Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.972672] audit: type=1800 audit(1574216813.567:33): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 37.997824] audit: type=1800 audit(1574216813.567:34): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.985813] audit: type=1400 audit(1574216816.577:35): avc: denied { map } for pid=7531 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2019/11/20 02:27:03 fuzzer started [ 47.547501] audit: type=1400 audit(1574216823.137:36): avc: denied { map } for pid=7540 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/11/20 02:27:04 dialing manager at 10.128.0.105:35193 2019/11/20 02:27:05 syscalls: 2545 2019/11/20 02:27:05 code coverage: enabled 2019/11/20 02:27:05 comparison tracing: enabled 2019/11/20 02:27:05 extra coverage: extra coverage is not supported by the kernel 2019/11/20 02:27:05 setuid sandbox: enabled 2019/11/20 02:27:05 namespace sandbox: enabled 2019/11/20 02:27:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/20 02:27:05 fault injection: enabled 2019/11/20 02:27:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/20 02:27:05 net packet injection: enabled 2019/11/20 02:27:05 net device setup: enabled 2019/11/20 02:27:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/20 02:27:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:30:00 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x8}, @in6={0xa, 0x4e22, 0x3, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e21, 0xfffffffc, @ipv4={[], [], @local}, 0x2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x80, 0x1000}, &(0x7f0000000180)=0x8) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x2, 0xa, 0x80, 0x100, 0x16, 0x0, r1}, {0xf6, 0x8, 0x1f, 0xda0b, 0x1, 0x3ff, 0x3f, 0x4}, {0x650836bf, 0x5e04, 0x20}, 0x2, 0x6e6bc0, 0x3, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x4, 0x8001, 0x7, 0xba5}}, 0xe8) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/174) r2 = fcntl$dupfd(r0, 0xe09, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000380)=""/86, &(0x7f0000000400)=0x56) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000540)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r5, 0x2a30, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000680)={r6, 0xff6b, 0x3ff, 0x6}, 0x10) socketpair(0x78befa17f1d9e4b0, 0x800, 0x32, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept(r7, 0x0, &(0x7f0000000700)) r9 = syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0xe70, 0x610100) setsockopt$packet_buf(r9, 0x107, 0x5, &(0x7f0000000780)="13f4b76d97df4b8ca64734fcea24a8d45389d1e3d8a623a69dc6b715768c3dbaeee65062fac51ddad9664e8dede80444cd616e1d21932e9daf8f22684fd79452bae94b7bedeb66131f1617cfa9a4af69a377d13e8a34e4014637bfd868af4f57d1e2819bccddd7b7cec15079c0873437f24caab6f989c5665ae31459b6", 0x7d) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) sendmsg(r10, &(0x7f0000001cc0)={&(0x7f0000000800)=@caif=@dbg={0x25, 0x2, 0x24}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000880)="97bb34ae334958a0c30b624421833887b99f05413cbdd3f4eee9e5fbac36db2000bdb3f760d444a691e7f8460da1cafc0bc7a87a3ce2e06b42eb5e564858c6d5a38c", 0x42}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="874de1a4d135c0058115618478cbda660de21a1584b8f0fcf9401d1b5b552730752a6f1a26119ab3c1ef851fe2a31b1e741405015dfa83df530ecd1a47977ff158e943e05d6dd76204f924c2586d8352f108faaf6bd7d0a164395955ca08a925cb026722a0dbb57d0ecafe5fe11802eed4ff80ba16cf617403d3ca187f1d561671ff3da0d304a6ceba5691da7e4ac311500eca4339ce36d4ec42a08f0b7726dd4ba86589646cfb2b24", 0xa9}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="24645093e025ce8d2eb0d134bf5b3e7673fd1ce6f1dfbabad0f78657eaeeffea6de481df1e1e7f9985f58bf6526cb44e95ec9181ab48e73006ab686b6d39c041aed4389cedf170120450ce15770ccafedb0106960ce5fc7df8e8a8ead75c2809f68e6524ff684f2320ca0cbe7bf07799892f9a63885c6531744d8930bb8dc5fddbef5f0c1ea40a95af87277a8f43e3813571a1310b09", 0x96}, {&(0x7f0000001ac0)="f9f681ed191b564bfadcadf76dd9077869799438119e83db315b5737e1ae63e56479a636816215a098cbe1b97d98861e53a0155bfb67f3f8c35a2e12eb03f0af0606d25a54fa8f9e5744d9bd7658d9ed99ef532eeda2a5fe2e5db0acbdfdd65976493bc9bab9b180807d858ff20683b5378a2f491f8dfc534e09f67e9f96c2b89184488ccd67757a7958632db61ff09aa85773b11bdb0918e8c30b891d7b0e6fcf09b6bb9a16de10d32f347e59c3fa2dd7ea6ac46cd1d4f0b2009d738a06bb0fefc8dc875d8ca7d5bb91bd0efa99a66bc80e90f76b911964db61ff674c2fb16255152f0448ddc2c6dc7c2d0839b5adf889db49c010e8c9", 0xf7}, {&(0x7f0000001bc0)="5df449b03683eb61dd5126bba7075541806b561104f865079d1684fcc5de98dc817e2c2ddf898ecbfe0d03ec0590be4b70dbf0d2ab5c258194028ca9928bca08e608cb184c480ed8bff8ff1685680cc95c8b0d6ee344bdd42119f1d3ebe8889b24362b4ebadee7beb1ab9b70f59606280c", 0x71}], 0x7}, 0x80) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001d00)={0x0, 0xe95}, &(0x7f0000001d40)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001d80)={0x3, 0x6, 0x100, 0x9, r11}, 0x10) connect$caif(r9, &(0x7f0000001dc0)=@dbg={0x25, 0xfc, 0x1}, 0x18) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001e80)={'syz_tun\x00', &(0x7f0000001e00)=@ethtool_stats={0x1d, 0x8, [0x4, 0x9, 0x101, 0x80000000, 0x3, 0x400, 0x318, 0x6]}}) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/ashmem\x00', 0x802, 0x0) fchmod(r12, 0x12) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003500)='/dev/dlm_plock\x00', 0x62ccb0225076d0e6, 0x0) bind$netrom(r13, &(0x7f0000003540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 225.362571] audit: type=1400 audit(1574217000.957:37): avc: denied { map } for pid=7557 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14951 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 225.450151] IPVS: ftp: loaded support on port[0] = 21 02:30:01 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa822e5f43dd6e50d}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x9bc84dfb32eb8ada) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11120080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd7c9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x22000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000480)={0x3, @default, r4}) r5 = semget(0x1, 0x1, 0x8) semctl$SEM_INFO(r5, 0x4, 0x13, &(0x7f00000004c0)=""/227) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x94dfc2d51ffbe2a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000600)={0x3f, 0x3, 0x10000, 'queue0\x00', 0xd4dd8890}) sendmmsg$inet(r6, &(0x7f00000008c0)=[{{&(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="f80f", 0x2}, {&(0x7f0000000740)="4bc3ffc483a7fd2971484589998e3b9b1ff69087c3364032617350af5aced28eda06d340e59b633cb2210de30efce060f77ee2a3d24261811c2ef8dad3d6a7aec14dc2cfa0d9b004d61c218f33f022ebfa80778bf9777baebb5811c37ee3792da0485736dc11057c20f1ff529e26e4a19ed85e0eae8568b1d28ca5244f9022f89ddfd5a27d", 0x85}], 0x2, &(0x7f0000000840)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0xd3, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x4, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}, @ra={0x94, 0x6, 0x10000}, @lsrr={0x83, 0xf, 0x0, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}]}, @ra={0x94, 0x6, 0x1f}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @broadcast}}}], 0x70}}], 0x1, 0x84) r7 = syz_open_dev$midi(&(0x7f0000000900)='/dev/midi#\x00', 0x6, 0x10000) dup2(0xffffffffffffffff, r7) r8 = syz_open_dev$midi(&(0x7f0000000940)='/dev/midi#\x00', 0x80000000, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000980)={0x1, 0x0, {0x80000000, 0x4, 0x1008, 0x2, 0x2, 0x6, 0x0, 0x4}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)={&(0x7f0000000a00)='./file0\x00', r6}, 0x10) r9 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000ac0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TCSETXW(r8, 0x5435, &(0x7f0000000b00)={0xffff, 0x800, [0xfff, 0x2, 0x7fff, 0x0, 0x770], 0x800}) r11 = syz_open_dev$vcsn(&(0x7f0000000b40)='/dev/vcs#\x00', 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000015c0)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000016c0)=0xe8) sendmmsg$inet6(r11, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="9c2e0b492809e1bc51f83bb80e56ec5468137efcc375081f2a19889ed0dd7b5f8b8a49168c151f8173aa607a642c6229630a001ed1dfe94e7aaeacd3f9e46010b2e99afd3613962bb64e436ab373b60a1bc7f4883a8acefbd035ebc2c884987afca95ff05e70aaac8ac16c28a465029b6495662513c83e2f1aed2284334475d45b171551f916f8dfc4ccd6875825302e5fca87cdfddbdb457e9ce8ed39d933e6b50a564a80da5816ec2179fcffa0cc0f863504f946ad2c9b5f1c754198dc6ecfaaa49578041a5a0d0689e00b0013857b67b05404b1f1cfb4d9178a", 0xdb}], 0x1, &(0x7f0000000cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, [], [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x2f, 0x6, [], [@calipso={0x7, 0x28, {0xf1, 0x8, 0x1, 0x8cc2, [0xce, 0x10000, 0x0, 0x0]}}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @dstopts_2292={{0x160, 0x29, 0x4, {0x0, 0x28, [], [@generic={0x3f, 0x58, "3686707d4d7fe97284acf44327ea454ad6fd4b902ebd99cf7e20df5e3c9cb5f420a9e8c55548a7d9b3be94bf04d043bbc2b4b8f5ded011427aa3f3807f6f074e0982a48884035763f765f8df1fe88fafbd6b90b22c339b78"}, @generic={0x8}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x20, 0xd5, "7b4341cc91f794ff57bada11f80b4d219bae49c86f4cdbe0ae921d033b286092e96b2123b3cdf693440ec9265d71e089ac802cf25e5e81c4e8a02e692210f6c5a850c5126b7e20b731932470246670f978298e0cbb50df2191f0e4abd9d4aabda4a6fac5ae6f0c6ea851ee8c1a5c5c6e72a51d1d7d8699f8073d19ae91355ead155bd1bc9eb2cd72a10908828e079c480af484a17263f985e43e5fbe55e1b018597d3b8d87af88875fa5d7ed621c377ec5e278e246749a0f79ebc8b9d8eeb529f01e089ea6ab3a5e68d1f23c5c649c7f30ce450bcb"}, @jumbo={0xc2, 0x4, 0xfffffffd}, @ra={0x5, 0x2, 0x3}]}}}], 0x1f8}}, {{&(0x7f0000000ec0)={0xa, 0x4e21, 0xa8, @local, 0x9}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000f00)="6c1dbc1236bea6eff6a3e4cae7d3f7634edd83e20b4f78eda1bcf0673eace17b463a9d7150bd0043afee8314190fc97f3f886e6cd66645833674ade4ef7208dba0adb59710b80b4ab3bf5b3a5d0a673c17575cea29ab5d5b1c5deb5979cd1eb49d6c24063d08ff5e920501fd0bbdf10d59ed72b1188c4f4a903db289667baedbce981a6fe1e9da5672212f7868ace055a3736838c9ab63923a84037be61b3fa1176c02921e0eb8881de47f59033581e1cb4af2358150350297122937ecf91b7242d239352927", 0xc6}, {&(0x7f0000001000)="8f2e7402ffe3c229a66389b13994183e15404f860806c28b776ef4ee8d792e32722b861e6e33f9d2ccc253893acff1c987edf550dfd67e06e760dc0acacf3fe4e897845f93dd72a6cb5a58c72bdf50d7bbf92d71c087b5f70de15326c6122ca5969bc1798126856ec7b90d799fc682e73772866c7d072e771fa857fc8524b113e9a1e07f679bbbe43f2d69", 0x8b}, {&(0x7f00000010c0)="26f4f3d933628a6d82f875c932656ded2aed13f1ebb034a830ada9ba45a2eb52c7cedfe1e1ac9edaf448824d049b84ae72fe5e3345cd7545d5384078a41c6215ccb4d1a3f46008db4a77b4692de01a7175fdb8a5bbad793fb0c67dddfc0b479dc4446ec3a1ebf3192dbaa0f5afda274afab0061e97df3de7a78d9f2fa8a8cf445c231128277c401992535f05119f0c0b51b6f0e2b3f0901189519313b7fee2121ba1966cb16a5dcef14eb37ddaac07755c7879107555f6b7c4e0", 0xba}, {&(0x7f0000001180)="a1ec42b1865882a7fd4a5b974b95808349e5337df783f6579543b3c3125caa6184f40b1ef7eaa19a13fe6d02a3c6739ba6e4f8d1235d9fdfd83e8fab6769e4284f3d1e7c1adaaf6440d12e07d9a1516328c828b0c9d9bdc10759edbc5f7c58d482dd5a8fe7de7b309792b0ef6a4b1b0a02a22f02b551f4faf1751e1a7cb7ef246be108e4e7ab4223b8d650e582eed7895c27acc98c0f0c00ffc745f2a2d49f92d93e758dd3e9121e89cb2edd1cea841a050aa530ca456bcf5edc00731a2c510e3c2972db37638f85128e18b63fa70e10928225b77e528991d45d96bd05bc", 0xde}, {&(0x7f0000001280)="029e45d5b96bc9ce2f3129f5532631c6b66b30ff20f06fe6ec3e993c41e9fe2ae1090c6fa1b0fc6e7068f9961a574906e092ce40b4cd85a7e10c853dae1e31bdddfd719337d27c609b053f3b815098eefd223e912370c00846f73fce651afdd576d5c1591153efbfafbc9592c745eef21e7d0264b25e0ef81d43d5d333f9198e0719006cc3062f828e0fe5c941d07e9b940a0025839ff5b2be181eb6245894a9c925163a27d86078f8a4963a250eebaa8f921cce888cc28b53913524", 0xbc}, {&(0x7f0000001340)="c2164da1bc65436e8b6c4a3e676c060500c66863a1c5d4c35231fcdb87d62f270657d2730fab26186d39d149f66831ed92eb9b713a6ba85dfa576351f6b84c2b72a84fda882146e99aafa80d716fe978e92d789cfe7a7518430edff7a7d3503179647baf9ec2c2dc630019f93a31f1c32675dcba138d388f3a5618f698c5c200194b3db5df69db49c6c07360e543bfbd3ec92eb46176ebc20c712457d24e394e7b0118c3d4fdd4db1ed63845f34c3fc7044bd24d3a6a86a8e576739db7b2a6e7db35d0035be75a5c5953b58f6a53b642ffc2851084621a9c723551224174a25472a6b301eac71db2f31fc0bbe52abfff78a29a4874d907b09e", 