: 00000246 [ 201.321375] free_task+0xdd/0x120 [ 201.340702] ORIG_RAX: 0000000000000023 [ 201.344749] __put_task_struct+0x20f/0x4c0 [ 201.350083] RAX: ffffffffffffffda RBX: 0000000000030fbe RCX: 0000000000457ed0 [ 201.353518] finish_task_switch+0x52b/0x780 [ 201.357481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffeb739f0b0 [ 201.361700] __schedule+0x86e/0x1dc0 [ 201.368940] RBP: 0000000000000035 R08: 0000000000000001 R09: 00005555567f5940 [ 201.368951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.373604] ? hrtimer_start_range_ns+0x665/0xc70 [ 201.380863] R13: 00007ffeb739f100 R14: 0000000000030f7f R15: 00007ffeb739f110 [ 201.384574] ? pci_mmcfg_check_reserved+0x170/0x170 [ 201.391825] [ 201.391830] ====================================================== [ 201.391835] WARNING: possible circular locking dependency detected [ 201.391838] 4.19.75 #0 Not tainted [ 201.391842] ------------------------------------------------------ [ 201.391847] syz-executor.5/7560 is trying to acquire lock: [ 201.391850] 000000001eadff35 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 201.391864] [ 201.391867] but task is already holding lock: [ 201.391870] 00000000c2551ab1 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 201.391884] [ 201.391887] which lock already depends on the new lock. [ 201.391889] [ 201.391892] [ 201.391896] the existing dependency chain (in reverse order) is: [ 201.391898] [ 201.391900] -> #3 (&obj_hash[i].lock){-.-.}: [ 201.391914] _raw_spin_lock_irqsave+0x95/0xcd [ 201.391918] __debug_object_init+0xc6/0xc30 [ 201.391922] debug_object_init+0x16/0x20 [ 201.391925] hrtimer_init+0x2a/0x300 [ 201.391928] init_dl_task_timer+0x1b/0x50 [ 201.391931] __sched_fork+0x22a/0x4b0 [ 201.391935] init_idle+0x75/0x800 [ 201.391938] sched_init+0x952/0x9f0 [ 201.391942] start_kernel+0x402/0x8c5 [ 201.391946] x86_64_start_reservations+0x29/0x2b [ 201.391949] x86_64_start_kernel+0x77/0x7b [ 201.391953] secondary_startup_64+0xa4/0xb0 [ 201.391955] [ 201.391957] -> #2 (&rq->lock){-.-.}: [ 201.391970] _raw_spin_lock+0x2f/0x40 [ 201.391973] task_fork_fair+0x6a/0x520 [ 201.391977] sched_fork+0x3af/0x900 [ 201.391981] copy_process.part.0+0x1859/0x7a30 [ 201.391984] _do_fork+0x257/0xfd0 [ 201.391988] kernel_thread+0x34/0x40 [ 201.391991] rest_init+0x24/0x222 [ 201.391995] start_kernel+0x88c/0x8c5 [ 201.391999] x86_64_start_reservations+0x29/0x2b [ 201.392003] x86_64_start_kernel+0x77/0x7b [ 201.392006] secondary_startup_64+0xa4/0xb0 [ 201.392008] [ 201.392011] -> #1 (&p->pi_lock){-.-.}: [ 201.392024] _raw_spin_lock_irqsave+0x95/0xcd [ 201.392027] try_to_wake_up+0x94/0xf50 [ 201.392031] wake_up_process+0x10/0x20 [ 201.392034] __up.isra.0+0x136/0x1a0 [ 201.392037] up+0x9c/0xe0 [ 201.392041] __up_console_sem+0xb7/0x1c0 [ 201.392044] console_unlock+0x6c7/0x10b0 [ 201.392048] vprintk_emit+0x238/0x690 [ 201.392051] vprintk_default+0x28/0x30 [ 201.392055] vprintk_func+0x7e/0x189 [ 201.392058] printk+0xba/0xed [ 201.392061] regdb_fw_cb.cold+0x18/0x9c [ 201.392066] request_firmware_work_func+0x137/0x280 [ 201.392069] process_one_work+0x989/0x1750 [ 201.392073] worker_thread+0x98/0xe40 [ 201.392076] kthread+0x354/0x420 [ 201.392080] ret_from_fork+0x24/0x30 [ 201.392082] [ 201.392084] -> #0 ((console_sem).lock){-.-.}: [ 201.392097] lock_acquire+0x16f/0x3f0 [ 201.392101] _raw_spin_lock_irqsave+0x95/0xcd [ 201.392104] down_trylock+0x13/0x70 [ 201.392108] __down_trylock_console_sem+0xa8/0x210 [ 201.392112] console_trylock+0x15/0xa0 [ 201.392115] vprintk_emit+0x21d/0x690 [ 201.392118] vprintk_default+0x28/0x30 [ 201.392122] vprintk_func+0x7e/0x189 [ 201.392125] printk+0xba/0xed [ 201.392129] __warn_printk+0x9b/0xf3 [ 201.392132] debug_print_object+0x168/0x250 [ 201.392136] debug_check_no_obj_freed+0x29f/0x464 [ 201.392140] kmem_cache_free+0x18f/0x260 [ 201.392144] free_task+0xdd/0x120 [ 201.392147] __put_task_struct+0x20f/0x4c0 [ 201.392151] finish_task_switch+0x52b/0x780 [ 201.392154] __schedule+0x86e/0x1dc0 [ 201.392158] schedule+0x92/0x1c0 [ 201.392161] do_nanosleep+0x201/0x690 [ 201.392165] hrtimer_nanosleep+0x2a6/0x570 [ 201.392169] __x64_sys_nanosleep+0x1a6/0x220 [ 201.392173] do_syscall_64+0xfd/0x620 [ 201.392177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.392179] [ 201.392184] other info that might help us debug this: [ 201.392186] [ 201.392188] Chain exists of: [ 201.392190] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 201.392207] [ 201.392210] Possible unsafe locking scenario: [ 201.392212] [ 201.392216] CPU0 CPU1 [ 201.392220] ---- ---- [ 201.392222] lock(&obj_hash[i].lock); [ 201.392231] lock(&rq->lock); [ 201.392239] lock(&obj_hash[i].lock); [ 201.392247] lock((console_sem).lock); [ 201.392254] [ 201.392257] *** DEADLOCK *** [ 201.392259] [ 201.392263] 1 lock held by syz-executor.5/7560: [ 201.392265] #0: 00000000c2551ab1 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 201.392281] [ 201.392283] stack backtrace: [ 201.392289] CPU: 1 PID: 7560 Comm: syz-executor.5 Not tainted 4.19.75 #0 [ 201.392295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.392298] Call Trace: [ 201.392301] dump_stack+0x172/0x1f0 [ 201.392306] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 201.392310] __lock_acquire+0x2e19/0x49c0 [ 201.392313] ? mark_held_locks+0x100/0x100 [ 201.392317] ? format_decode+0x25f/0xbc0 [ 201.392321] ? enable_ptr_key_workfn+0x30/0x30 [ 201.392325] ? kvm_clock_read+0x18/0x30 [ 201.392329] lock_acquire+0x16f/0x3f0 [ 201.392332] ? down_trylock+0x13/0x70 [ 201.392336] _raw_spin_lock_irqsave+0x95/0xcd [ 201.392340] ? down_trylock+0x13/0x70 [ 201.392343] ? vprintk_emit+0x21d/0x690 [ 201.392347] down_trylock+0x13/0x70 [ 201.392350] ? vprintk_emit+0x21d/0x690 [ 201.392354] __down_trylock_console_sem+0xa8/0x210 [ 201.392358] console_trylock+0x15/0xa0 [ 201.392361] vprintk_emit+0x21d/0x690 [ 201.392365] vprintk_default+0x28/0x30 [ 201.392369] vprintk_func+0x7e/0x189 [ 201.392372] printk+0xba/0xed [ 201.392375] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 201.392379] ? __warn_printk+0x8f/0xf3 [ 201.392382] __warn_printk+0x9b/0xf3 [ 201.392386] ? add_taint.cold+0x16/0x16 [ 201.392390] debug_print_object+0x168/0x250 [ 201.392394] debug_check_no_obj_freed+0x29f/0x464 [ 201.392397] kmem_cache_free+0x18f/0x260 [ 201.392400] free_task+0xdd/0x120 [ 201.392404] __put_task_struct+0x20f/0x4c0 [ 201.392408] finish_task_switch+0x52b/0x780 [ 201.392411] __schedule+0x86e/0x1dc0 [ 201.392415] ? hrtimer_start_range_ns+0x665/0xc70 [ 201.392419] ? pci_mmcfg_check_reserved+0x170/0x170 [ 201.392423] ? __hrtimer_get_remaining+0x1a0/0x1a0 [ 201.392427] ? lockdep_hardirqs_on+0x415/0x5d0 [ 201.392431] schedule+0x92/0x1c0 [ 201.392439] do_nanosleep+0x201/0x690 [ 201.392443] ? __debug_object_init+0x190/0xc30 [ 201.392447] ? schedule_timeout_idle+0x90/0x90 [ 201.392450] ? memset+0x32/0x40 [ 201.392454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.392458] ? __hrtimer_init+0xe1/0x250 [ 201.392462] hrtimer_nanosleep+0x2a6/0x570 [ 201.392465] ? nanosleep_copyout+0x110/0x110 [ 201.392469] ? _copy_from_user+0xdd/0x150 [ 201.392473] ? clock_was_set_work+0x30/0x30 [ 201.392477] __x64_sys_nanosleep+0x1a6/0x220 [ 201.392480] ? hrtimer_nanosleep+0x570/0x570 [ 201.392484] ? do_syscall_64+0x26/0x620 [ 201.392488] ? lockdep_hardirqs_on+0x415/0x5d0 [ 201.392492] ? trace_hardirqs_on+0x67/0x220 [ 201.392495] do_syscall_64+0xfd/0x620 [ 201.392499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.392503] RIP: 0033:0x457ed0 [ 201.392515] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 81 e8 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 201.392519] RSP: 002b:00007ffeb739f0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 201.392528] RAX: ffffffffffffffda RBX: 0000000000030fbe RCX: 