0xf9}], 0x6}}, {{&(0x7f00000014c0)={0xa, 0x4e23, 0x3, @remote, 0xbcb4}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000001500)="7a274ac77928a9babf4088e25a554f411df66b5602206627a2e132c9355988c503a6178d8c534e01e58c9cce9bcf831c7c8e61334b3de63fce41a9521f71dcea942246b1e0a14ae21102c3b65fbb4b851199fee472ebfce12bed553c1e9446f50a9120b9647433268c3f2eec9951131da2134b1e530c579ea7d6", 0x7a}], 0x1, &(0x7f0000001700)=[@hopopts={{0x110, 0x29, 0x36, {0x69, 0x1e, [], [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x38, {0x6, 0xc, 0x1f, 0x0, [0x7c6, 0xfffffffffffffff9, 0x222e, 0x1, 0xfffffffffffffff9, 0x7]}}, @generic={0x5, 0x91, "5195e544255b8825f9ea5f8f20002795754d63f459c7c9c65f5b9c36d3450d407da6cb705f558ce5ead78f2e9ed090a288dbea33da80aaa9d9d75ef2eb8a3ddb1ced5a7bd3e112a82a6e21d68b7f378bfcef4c93af9d641e1032228d7310d0372b60b79e0ca93f1ab5c480629597c703c0a0c02e412d02adb2fb1e08b6e81602891fc25d1059d4ec2fe04e73d31152f3ad"}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x3b, 0x21, [], [@calipso={0x7, 0x20, {0x8000, 0x6, 0x1f, 0x30, [0x0, 0x234d, 0xf53]}}, @generic={0xff, 0xd2, "3542edfb2afa648096d1daa6a1d1bbe056aaa678a071df85c76bcf277aa14b314508d07a0f14f70524e37a937233c1b0c7be36fe47c33d4eb1958f3219ecec5ccf47dbdcdf88936a58ba42f937a6fc313052db60c72be1489b9e5ee070af3cd3f854e8792ce9754da92657b9b1e539a067fa8255128f640eeb6e96f51c1cde2bf99f668ddeaf82cfef4543f09405c7ea2a07014b7eb02d9737c06db74e0226b33d21acc06efaff370ead1bf976d2d4112f57d8a9178aee87b83ba96978ca27dba5d9c8f770f95cdf6e047b06c52bef504775"}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, [], [@generic={0x4, 0x28, "f4476de90b27070d273359e068e3d1519425696eae031e0095037501994c00eacaac5c6583ff1f18"}, @pad1, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0xa9, 0x5, [0x400, 0x95f, 0x8, 0x626, 0x0]}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r12}}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x1e, 0x1b, [], [@generic={0xc0, 0xbb, "ee4b1293a58307c9328d982733c5756f549553b89d31731e3044671414a1cb168def267a4b0728e1f3fe918b9188367dae5ec2e91067b900eba0caa76d03a8df61aa6340ce27694b9f65d8bb93bb531252a185ce906305d38de6b75a41e58daeef991027d2f44d40410b759b46f50bb744e2ad3a4cbf215f20a8248717d04627ddf8da42fe7a995554c62a9df03120ae48ff94094f3416ec53cb1ec29459f30411aa4427a329c0cfff75aa9cb8a8ff6b20e4e39aafd4afb9c01515"}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x4}, @jumbo]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x42aa}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x3, 0x81, 0x0, [@dev={0xfe, 0x80, [], 0xe}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x84, 0x5, [], [@ra={0x5, 0x2, 0x3ff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo, @calipso={0x7, 0x10, {0x9f, 0x2, 0x2, 0x3, [0x8]}}, @jumbo={0xc2, 0x4, 0x7f}, @pad1]}}}], 0x458}}, {{&(0x7f0000001b80)={0xa, 0x4e21, 0x0, @loopback, 0x1000}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001bc0)="a3763949f1fe27b48d1801125dc2233af9b0ae51475188d870f07d9a25341d42b5555dd5fd9e32799376dac418281d73fd6ed8433608fe430eddf720cfe60d2d1b5e57b6d2a3114719fbee28311ba7922343db7e654659aaead624a46dd246a510493339233d9a1e1ef361f1b93d586dddf8060c024451dbb0f6cdbd92ebd7c8f727a9213dc324d3414af6837d2ceb62a9593a", 0x93}, {&(0x7f0000001c80)="a111a280a401462ffcb5dca18ac21979eae4124869ae783740c7d36f392d9274c8ab7bb6a1f4d64d34d75da3db8ee6b23d269e5c7943266654f9064b16bca9a84d38d986bcc9f70c121ed16b53d45d918553eb8de328dfdcf056f66a771edba106c3d8767e66d7a97c76408dfbc624baaf4882e3675e077ab6af87fbf097aa3fc2e3a3d92b94b7e1caec6d8649d5840cc6f72c0544363757a73c73fabd71ea9e6a48", 0xa2}, {&(0x7f0000001d40)="540f1f50fe67fb0064d5bf3e7bf16d9fe13136a00d19bb29fe24d54bf0a8c45f2ef65984f332891c971121996bfc8c5cf234d1d71932f6018e7b08cb490eb80488c3ae8a99afe96ea253f750082093a4080a510c36e89f4c31380e0a4bb03a243881f8c540b66f84d704a1c3505aa114ae517b46e809a8c04d56726deef5bc8d9052a1f810c64919d5e53a7333cc60993ca4aafdee9872b997a591c02e", 0x9d}, {&(0x7f0000001e00)="d4ddf4e944c56bb79a5d254658dc4180ebdae23d58431086ada560dad808cbeeac8e554847975c700f7abfc28735b8d095b407791521368ea020d7bf166a3d261c0c31eeaecc82774c6f9f00b96043ecfc5e5bab95f3eec4788bebec2953dd6adfcab169a2ee0f98dfc8f877dc5ac7a216aabbefa4c1a295304e48b8243672c4b6b4bbca438452051afc4c8ad809a9d6bcf01a937da4e0da63e89af90a5c7a27822752148d6f90ccfe2cae825ebfe97d1cb0e1218807882ca4aa513a5ee517b473ee177f27953f561fd44a5524479e625653298be98492eee91e5e4cae277e468280972056323ce1e38bf1918be256ad46cdaa0fd508", 0xf6}], 0x4, &(0x7f0000001f40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0x18}}, {{&(0x7f0000001f80)={0xa, 0x4e23, 0x1, @loopback, 0x17}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001fc0)="3cff37e8d88042c61ad6971afacdd39f268f44ed21717a66e4ce1c1bb6d0890283436a3d3ed6aca7", 0x28}, {&(0x7f0000002000)="d6b8fcc474525efd5d72e3814d83602bf4f9e23e21f4bdd8da3f1c0ce309717a7d0146c2220a113ed8b6360649bbbb085f0d662d7380cebc4f53d92d7abf27322f32bd69baebfd903b089dd1cb316a6a513e74eab05abf2f2db2353e8e9dbb060003eeb55f70af91250fa1b05fd9ce8f87872c01b79d96f689e15c3e8c3c01e0888407ec0263e9cd2ccb85f9e5aa8f2599e3bf3e7bf4203bfde9a6cc59afd81cbd72a029000ab8ca493a83707b5358b1534d33ca5dec563ba044e6df71f45843bfbe766ea8136a3f36b7cea2287e33b25b946173cc046516143c9d6abe6cc7", 0xdf}, {&(0x7f0000002100)="22d8", 0x2}], 0x3, &(0x7f0000002180)=[@hoplimit={{0x14, 0x29, 0x34, 0x803}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x3, 0x1, 0x0, [@remote, @ipv4={[], [], @multicast1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002200)="8c391768b85e416ca5f160b17d9c473b15b41b", 0x13}, {&(0x7f0000002240)="c546cabe8d87f36882e5ea46a3a4e3949e03029fbc7d76a8324256f107236ee281393c5465c05d8a91aa13fa782fbaddfd201836d3b5c15a4f5b788f719e319cea4950faeec866414a5dd8e50379807b1042717d971f0cc9b0147351508473e9482ba6a12b1a383b4a1b0e039f8f3bada074d2a9ebe8da3bc77ff945a7bf63bd734255c09d4c04119a03c227c3610598cd67e521e31a31f60c6eb5fa89c1028f5216e14b47eb1b19f94dc9244e6b42913ffd5b489beb804817598a5db29ff3bee8f8b08d9ff00cf6e316ad7710d16faf2b62b7f1dda49ea51ca41f609057f5cf7618b1e7afb9ec", 0xe7}, {&(0x7f0000002340)}, {&(0x7f0000002380)="bb043bccc5d4edbadd68ef356a16046b54dcba2697ff43f1e0d9b99c7e24ee355e8623be5d61c48b61271af8c6d20bb81d0ac763bb1eb96f4680faeb9d8094c8b4cb51cb610ff4512a34b0e88e0886defa7c3d3e2814111912d7b5172735b7ac7d813b0e64c65141b1ea715289358e1c0ac33c3619a27ee4c4938c986c63c62a7efe33107b5bd85e94d42438db5716a1705b6d170ac6101ed59835faf7adab7ae64e01787a4359af53ac75c02c29d1c874c0df665def6c4ee5d1ce8d02f89757c84e3f91329e665333ee7e02c77994a947", 0xd1}, {&(0x7f0000002480)="64963e08d9667568525773047ff8a29604b5222dc8f016aead5fe8fb814cc307", 0x20}, {&(0x7f00000024c0)="24a7028b", 0x4}, {&(0x7f0000002500)="63466fc9ea28bad7705e1d62ff2be68ad47173e3826e7f20684f2da96c544b7e52a1d61349812fa40166ca64a3b9ec10aedb64f2c7847dfe237fa68c39ad76007cbabae9", 0x44}, {&(0x7f0000002580)="9d838a16b6bdf163d51d6ddb051c31a3d95966e5953ac374c81fef9758bdaae31a75c296af1ef02ddc5077b5644782d82354d834196c563cd0d833ff9f613f39b85f", 0x42}, {&(0x7f0000002600)="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", 0x1000}], 0x9, &(0x7f00000036c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}}], 0x6, 0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000003880)={0x18, 0x0, {0x2, @broadcast, 'team_slave_0\x00'}}) r13 = syz_open_dev$cec(&(0x7f00000038c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCGSW(r13, 0x8040451b, &(0x7f0000003900)=""/58) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003940)={0xaa9354545e18bc8f, 0x200, 0x3, {0x0, 0x2710}, {}, {0x2, 0x1}, 0x1, @can={{0x4, 0x1}, 0x3, 0x0, 0x0, 0x0, "f37a1cda9d6c5471"}}, 0x48}, 0x1, 0x0, 0x0, 0x5d839ad20afffdd5}, 0x8000080) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r14, &(0x7f0000003f80), 0x0, 0x2002, 0x0, 0x0) [ 225.557540] chnl_net:caif_netlink_parms(): no params data found [ 225.654520] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.670134] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.689966] device bridge_slave_0 entered promiscuous mode [ 225.698682] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.706493] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.714228] device bridge_slave_1 entered promiscuous mode [ 225.739744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.757942] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.782466] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.785454] IPVS: ftp: loaded support on port[0] = 21 [ 225.791665] team0: Port device team_slave_0 added 02:30:01 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0xbea, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xae, "3cfb9a2dbdb9dfe15038590cdc2e31b47034fca5d87945b2a5cedea70c82a7c76ac491cc8daa2ca5289d5ce3e063a689826f3a46f3845c8ee95ae4b2115c55069583626482b189fc9a2f4659042959790de3875f32b78dd1f6fb205215d8d2b37c58fb72ee496a6006527506c45a51fdf468796307cea0e7d6464351697b4d98ad833f6e7babcd57d280e0d1311e99b18434c3511352631227a3fb7d0d9d6133ebc538b858f8b6118450710eefb6"}, &(0x7f00000001c0)=0xb6) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r2, 0x2e, 0x7d, "fa41cdb692922191e47c1321a606518b98bf2b144936f322aa43c438b9a3c76ec4310a6f4f9c69cf093c683c0fa8b66580f77c630a851317568763b30bae269ec39cdb01cfc598b27e8905fb8e2a1f497cb741ef73606759fd5082c434bb2bf058738f3afb57551969e3516c9a98d0fe97e09da91f9cc1ad63106f1e4b"}, 0x85) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x3bf879d6, 0x904000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000380)={0x5, 0x2, 0x6, 0x0, 0x0, [{r0, 0x0, 0x6}, {r0, 0x0, 0x5}, {r4, 0x0, 0x401}, {r5, 0x0, 0xa7f6}, {r6, 0x0, 0xfffffffffffffffd}, {r1, 0x0, 0x961}]}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000480)=0x7, 0x4) r7 = getpgid(0xffffffffffffffff) getpriority(0x0, r7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000540)='#nodev\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r8, r0, 0x0, 0x19, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', r9}, 0x30) r10 = syz_open_pts(r4, 0x4002) ioctl$TIOCGISO7816(r10, 0x80285442, &(0x7f0000000600)) r11 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x80000000, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000680)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x10) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vsock\x00', 0x8000, 0x0) ioctl$LOOP_GET_STATUS64(r12, 0x4c05, &(0x7f0000000740)) r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/mls\x00', 0x0, 0x0) write$capi20(r13, &(0x7f0000000880)={0x10, 0x1, 0x4, 0x3, 0xec, 0xfffffffa}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000008c0)={0x8, 0x2}) r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e00)='ns/user\x00') ioctl$FS_IOC_GETFLAGS(r14, 0x80086601, &(0x7f0000000e40)) ioctl$CAPI_REGISTER(r13, 0x400c4301, &(0x7f0000000e80)={0x8001, 0x5, 0x1}) r15 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000ec0)='cgroup.procs\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r15, 0x40c, &(0x7f0000000f00)=0x5) [ 225.801892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 225.823094] team0: Port device team_slave_1 added [ 225.843679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.862501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.933333] device hsr_slave_0 entered promiscuous mode [ 225.971980] device hsr_slave_1 entered promiscuous mode 02:30:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000640)=0x94ec1f997eca4aa5, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000006c0)=0x1, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000700)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bind$inet(r2, &(0x7f0000000780)={0x2, 0x4e23, @rand_addr=0x5c}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000007c0)={0x7cb, 0x2, 0x3000000}, 0xc) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000800)) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000880)={0x3beb2103, "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"}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000a40)={0x1, 0xfe7726b430f5b4a4, 0x4, 0x10, {}, {0x2, 0x0, 0x0, 0x2, 0x4, 0x2, "10266041"}, 0x5, 0x1, @planes=&(0x7f0000000a00)={0x1, 0x1c, @fd, 0x20}, 0x4}) r4 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) setregid(r4, r5) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000b40)=""/56) r6 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x7ff, 0x40206) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000bc0)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) readlink(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)=""/4096, 0x1000) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) pipe2(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000001cc0)='/dev/sequencer2\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./file0\x00', 0x492440, 0x8) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/dlm-control\x00', 0x20040, 0x0) linkat(r8, &(0x7f0000001d40)='./file0\x00', r9, &(0x7f0000001dc0)='./file0\x00', 0xdd27198ac0169f53) pipe(&(0x7f0000001e00)={0xffffffffffffffff}) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000001e40)) [ 226.012322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 226.041383] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 226.053932] IPVS: ftp: loaded support on port[0] = 21 [ 226.065935] audit: type=1400 audit(1574217001.657:38): avc: denied { create } for pid=7558 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 226.119894] audit: type=1400 audit(1574217001.687:39): avc: denied { write } for pid=7558 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 226.167744] audit: type=1400 audit(1574217001.687:40): avc: denied { read } for pid=7558 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 226.239465] IPVS: ftp: loaded support on port[0] = 21 [ 226.250001] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.256491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.263456] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.269859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.280652] chnl_net:caif_netlink_parms(): no params data found 02:30:02 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x124080, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80000, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="df699432822d000962b139a2adb6b0104a6b72d582aa40e69e1c5d1c3fd69091f3d4b8b86c8f484582ee5cfe9eb526ab44acb20392f96b9b974c447f94e7d36220ca46e8a6cd3a524e2cdd9cc23f5b276a4d2c96bd1559e8ef9db383a4890fc534f51aafc7f79bda79fd9378efcae128c89aa41ae67aa8005017468882bc7d28d933c275b52245441469e971e5abc8ee18568dfe7e23a287991eb8356fe67f5f87f6950d341bacb462dd", 0xaa) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000001c0)=""/214) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0x5c86, 0x155}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0x100}, 0x8) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000440)={'syz0\x00', {0x6, 0x5, 0xf8, 0x4}, 0x24, [0x7f, 0x0, 0xe79c, 0xb9, 0x27b, 0x80, 0x8001, 0x1, 0x0, 0x0, 0x8, 0x5, 0x0, 0x7ff, 0x4, 0x0, 0x7, 0x1ff, 0x7fff, 0x3f, 0x1000, 0xff, 0x3, 0x9a, 0x0, 0x0, 0x8ee, 0x9, 0x6, 0x9, 0x9, 0xfffffffc, 0x3, 0xd40b, 0x7fffffff, 0x7, 0x1, 0xd55, 0x3, 0x7f, 0x8, 0x9, 0x6, 0x3f, 0x8, 0x4, 0x6, 0x0, 0x1f, 0x1, 0x2, 0x2, 0x3, 0x9, 0x3, 0x81, 0x80000001, 0x7, 0x101, 0x6, 0xa3, 0xfff, 0x8, 0x1], [0x18, 0x7, 0x2, 0x401, 0xfffff91f, 0x80000000, 0x5, 0x200, 0x7, 0x6, 0x4, 0x3ff, 0x80000000, 0x7ff, 0x0, 0xea7, 0x80000000, 0x80, 0x2, 0x1ff, 0x9, 0xe9, 0x3e7c, 0x2, 0x8000, 0x5, 0x4, 0x7, 0x9, 0x6, 0x7, 0x7f, 0xaf17, 0x4, 0x0, 0x2, 0x9, 0x5, 0x2, 0x8f, 0x0, 0x53a1, 0xcd, 0x10001, 0x1, 0x9, 0xfff, 0x1, 0x1b, 0x5, 0x3, 0x0, 0x2, 0x5, 0x8, 0x5, 0x199b, 0xdd9, 0xe0, 0x1f, 0x6, 0x400, 0x6, 0x200], [0x9, 0x6, 0x1, 0x0, 0x81, 0x5, 0x2, 0x3ff, 0xfffffa85, 0x7fffffff, 0x6, 0x401, 0x401, 0x7fff, 0x9, 0x1e72, 0x100, 0x9, 0x3ff, 0xfff, 0x8, 0x1000, 0xabed, 0xfff, 0x7, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x7, 0x4, 0x7, 0x2, 0x4, 0x3ff, 0x6, 0x2, 0xffff0000, 0x4, 0x10000, 0x6c1a38ea, 0x11, 0x3c, 0x0, 0xc09, 0xc000000, 0x8, 0x8e, 0x4, 0x3f, 0x9, 0x918, 0x3, 0x40, 0x10000, 0x0, 0x81, 0x3, 0x8, 0x0, 0x9, 0x7], [0x7, 0x0, 0x2, 0x0, 0x4, 0x2, 0x80000000, 0x19, 0xb0b9, 0xcd4, 0x1, 0x5, 0x80, 0x9, 0x7, 0x0, 0x0, 0x4, 0x7ff, 0x400, 0x3, 0x1, 0x2, 0x7f, 0x20, 0x0, 0x2, 0x1f, 0xfff, 0x6ef, 0x100, 0x8, 0x12, 0x2, 0xffffffc1, 0x10, 0x3f, 0x10001, 0x7f, 0x9b, 0xa, 0x25078000, 0x9, 0x5, 0x6, 0x3ff, 0x1f, 0x4, 0x860, 0xa6c, 0x1, 0x80000000, 0x20, 0x81, 0x4, 0x246, 0x960, 0x0, 0x2, 0x80000001, 0xa9, 0x80000001, 0x9, 0x40000000]}, 0x45c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000008c0)) r6 = syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0x6, 0x80642) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000009c0)={'nat\x00', 0x0, 0x3, 0x2b, [], 0x1, &(0x7f0000000940)=[{}], &(0x7f0000000980)=""/43}, &(0x7f0000000a40)=0x78) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x3f, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000ac0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000b00)=@sack_info={0x0, 0x7fff}, &(0x7f0000000b40)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000b80)={r9, 0x8, 0x3, [0x40, 0x101, 0xd3]}, 0xe) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000000bc0)) r11 = syz_open_dev$vcsa(&(0x7f0000000c40)='/dev/vcsa#\x00', 0x1, 0x40) r12 = open(&(0x7f0000000c80)='./file0\x00', 0x189000, 0xd0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0x4101, 0x0) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000d00)={r12, 0x100, 0xc0000, r13}) setsockopt$inet6_tcp_buf(r13, 0x6, 0xe, &(0x7f0000000d40)="01672ac4ae85611b98f3b46757d5f90a3d9cf1c595b37d28ef6305b4579a74ac56b87f8e0088bb71a370d4aa56e0ba4db45a90f61953df300568513fba771062fd2d260c9cf5027e0fc8af7cfd742d768d4768555ae07359d00555341fb0eb2728a5ab85c0e4158e77db630bdc4e184b123fb7dabf711315f8156b5436d39f0d9b8907d815e3b896951bcae28f5b26beefa85878f7178d703a7375304e6223f0a7f3760b56ba186685", 0xa9) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/full\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r14, 0x89ea, &(0x7f0000000e40)) [ 226.437537] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.449718] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.470999] device bridge_slave_0 entered promiscuous mode [ 226.539264] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.557105] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.567116] device bridge_slave_1 entered promiscuous mode [ 226.578307] chnl_net:caif_netlink_parms(): no params data found [ 226.599043] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.607618] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.619581] chnl_net:caif_netlink_parms(): no params data found [ 226.669402] IPVS: ftp: loaded support on port[0] = 21 02:30:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@null, @netrom, @null, @null, @bcast, @remote, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8000, 0x400) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x398, 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x4000, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x88) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r3, r4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xe1, "f472033c3423f3f36fe453d72800d3994f8ad0247c9b4a2c14f41323eb636f1173dc437dcdbc47d9e5bbb6e99300bfbc8163534714f04bb650a5099fc81620784c60eec09688c7010898b6686b2a214bbcbf073ed54eeaec0c6b674546a88505607e73e422383893580e08fd0061d5e7d3caeda93703490948a948984a780601bb378760456fda77a4305bb5251bcc8ff9c43592169493ede6678dd783066301a717bbd386fae8871c5380d78e29ad77ea6cc7d4571bfeb81014b6587bb1393346f2568117b0ffee535d8255d6d04dbd165a804464f9fdb951ce437da517ffaf1f"}, &(0x7f0000000380)=0xe9) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000003c0)=r5, 0x4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$cgroup_int(r6, &(0x7f0000000400), 0x12) preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/164, 0xa4}], 0x3, 0x7) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x2800, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000700)={r8}) r10 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000740)) r11 = accept$alg(r9, 0x0, 0x0) setsockopt(r11, 0x0, 0x8001, &(0x7f0000000780)="d677b830314d3142eb8b1e63a1d9111e8b0d07e960bfcb7f5f2eb03942a1d15c90a02720ef6b54a8c98e6523afda8490aae7e8587c09516b7edd97904bd1aa7839cd37ddfbd6f596cc11920586b02e48ea74f900bc62de1edeb7b020b9c9f703069edb6465e09cc94f2870f6c936d1f1739119c1104b9b0b6d0d54e566d9b4dfde1a2e12f05501d9bd9a5198aff89a9cbb4f9e2a7de88fa1b92ec87fa22217782009b1f1328a915ea57af7c870c0a81ea4ac8280c539fa1c9880c0dca4e201219784c8c73929a36988c769e9467e51303e7b5a22a731ed09ff371fd8ff4d729de03725", 0xe3) r12 = accept4(r4, 0x0, &(0x7f0000000880), 0x800) poll(&(0x7f00000008c0)=[{r12, 0x1051}], 0x1, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000900)='/dev/loop#\x00', 0x7, 0x600802) write$binfmt_elf32(r13, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd8, 0x1e, 0x6, 0x5, 0x0, 0x3e, 0x9, 0x148, 0x38, 0x17, 0x3, 0x7, 0x20, 0x1, 0x401, 0x2, 0x4}, [{0x4, 0x401, 0x1f, 0xfffffffe, 0x10000, 0x6, 0x7ff, 0x80000001}, {0x0, 0x3ff, 0x9, 0x3ff, 0x100, 0x1, 0x9baf, 0x2}], "a3af34c7b68d8625bf5e98b7a65dd8d275a37458dcf9003086a44e1f881e108cbae7257a68b7a1e38bcf6e07a32bb4edf23e169747da1f82edee3629fb89d3862d6768e44a653cf7e38bbcbc136c63aeee2704754bf7e7de", [[], [], [], [], [], []]}, 0x6d0) r14 = syz_open_procfs(0x0, &(0x7f0000001040)='net/icmp6\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000001080)={0x4, 0x1, 0x200, 0x5, 0x1}, 0x14) r15 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/capi/capi20ncci\x00', 0x202c00, 0x0) bind$inet(r15, &(0x7f0000001100)={0x2, 0x4e22, @local}, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000001140)={0x7, 0x0, 0xb5e, 0x10, 0xffffff81, 0x9, 0x4}) r16 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r16, 0x81009431, &(0x7f00000011c0)) [ 226.694977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.735578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.767690] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.793854] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.832351] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.838779] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.846615] device bridge_slave_0 entered promiscuous mode [ 226.857557] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.864293] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.871737] device bridge_slave_1 entered promiscuous mode [ 226.884797] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.892849] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.900203] device bridge_slave_0 entered promiscuous mode [ 226.907678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 226.915065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.922502] team0: Port device team_slave_0 added [ 226.943002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.944920] IPVS: ftp: loaded support on port[0] = 21 [ 226.950962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.964302] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.971205] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.978140] device bridge_slave_1 entered promiscuous mode [ 226.989247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.997155] team0: Port device team_slave_1 added [ 227.005024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.013283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.023524] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.035002] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 227.041901] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.055609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.066299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.090517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.098983] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.128645] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.135966] team0: Port device team_slave_0 added [ 227.192336] device hsr_slave_0 entered promiscuous mode [ 227.240325] device hsr_slave_1 entered promiscuous mode [ 227.281459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.289594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.297532] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.303898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.320898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.328119] team0: Port device team_slave_0 added [ 227.334269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.341816] team0: Port device team_slave_1 added [ 227.347428] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 227.359735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.367369] team0: Port device team_slave_1 added [ 227.373392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.384017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.391429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.398803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 227.408544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.415909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.434208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.445150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.452913] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.459294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.473469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.523029] device hsr_slave_0 entered promiscuous mode [ 227.570172] device hsr_slave_1 entered promiscuous mode [ 227.610763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.621493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.653291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.661504] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 227.670666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.712060] device hsr_slave_0 entered promiscuous mode [ 227.750133] device hsr_slave_1 entered promiscuous mode [ 227.792395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 227.799253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 227.810933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.824012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.832652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.842718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 227.849696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.858506] chnl_net:caif_netlink_parms(): no params data found [ 227.879590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.887697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.896574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.948712] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.972716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 227.979508] chnl_net:caif_netlink_parms(): no params data found [ 228.006470] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.013098] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.020717] device bridge_slave_0 entered promiscuous mode [ 228.029542] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.036323] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.043511] device bridge_slave_1 entered promiscuous mode [ 228.052184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.059900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.070533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 228.081741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.103086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.113870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.123866] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 228.130174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.175843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.184017] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.198794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.215531] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 228.230744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.246127] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 228.255271] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.261862] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.268786] device bridge_slave_0 entered promiscuous mode [ 228.276764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.285128] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.292569] team0: Port device team_slave_0 added [ 228.298511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.305572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.312488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.319385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.330342] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.336704] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.344324] device bridge_slave_1 entered promiscuous mode [ 228.363894] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.374713] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 228.381495] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.387865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.396023] team0: Port device team_slave_1 added [ 228.405344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.415684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.426888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.434888] audit: type=1400 audit(1574217004.017:41): avc: denied { associate } for pid=7558 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 228.476339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.502305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.516316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.537689] team0: Port device team_slave_0 added [ 228.548560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.556138] audit: type=1400 audit(1574217004.137:42): avc: denied { create } for pid=7580 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:30:04 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x8}, @in6={0xa, 0x4e22, 0x3, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e21, 0xfffffffc, @ipv4={[], [], @local}, 0x2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x80, 0x1000}, &(0x7f0000000180)=0x8) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x2, 0xa, 0x80, 0x100, 0x16, 0x0, r1}, {0xf6, 0x8, 0x1f, 0xda0b, 0x1, 0x3ff, 0x3f, 0x4}, {0x650836bf, 0x5e04, 0x20}, 0x2, 0x6e6bc0, 0x3, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x4, 0x8001, 0x7, 0xba5}}, 0xe8) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/174) r2 = fcntl$dupfd(r0, 0xe09, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000380)=""/86, &(0x7f0000000400)=0x56) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000540)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r5, 0x2a30, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000680)={r6, 0xff6b, 0x3ff, 0x6}, 0x10) socketpair(0x78befa17f1d9e4b0, 0x800, 0x32, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept(r7, 0x0, &(0x7f0000000700)) r9 = syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0xe70, 0x610100) setsockopt$packet_buf(r9, 0x107, 0x5, &(0x7f0000000780)="13f4b76d97df4b8ca64734fcea24a8d45389d1e3d8a623a69dc6b715768c3dbaeee65062fac51ddad9664e8dede80444cd616e1d21932e9daf8f22684fd79452bae94b7bedeb66131f1617cfa9a4af69a377d13e8a34e4014637bfd868af4f57d1e2819bccddd7b7cec15079c0873437f24caab6f989c5665ae31459b6", 0x7d) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) sendmsg(r10, &(0x7f0000001cc0)={&(0x7f0000000800)=@caif=@dbg={0x25, 0x2, 0x24}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000880)="97bb34ae334958a0c30b624421833887b99f05413cbdd3f4eee9e5fbac36db2000bdb3f760d444a691e7f8460da1cafc0bc7a87a3ce2e06b42eb5e564858c6d5a38c", 0x42}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="874de1a4d135c0058115618478cbda660de21a1584b8f0fcf9401d1b5b552730752a6f1a26119ab3c1ef851fe2a31b1e741405015dfa83df530ecd1a47977ff158e943e05d6dd76204f924c2586d8352f108faaf6bd7d0a164395955ca08a925cb026722a0dbb57d0ecafe5fe11802eed4ff80ba16cf617403d3ca187f1d561671ff3da0d304a6ceba5691da7e4ac311500eca4339ce36d4ec42a08f0b7726dd4ba86589646cfb2b24", 0xa9}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="24645093e025ce8d2eb0d134bf5b3e7673fd1ce6f1dfbabad0f78657eaeeffea6de481df1e1e7f9985f58bf6526cb44e95ec9181ab48e73006ab686b6d39c041aed4389cedf170120450ce15770ccafedb0106960ce5fc7df8e8a8ead75c2809f68e6524ff684f2320ca0cbe7bf07799892f9a63885c6531744d8930bb8dc5fddbef5f0c1ea40a95af87277a8f43e3813571a1310b09", 0x96}, {&(0x7f0000001ac0)="f9f681ed191b564bfadcadf76dd9077869799438119e83db315b5737e1ae63e56479a636816215a098cbe1b97d98861e53a0155bfb67f3f8c35a2e12eb03f0af0606d25a54fa8f9e5744d9bd7658d9ed99ef532eeda2a5fe2e5db0acbdfdd65976493bc9bab9b180807d858ff20683b5378a2f491f8dfc534e09f67e9f96c2b89184488ccd67757a7958632db61ff09aa85773b11bdb0918e8c30b891d7b0e6fcf09b6bb9a16de10d32f347e59c3fa2dd7ea6ac46cd1d4f0b2009d738a06bb0fefc8dc875d8ca7d5bb91bd0efa99a66bc80e90f76b911964db61ff674c2fb16255152f0448ddc2c6dc7c2d0839b5adf889db49c010e8c9", 0xf7}, {&(0x7f0000001bc0)="5df449b03683eb61dd5126bba7075541806b561104f865079d1684fcc5de98dc817e2c2ddf898ecbfe0d03ec0590be4b70dbf0d2ab5c258194028ca9928bca08e608cb184c480ed8bff8ff1685680cc95c8b0d6ee344bdd42119f1d3ebe8889b24362b4ebadee7beb1ab9b70f59606280c", 0x71}], 0x7}, 0x80) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001d00)={0x0, 0xe95}, &(0x7f0000001d40)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001d80)={0x3, 0x6, 0x100, 0x9, r11}, 0x10) connect$caif(r9, &(0x7f0000001dc0)=@dbg={0x25, 0xfc, 0x1}, 0x18) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001e80)={'syz_tun\x00', &(0x7f0000001e00)=@ethtool_stats={0x1d, 0x8, [0x4, 0x9, 0x101, 0x80000000, 0x3, 0x400, 0x318, 0x6]}}) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/ashmem\x00', 0x802, 0x0) fchmod(r12, 0x12) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003500)='/dev/dlm_plock\x00', 0x62ccb0225076d0e6, 0x0) bind$netrom(r13, &(0x7f0000003540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 228.583765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.592405] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.598796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.606424] audit: type=1400 audit(1574217004.137:43): avc: denied { ioctl } for pid=7580 comm="syz-executor.0" path="socket:[27765]" dev="sockfs" ino=27765 ioctlcmd=0x2a30 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 228.637813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:30:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r8, r9, 0x0, 0x320f) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffe35) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r11, r12, 0x0, 0x320f) ioctl$VIDIOC_G_SELECTION(r11, 0xc040565e, &(0x7f0000000000)={0xf, 0x0, 0x0, {0x2, 0x9, 0x8000, 0x4}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r13, r14, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r15, r16, 0x0, 0x320f) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r15, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x8, @loopback, 0x200}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r14, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r17}}, 0x18) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) [ 228.682596] device hsr_slave_0 entered promiscuous mode [ 228.714796] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 228.720629] device hsr_slave_1 entered promiscuous mode [ 228.782560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 228.796770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.807714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.815597] team0: Port device team_slave_1 added [ 228.839081] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 