0000000000457ed0 [ 201.392533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffeb739f0b0 [ 201.392538] RBP: 0000000000000035 R08: 0000000000000001 R09: 00005555567f5940 [ 201.392543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.392549] R13: 00007ffeb739f100 R14: 0000000000030f7f R15: 00007ffeb739f110 [ 202.182407] ? __hrtimer_get_remaining+0x1a0/0x1a0 [ 202.187331] schedule+0x92/0x1c0 [ 202.191129] do_nanosleep+0x201/0x690 [ 202.194921] ? __debug_object_init+0x190/0xc30 [ 202.199509] ? schedule_timeout_idle+0x90/0x90 [ 202.204079] ? memset+0x32/0x40 [ 202.207364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 202.212910] ? __hrtimer_init+0xe1/0x250 [ 202.216962] hrtimer_nanosleep+0x2a6/0x570 [ 202.221293] ? nanosleep_copyout+0x110/0x110 [ 202.225700] ? _copy_from_user+0xdd/0x150 [ 202.229839] ? clock_was_set_work+0x30/0x30 [ 202.234156] __x64_sys_nanosleep+0x1a6/0x220 [ 202.238557] ? hrtimer_nanosleep+0x570/0x570 [ 202.242952] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 202.248317] ? trace_hardirqs_off_caller+0x65/0x220 [ 202.253343] ? trace_hardirqs_on+0x67/0x220 [ 202.257668] do_syscall_64+0xfd/0x620 [ 202.261464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.266907] RIP: 0033:0x457ed0 [ 202.270087] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 81 e8 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 202.288979] RSP: 002b:00007ffcf4b78708 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 202.296678] RAX: ffffffffffffffda RBX: 0000000000031141 RCX: 0000000000457ed0 [ 202.305065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffcf4b78710 [ 202.312321] RBP: 000000000000003a R08: 0000000000000001 R09: 0000555556c04940 [ 202.319588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 202.326856] R13: 00007ffcf4b78760 R14: 00000000000310ec R15: 00007ffcf4b78770 [ 202.334127] irq event stamp: 238136 [ 202.337763] hardirqs last enabled at (238135): [] _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 202.347547] hardirqs last disabled at (238136): [] __schedule+0x1df/0x1dc0 [ 202.356117] softirqs last enabled at (237704): [] __do_softirq+0x633/0x921 [ 202.364773] softirqs last disabled at (237679): [] irq_exit+0x180/0x1d0 [ 202.373156] ---[ end trace 50d970431cf98f6a ]--- [ 202.378938] ------------[ cut here ]------------ [ 202.383679] ODEBUG: free active (active state 1) object type: rcu_head hint: (null) [ 202.392584] WARNING: CPU: 0 PID: 7547 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 202.401317] Modules linked in: [ 202.404505] CPU: 0 PID: 7547 Comm: syz-executor.1 Tainted: G W 4.19.75 #0 [ 202.412727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.422073] RIP: 0010:debug_print_object+0x168/0x250 [ 202.427178] Code: dd 20 56 82 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 20 56 82 87 48 c7 c7 60 4b 82 87 e8 d6 04 19 fe <0f> 0b 83 05 cb 83 17 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 202.446167] RSP: 0018:ffff88808f89f9d0 EFLAGS: 00010082 [ 202.451517] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 202.458775] RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed1011f13f2c [ 202.467002] RBP: ffff88808f89fa10 R08: ffff88808f2be280 R09: ffffed1015d03ee3 [ 202.474259] R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: 0000000000000003 [ 202.481534] R13: ffffffff8879f200 R14: 0000000000000000 R15: ffff888052c274e0 [ 202.488802] FS: 0000555556c04940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 202.497193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.503064] CR2: 0000001b2bd23000 CR3: 000000008d1f8000 CR4: 00000000001406f0 [ 202.510329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.517846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.525110] Call Trace: [ 202.527695] debug_check_no_obj_freed+0x29f/0x464 [ 202.532551] kmem_cache_free+0x18f/0x260 [ 202.533450] Shutting down cpus with NMI