228.854336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.866011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.878241] bridge0: port 2(bridge_slave_1) entered blocking state 02:30:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r3, 0x0, 0x7, &(0x7f0000000140)='md5sum\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000000c0)={0x1, 0xff10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1001, 0xffffffff}, 0x20400, 0x1}, r4, 0x0, r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0x4, 0x2, 0x6, 0x8, 0x5, "dbcf17c657cfa46f38c445ee8e63ce24b2dd88", 0x80000001, 0xd2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 228.884672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.927696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.935715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.947388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.958922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.969545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.982240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.995794] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.006147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.017247] audit: type=1400 audit(1574217004.607:44): avc: denied { write } for pid=7596 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 229.020984] hrtimer: interrupt took 34874 ns [ 229.066421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.075440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 02:30:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4048ae9b, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {0x3000}}) dup2(r5, r4) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xb03200, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x5d, &(0x7f0000000040)={@remote, @remote, @initdev}, &(0x7f0000000080)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 229.091103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.099649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.126055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.133575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.141072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.148013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.155363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.163533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.172357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.183605] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.208237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 229.216977] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.227219] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 229.234036] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.244379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.281828] device hsr_slave_0 entered promiscuous mode [ 229.320094] device hsr_slave_1 entered promiscuous mode [ 229.362850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.372000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.380097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.393805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.401854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.409455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.418744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.427085] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.433496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.440496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.448289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.455999] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.462386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.469570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 229.478710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.488884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.500469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.507565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.520048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.528090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.536427] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.542846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.550693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.558487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.566506] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.572965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.581170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 229.588306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 229.605176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.616735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.630406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.637952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.645793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.653700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.664542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 229.673142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.688476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.696212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.704551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:30:05 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) sync() [ 229.712978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.721331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.731094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.746097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.761849] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 229.767908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.794496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.805303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.828356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.837366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.845636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.858808] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 229.875673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 02:30:05 executing program 0: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8e001) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) keyctl$get_persistent(0x16, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) keyctl$get_persistent(0x16, r6, 0x0) setresuid(r4, 0xee00, r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) ftruncate(r7, 0x200004) sendfile(r0, r7, 0x0, 0x80001d00c0d0) [ 229.905690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.914824] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.922446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.934794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.944106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 229.952637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 229.963541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 229.977074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.995031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.002283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.015206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.023153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.031008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.037777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.045810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:30:05 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x8800000) [ 230.060909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.072627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.079564] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.098983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.114739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.120028] audit: type=1800 audit(1574217005.697:45): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0 [ 230.128886] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 230.152564] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.159165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.167741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.178932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.186863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.196598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 230.221910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.240408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.250117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 230.260405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.267892] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 230.278919] audit: type=1800 audit(1574217005.867:46): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0 [ 230.315524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.345501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.362606] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.376423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.387390] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.401325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.409053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.419662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.428228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.436470] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.442908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.449917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.457681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.465819] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.472229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.479128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.486123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.493090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.504223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.517160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.525887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.537557] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 230.549008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.565410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.578366] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.586591] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.598640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.607698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.618111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.628500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.645265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.656683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.665828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.675735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.696691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.698589] Unknown ioctl 19461 [ 230.713044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.722854] Unknown ioctl 19461 [ 230.727634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.735099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.747806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.756828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.767315] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 230.776033] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.791846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 230.807223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.819695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.841294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 230.858203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.867429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.882468] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.899513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.910222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.920941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.928770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.936897] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.943342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.951254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.961527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.971353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.984431] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 230.992068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.000559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.008267] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.015368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.024112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.035513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.043598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.052263] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 231.063465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.071286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.078128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.085398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.093871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.105170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.113703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.121132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.128298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.137422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.149468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 02:30:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000100)={0xbe, 0x1f}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r4, 0x0) tkill(r1, 0x1002000000016) 02:30:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) syz_mount_image$nfs4(&(0x7f00000013c0)='nfs4\x00', &(0x7f0000003b40)='./file0/file0\x00', 0x1, 0x6, &(0x7f0000003ec0)=[{&(0x7f0000003b80)="f8a3812e5413aa5f9a", 0x9, 0x8}, {&(0x7f0000003bc0)="54ad92ab06242c1d9c590ac7cf9696d57f9a4c5bf45e66fdacb05b7153e965d796f29ea316c5792c746c056aa6066f5cdb3389ccbc6d5befb0937857262c30f244fcca23aa8d0f88176359747f5045b7439b50", 0x53, 0x6}, {&(0x7f0000003c40)="a1794f50078472d9b832d6e667472125af3a40e42547883b46160003e21cdd9f3d039eda7fcce21b89134a735d80d84072d50dc4b2dad95f81124e470fbfdb8ef88fbcea33c2832a510af31813a80babb37318d3036c7b15a347285fd055e35cf0d2d85f8732fb31628e309e9c904c02e05d692438cb1b8c", 0x78, 0x7fffffff}, {&(0x7f0000003cc0)="4211800bffe510680e1c6f9f7f5e8bbc5c4d371c4ddb90be65fcad0a4328ae847337f3af34b345de430f944f19b06733943aa6fd980fafafcdebfde93406eae0859364808cd8d7e08f05b37d5864cd37fe6440e5b80d3cc8019bdd3a866a99e146f9cd5b64", 0x65, 0x7fff}, {&(0x7f0000003d40)="99056d09800d045fe4b72914b3c7331df1017a0d9ebc20f301f27cace2cb54ac53c6f5c58914d945f91569947c419b0e2624b7472c293499894ca4722820a4e98896b68c644f41d500ae48beddaa9247fb233ed43f77c522812eee8ba1e0401fb89e9d7b95394423753c0148423d7f25e1142ca7bf214224f894038384658355e47d27ec88bd4c10cf656a8d20514d74a7dac071c03d9acf2f0442f4a9224a7d230b1d1b0ef433899259a52313fa07a58383fad88c3d98bc5f1af78d35531f5410b8949c085427d4c3ff0af992a7348ae4", 0xd1, 0xfffffffffffffc01}, {&(0x7f0000003e40)="3b0065d6d7b77ca9ee603f3140a4a834dbc65afbd7ec97dd464399ff971fa44f82aa39445dee1fb24e5dd65308a6873bbe08ebfd035208f87156d362b1f290bd4d41d0648c28b8d011a3743cba3f5ce6da13df78", 0x54, 0x2a7}], 0x100000, &(0x7f0000003f80)='[\x00') write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x9) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) recvmmsg(r3, &(0x7f0000003a00)=[{{&(0x7f0000000140)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f00000002c0)=""/82, 0x52}], 0x8, &(0x7f0000000680)=""/220, 0xdc}, 0x3}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)}], 0x1, &(0x7f00000007c0)=""/107, 0x6b}, 0x80000001}, {{&(0x7f0000000840)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/5, 0x5}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/25, 0x19}], 0x3, &(0x7f00000009c0)=""/222, 0xde}, 0x7}, {{&(0x7f0000000ac0)=@generic, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/119, 0x77}, {&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/112, 0x70}, {&(0x7f0000000dc0)=""/184, 0xb8}, {&(0x7f0000000e80)=""/115, 0x73}, {&(0x7f0000000f00)=""/172, 0xac}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001140)=""/137, 0x89}, {&(0x7f0000001200)=""/56, 0x38}], 0x4, &(0x7f0000001280)=""/232, 0xe8}, 0xfffff001}], 0x5, 0x100, &(0x7f0000001380)={0x0, 0x1c9c380}) 02:30:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x4000, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000005c0)) fallocate(r1, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4, r1}) io_setup(0x1f, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x8000000009, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000200)=0x40, 0x4) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x5, 0x5697d22d0059ea3a) ioctl$DRM_IOCTL_MAP_BUFS(r7, 0xc0186419, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/184, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002cc0)=""/6, 0x6}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x820c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) preadv(r8, &(0x7f00000017c0), 0x3a8, 0x100000000000000) io_pgetevents(r3, 0x2101, 0x3, &(0x7f00000001c0), &(0x7f0000000300)={r4, r5+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={0x7}, 0x8}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x8, 0x1, 0x7, 0x3, 0x0, 0x1000, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x1}, 0x1, 0x81, 0x1ff, 0x1, 0x1, 0x10001}, 0x0, 0xb, r1, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') [ 231.162899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.176213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.203040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 231.224760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.255048] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 231.267897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.282006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.306791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.335108] audit: type=1804 audit(1574217006.927:47): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir803335387/syzkaller.qMXcnz/8/file0" dev="sda1" ino=16535 res=1 [ 231.384059] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 231.384500] audit: type=1800 audit(1574217006.927:48): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16535 res=0 [ 231.402137] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 231.435820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.448131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.459479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.540493] audit: type=1804 audit(1574217007.127:49): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir803335387/syzkaller.qMXcnz/8/file0" dev="sda1" ino=16535 res=1 02:30:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b8564886c9245ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}]}}) [ 231.659686] audit: type=1800 audit(1574217007.247:50): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16535 res=0 02:30:07 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x7c, r0, 0x44, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x802}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00), 0x0, 0x4048000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6e217b91c3b0d873722b41afb8ed58f2109e448e6cc4bd0f11a26f4233e3ba1ff40e062a43f80b1bae2728316e63e58afdf284732bd1e1970881ddd3c9f310f827c195f3c5d57c67a08466517ba1300000000858003ffffffffffffffff3e26b5ca26bb434dbd0e4885c214e577bb081876e63e7c2834573925db8b54b33da7b9c7aefca1f9c49c6400000000000000000000000061e2448f23a7e49736a335440c5b7681c58dc647494f0dbc811becd7c487d283b2d0574510c4fdbb54c61ba9e635c0b3a3df610d9975d1d9570b38026b259815dba598ffa069c01b3d386c15d34a5918d6909192ec97032c320044fa934bf944d6d5ce621d91c17f1c4377a54c7febb46f83a7847a97259b8f1fca2c2816023b60417388196a22091c9f82e8e0291f4082d92d0ae76b94a18647bb44cbe9366a08fb3f0502644307c51085f7215fd44635e5967f21e8f59bd021f309d910cb5d37cb16450244ef261a37255a06c97f19fa0e68836543174745684037cc7bba99aa1cbefcdd62f799a5fb35abc5af3ab43a5fc40eb352e6ff078fad68182845f1f6b7ff6c200c103b64608404b41fce73186e55193d3d96faab587448349b35e431914bfde3c07f1419dac11995aded30b44ead7142a7b397a913f6bac2eac41c32d10863c3e6dd9e88d44842951e15d6d631995f071434"], 0x18}}], 0x1, 0x4048000) recvmmsg(r2, &(0x7f0000003180)=[{{&(0x7f0000001d40)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000440)=""/2, 0x2}, 0x2}], 0x1, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, &(0x7f0000000a00)) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x12, {0xa, 0x4e20, 0x9, @mcast1}}, 0x24) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000140)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32, @ANYBLOB], 0x3}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000240)={@multicast1, @broadcast, 0x0}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', r6}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) 02:30:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x2) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x1800004, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) mq_timedreceive(r1, &(0x7f0000000000)=""/123, 0x7b, 0x2, &(0x7f0000000080)={0x0, 0x989680}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @rand_addr="8db3828d83cbac1f292af1abdaefbb65"}, {0xa, 0x0, 0x7ee, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x0, [0x0, 0x1000]}, 0x5c) 02:30:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast2, 0x4}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe80000000000000a8aaaafffeaaaaaa"}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x8, 0x0, [0x4, 0x5, 0xb6d, 0x7, 0x6, 0x4, 0x0, 0x5, 0x1ff, 0x1ff, 0xffff, 0x3, 0xcc5b, 0xf97, 0x1, 0x4e]}, {0x8256bd15b9556f04, 0x0, [0x2, 0x8, 0x1ac, 0xfffffff7, 0x9, 0x18800000, 0x5, 0x0, 0x3, 0x9, 0x8, 0x5, 0x2, 0x5, 0xfffffffd, 0x1]}, {0x11, 0x0, [0x2, 0x101, 0x2, 0xfffffff9, 0x100, 0x9, 0x8, 0x40, 0x2, 0x2, 0x10001, 0x8, 0x37, 0xfffffff9, 0x9, 0x909d]}, {0x31, 0x0, [0x6, 0x3, 0x2, 0x7, 0x3, 0x8001, 0x8, 0x9c8a81, 0x2, 0xfffff000, 0x7, 0x1, 0x0, 0xffffff81, 0x7ff, 0x100]}, {0x20, 0x0, [0x7, 0xffff, 0x401, 0x8, 0x47, 0x51430efd, 0x100, 0x6, 0x305, 0x7, 0xeb0, 0x6, 0x3e, 0x7, 0x2b, 0x7fff]}, {0x8, 0x0, [0x3, 0xbf5, 0x33, 0x80, 0x9, 0x8, 0x5, 0x9, 0x133c, 0x81, 0x3f, 0x6, 0xfffffffe, 0xff, 0x80, 0x80000001]}, {0x2, 0x0, [0xd2000000, 0x6, 0x3, 0xa74, 0x5, 0x7, 0x5, 0x1, 0x10000, 0x7, 0x3, 0x0, 0x7, 0x2, 0x0, 0x7]}, {0x2, 0x0, [0x9cb0, 0x5, 0x4, 0x0, 0x7f, 0x0, 0x9, 0x9, 0x7fff, 0x4, 0x9, 0x4, 0x5d32, 0x5, 0x1f, 0xe5c]}, {0x14, 0x0, [0x0, 0xb2, 0x200, 0x4, 0x4, 0x3ff, 0x80000001, 0x4, 0x4, 0x9, 0x400, 0x6, 0xc39, 0x7, 0x6, 0x8]}, {0x25, 0x0, [0x9, 0x6, 0x62, 0xb3aa, 0xff, 0x7fff, 0xc4a4, 0x8, 0x8, 0xdbd1, 0x5, 0x9, 0x401, 0x80000001, 0x4, 0x5abd7293]}], r4, 0x1, 0x1, 0x2d0}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000080)) sendfile(r0, r5, &(0x7f0000000040)=0x200000, 0xa808) 02:30:07 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb99329dd6895b77d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x20, 0x0, 0xc4e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x52, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r6, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}, 0x1, 0xe00}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, r6, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x70}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x32b6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x1b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xe849b66e23882f24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1fc0}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) r7 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000100)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 02:30:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000005c81082f74faad83b8824e13e6611196000000000004000001ffffffff95000000000000009542b9682627a9f6834d6b2da3a995e75c7a9494c674e349dc4f1b162da84a3f69caa9e550ce4b374243ea520fd363785c7f3f56233277fa250cca0f4fa09bac59dc1ff68fe74c84fb8b5036123bf9dab33ec9fe11329930d937fe216e7feb12d60794d50859cfe58f5c20902104adbc8d6bcb715619f4a1b5a69bfcae72a921ef7bac85e4f93842b8b7979d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x70) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/220, 0xdc}], 0x1, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/17, 0x11}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/137, 0x89}, {&(0x7f0000000400)=""/5, 0x5}], 0x7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x57, 0x1}) [ 231.942277] audit: type=1400 audit(1574217007.537:51): avc: denied { map } for pid=7683 comm="syz-executor.1" path="socket:[28237]" dev="sockfs" ino=28237 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 231.956099] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:30:07 executing program 0: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESDEC, @ANYBLOB, @ANYRESHEX, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRESOCT=r1]], 0x42) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() tkill(r6, 0x3c) 02:30:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5}, 0x2c) pipe(&(0x7f0000000200)) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x7}, r2}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d76697274696f2c666f776e65723eb31e71d99b65db3e09d2165d3da6f0ee276d49dd467262f60a06419a17ce43cce09a279f031dea070000000000000005a3c824ee4d8203d85076f78084f391a576008a834026d5db502007b5124198ffb41651197bdb424505ce13db6e1d0d0f2a07d45affe27caac63cacc4c27c76ca5fe2250e98e239fbb0090695c89b82a75d2b4bdaeb7af51fd1ddc519eee4", @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=\x00\x00\x00j\x00\x00\x00c-\x00\x00\x00\x00-\x00a\x00\x00-\x00\x00\x00\x00-\x00\x00\x00\x00\x00\x00\x00\x00,seclabel,\x00']) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 02:30:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0x14}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0x14}, 0x80, 0x0}, 0x0) dup2(0xffffffffffffffff, r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) getrlimit(0xa, &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000380)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000120007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e", 0xfdd9}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_mcast\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40000010003) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:30:07 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1f, 0x7f, [], &(0x7f0000000040)=0x1}) r3 = gettid() r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) tkill(r3, 0x1b) dup2(r4, r0) [ 232.134437] hfs: can't find a HFS filesystem on dev loop5 [ 232.216493] audit: type=1400 audit(1574217007.797:52): avc: denied { map_create } for pid=7711 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 02:30:07 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="c5f508002e5a0bede32217100000000100000022"], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x6, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2f) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x1, 0x4) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@initdev, @in=@initdev}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:30:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xdc, &(0x7f0000000100)={@local, @empty, [{[], {0x8100, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0xa2, 0x11, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3c, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, [], "f25328fffc0d26cbe7b219b928aea8aa758bfcd50684ea9ff32556265b89b526677c68c5e757103d5bc45f944bf9a1f5be7702dc2b6ce73cdce7ab09aa8112be08906db4968735816d085c8d63faa43b040d76bd5c40bd478f36a48ba705b54b6a00896dea425d35f104365f46cca66c39b4"}}}}}}}, 0x0) 02:30:08 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x6, 0x21) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) [ 232.739725] hfs: can't find a HFS filesystem on dev loop5 02:30:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe8866b1e2d9db9e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1f7, 0x100) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 02:30:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140), 0x4) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cd74e001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c000200080000"], 0x3c}}, 0x0) 02:30:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x10, @time, 0x3f, {0x8, 0x7}, 0x1, 0x3, 0x3e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$kcm(r5, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000010940)={&(0x7f000000f340)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010b40)={0x1, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], r6}, 0x3c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR], 0x8) dup3(r7, 0xffffffffffffffff, 0x0) finit_module(r7, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000002940), &(0x7f0000002980)=0x14, 0x800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010940)={&(0x7f000000f340)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010b40)={0x1, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], r8}, 0x3c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002c40)={0x0, @local, @dev}, &(0x7f0000002c80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004900)={{{@in6, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000004a00)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000004a40), &(0x7f0000004a80)=0x14) 02:30:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000008, 0x80000001, 0x4, 0x5, 0x1000, 0x40, 0xf936}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0x3000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [], 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x40}, {0x0, 0x0, 0x0, [], 0x1f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x80}, {}, {}, {}, {}, {0xb6}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, [], 0x1}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000340)={0x1, 0x78}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0x320f) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)={0xfffffffffffffffe, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f00000002c0)={0x0, 0x0, [0x2, 0x6, 0x3, 0xfffffffffffff001]}) 02:30:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="86badad916c99ca0ad03349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483fd492d0616e6600db2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2524144565e2e0a, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f00000002c0)={r8, 0x2, &(0x7f00000000c0)=[0x8001, 0xffffffff], &(0x7f0000000100)=[0x3], 0x40, 0x2, 0x8000, &(0x7f0000000240)=[0x9, 0x8000], &(0x7f0000000280)=[0x6, 0xc1, 0x20, 0x800]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6e) lseek(r0, 0x7, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000140)=""/226, &(0x7f0000000240)=0xe2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000008000200"/22], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') splice(r4, &(0x7f0000000040)=0x8, r3, &(0x7f0000000080)=0xfff, 0x100000001, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r4, 0x0, 0x320f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$sock_ifreq(r7, 0xc, &(0x7f0000000100)={'veth0\x00\x00\x00\x00\x00\x00\x1c\xde\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) [ 232.902070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.910186] *** Guest State *** [ 232.918559] audit: type=1400 audit(1574217008.507:53): avc: denied { ioctl } for pid=7754 comm="syz-executor.1" path="socket:[28804]" dev="sockfs" ino=28804 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:30:08 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40000001) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000013c0)='syz1\x00', 0x200002, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200200, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000100)=0x100000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xf0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41f00, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x4, 0x8, 0x10001}, 0x10}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\x01\x83Z\xc4\x06S$\ah\x93\xff\xf7Z\xcb\v1\xf2\xc4\x85\x85\xa6\xfa\x15\x10\xa8\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xd5\x12\xc7\x1ee\x86\xcc\xdb/\xc5\x97\xea\x93\xa7\xde\xc9u\xb1\x9f\xce\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|h$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3We\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xfb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xfc\xe1\t]\x84J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17\x85\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?2,\x89\xb1%p\x8a\r\f\xe0,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa[\xa7\x02\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\xd1`\x88\xf4K\xe7\x80\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\t\x91\xa3\"\x85H@\xb9\x97\bZ\xa5(S\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\xbc\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6\xaa`\x88\x8a\xf4u$\x17\xff\xdbR\x02\xe8V\xdc\xb8]F\xdap\xf7\xdf~G\xe1\xe8\xd2\xe6\x1d\x9b/\xd8\x93F\xcf\xae]\xbb\xa6\x85\x1d/\xef\xf8\xfb>\x9e{\\\x1e\xf1i~\xee\xbb\x1e\x93SN\nA\x99\xd8\xa1y\x185\x86\xbe\x1eU\x9b4\xeem\xaa\xae\x1b\xb09\x9f.\xa3\xc0\xe6C\xc8~\xd8\x95f\xfbF\x05\xb9\xbde\n\x82\x91\r\xf0\x16\xbe[\x00H\x96\x7f8\x7fx\x06\xe9\x0fa\xfa\x1eg)\xc1vaG=a\xf10\x04rw\x0f\xbb%\xc6f\x81\xbaEO\x80\xc3Tc\xc4\xc0\x14\t#2\xd8\xe8\xecX4H\xf0\xc3\'\xba[\xd3}\x16\xa3\xf3\n\x00\xdd\xf3\x81\xaa\x99\xcb(\xb2\x19C\xe4\xc9\x87\x9a\x8c\xbd\xa0\x9cW\a\xb6\xc2R\xabn\xf2', 0x2761, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x0, 0x1, 0x77, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x8, 0x5, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x9) [ 232.927738] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 232.956170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.979303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.019603] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 233.027813] audit: type=1400 audit(1574217008.607:54): avc: denied { prog_load } for pid=7767 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 233.070399] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 233.087505] audit: type=1400 audit(1574217008.647:55): avc: denied { map_read map_write } for pid=7754 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 233.094699] CR3 = 0x0000000000000000 [ 233.134680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.154525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:30:08 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x165, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={0x0, r0}, 0x10) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x9) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x4000, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x33, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0xdbd, 0x9, 0xf74a, 0xfffffff800000000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001980)={0x0, 0x0, 0x1000000000, 0x806}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x1f, 0x44400) renameat2(r1, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r5, 0xa92, 0x35, "b575c10ab4bc8a5dd5cb46e706d775dece7922286003baf93897d3f06bfb51265428a7a38c8be0143863b633181d0e60f852b2a0b3"}, 0x3d) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r6, &(0x7f0000000040)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @random="c0441d4f2c36"}, 0x10) [ 233.180409] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 233.181925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.187830] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 02:30:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x4, 0x8, 0x3}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) dup3(r3, r2, 0x180000) r6 = syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000900)=ANY=[]) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000180)={0x1f, 0x521f}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 233.227762] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 233.247627] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 233.260719] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 233.282767] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.295958] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.306419] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.318388] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 02:30:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872843afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x60}}]}) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x80000001, 0x422520) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) [ 233.328874] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 02:30:08 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7f, 0x8, 0x800}) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x4e81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='cOa\x00') preadv(r3, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x401c005, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r7, r8, 0x0, 0x320f) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x2d66, 0x371}) setsockopt$sock_timeval(r5, 0x1, 0x14, 0x0, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYBLOB="c505868d0315e22d436edd00cd8adf64dc390a89b62582dcb9612bdec3d50942ba9167962d79824238d723d5e7a8b1ea959054705da1ac049de24eea552684cdbbf929d69b4c97f2d02f9fcc3fdc15b4f4294beabda51e5480dcccbf08ae81ba", @ANYBLOB="544b73ae8e9721f1747ebbd577cd084ae65c5b277d4f00ac7f388ba8c864aef70cf0ca82beb91672d46591870d2665fec4f27f5354f3c1637a90ef4cd711f87f2bc279c689957b238abafdae440d035debdcc4a1ae597a98e01c896ab371b8e6eeb45788e2eb5cd922bfbda0cedf0f81b00f579c1fcac0dd0300000000000000313e24a6c6fe3632e47a19f8e3767401f713fad75ad611f9f28cf584c918ea4f99f12559c939687acb7d3a713a", @ANYRESDEC, @ANYRESHEX, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=0x0, @ANYRES16=r7]], @ANYRES32, @ANYRES32, @ANYPTR64, @ANYBLOB="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", @ANYRESOCT=r6], @ANYRES32=0x0, @ANYRES32], 0x3}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x0, 0x80}]}, 0xc, 0x6) geteuid() [ 233.365634] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 233.393792] llc_conn_state_process: llc_conn_service failed [ 233.428352] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 233.444296] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 233.448535] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 233.512715] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 233.521140] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 233.527756] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 233.537062] Interruptibility = 00000000 ActivityState = 00000000 [ 233.558442] *** Host State *** [ 233.590115] RIP = 0xffffffff811ced13 RSP = 0xffff8880514978c0 [ 233.618867] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 02:30:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x200080, 0x0) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x42) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000580)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200, 0x4, 0x2, 0x3ff, 0x0, 0x2, 0x6, 0x3, 0x6, 0x0, 0x80000000, 0x10001, 0x0, 0x6, 0x6], 0x3000, 0x10000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) ioctl$TIOCCONS(r2, 0x541d) socket$kcm(0xa, 0x2, 0x73) fchdir(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x2000000, &(0x7f00000004c0)=ANY=[]) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x7fffffff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='irlan0\x00') r5 = socket$inet6(0xa, 0x803, 0x3) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r6, r7, 0x0, 0x7fffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000200)=[0x4, 0x4], 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x20100, 0x0) [ 233.688644] FSBase=00007f3a8f9c8700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 233.696679] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 233.705073] CR0=0000000080050033 CR3=00000000a5b9e000 CR4=00000000001426f0 [ 233.717150] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400 [ 233.724117] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 233.738926] *** Control State *** [ 233.742950] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000e3 [ 233.749709] EntryControls=0000d1ff ExitControls=002fefff [ 233.760614] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 02:30:09 executing program 5: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8000, 0x440102) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x482, &(0x7f0000000180)=0x4) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x200001, 0x0) [ 233.805683] VMEntry: intr_info=80000004 errcode=00000000 ilen=00000000 [ 233.860091] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.868080] bridge0: port 1(bridge_slave_0) entered disabled state 02:30:09 executing program 0: socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="060000000000080029a458891b0f018f54f3"], 0x0, 0x12}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r4, &(0x7f0000000040)) [ 233.888988] audit: type=1400 audit(1574217009.477:56): avc: denied { sys_admin } for pid=7819 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 233.899590] IPVS: ftp: loaded support on port[0] = 21 [ 233.929003] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 233.956783] reason=80000021 qualification=0000000000000000 [ 233.996593] IDTVectoring: info=00000000 errcode=00000000 [ 234.015304] TSC Offset = 0xffffff814683365f [ 234.020203] TPR Threshold = 0x00 [ 234.045236] EPT pointer = 0x00000000a58cf01e [ 234.056940] Virtual processor ID = 0x0002 02:30:09 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000001780)) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(0x0, r1, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0)}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x20310, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(r5, &(0x7f00000017c0)="141b2bcf26059cd555dcd4466372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147aefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1c) bind$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r4, 0x9) ioctl$BLKPG(r5, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0xc00, &(0x7f0000000400)="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"}) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) dup(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r7, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 02:30:09 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x0, 0x8}, {&(0x7f0000000100)="1c41cf3609158740885d38adae2abf8a5bb0e0cae15ea853560e6c327696aeb9fa75a2d5d185fd08cb4199f5fe29e16e0a7e160f1d", 0x35, 0xffffffffffffff41}, {&(0x7f0000000140)="9ac3627cc36c78444e720fa43963a1ae3c48ec9787bba46416b57dd1c253368a49f281af3706f45ad0381e540b43ce925a24a48cf3b4fae5ca0facc6d4f8d6f98c1196d34dc3393ecd60d23c0a03cceb74d432e4859fd5ffd8f7aa3eb284196ae708dbde34063813998f9bcee9d711fa0ac933a8de3d5b0878ade86763b8316fe3a528a2fc7a386233cf7dcaacf4bd013a15dcba7291d8e0dde083a5002f2ebce604739b377688f5ea7c16bb45ff01590394444dc64ec9b92e9d59c1dc7c", 0xbe, 0x1}], 0x11000, &(0x7f0000000280)={[{@errors_remount='errors=remount-ro'}, {@errors_remount='errors=remount-ro'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, ']cpuset*&'}}]}) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 234.257617] ptrace attach of "/root/syz-executor.1"[7562] was attempted by "/root/syz-executor.1"[7829] 02:30:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200), 0x0, 0x1) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000018000e7ed34c63ff48850d6b960beb880000000000000000020000000000ff001c000000ed7d38582640435b87816bd6a76e132d4ebaa2d3c52c6bebad6721feb718f56e258ede783d00d62cfa3420b591f53591935c9e5f"], 0x1}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) 02:30:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00835130fb2db4971e82dd6eb20c33f094cf530d1814e1659abe6256aec0a034050da44fb9736e1b7629988a6f5854cd6ff5bd4c9d8c7a91086f9258f8509c31ba94129702e5c76d93b2ad43a07bb75690961178daa3137b137e69165e14de9f76cba378271a902bdfb8bcd92fbcce4000e31e8f64d944e6ae4baf3799d3cc9b771400f11eeaaf2a9c9fa4f6c52f0f04ce59ddb51f86b1ac56e89b23dc2a"]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x23e100, 0x0) sync() 02:30:10 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 234.515993] FAT-fs (loop2): bogus number of reserved sectors [ 234.541558] FAT-fs (loop2): Can't find a valid FAT filesystem 02:30:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="e2ac80d9590597ad9a07000a009004038f13", 0x12, 0x400}], 0x0, 0x0) 02:30:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000440)={0x80000000, {{0x2, 0x4e20, @loopback}}}, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000000)={0x0, 0x0, [0x1, 0x8001, 0x427, 0x2, 0x43, 0x200, 0x0, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@rand_addr="e32cb1c2d12ea067a80d04e434758857"}, 0x6e6bc0}}, 0x50}, 0x8}, 0x0) [ 234.671368] FAT-fs (loop2): bogus number of reserved sectors [ 234.680510] FAT-fs (loop2): Can't find a valid FAT filesystem [ 234.709026] IPVS: ftp: loaded support on port[0] = 21 02:30:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x1, 0x0, 0x1, 0x2}}, 0x26) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaaf11, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x1019b, 0x400}], 0x5, 0x0) [ 234.783803] MINIX-fs: bad superblock or unable to read bitmaps 02:30:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) signalfd(r0, &(0x7f0000000200)={0x2}, 0x8) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) stat(0x0, &(0x7f0000000500)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4300000000000000, 0x0) 02:30:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 02:30:10 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) [ 235.089035] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 235.153074] EXT4-fs (loop2): fragment/cluster size (2048) != block size (4096) [ 235.696567] syz-executor.3 (7889) used greatest stack depth: 21536 bytes left 02:30:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) 02:30:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85f67cb20e57ba2c109f00000004000000b5000000000000009500000000000000"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 02:30:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:30:12 executing program 1: socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ustat(0x6, &(0x7f00000000c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) poll(&(0x7f0000000040)=[{r1, 0x4}, {r2, 0x2004}, {r5, 0x40}, {r7, 0x2020}, {0xffffffffffffffff, 0x4}, {r0, 0x1000}], 0x6, 0xffff7fff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x4, 0x0) 02:30:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)="ad1b12b1b90481eb29f05671a4bbfdd9163e040c5b08e9799e0433330cd503651946eb06756fd16455835acc23610fda3ef9cde3a4bdf86cfccbdd7f30b9c0d320f7145c7f894b3647c51da9f98411701cc14b83de6daf26178ed39a79219b2f1e2dfe4d452e180d513066acccbd8fcca9624a8acb9677815b37ed53dba2f66bca34cb64ab7c327f5647dca840a22a0629fe9d42eb8355", 0x97) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000000)={0x3, 0x1, [0x1, 0x7, 0x248, 0x7f, 0x10000, 0x33900000, 0x1, 0x6]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0x320f) ioctl$USBDEVFS_RESET(r5, 0x5514) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) prctl$PR_SET_DUMPABLE(0x4, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r9, r10, 0x0, 0x320f) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000140)={0x7, 0x100, 0x3, 0x3f, 0x19, 0x6, 0x81, 0x8, 0x6, 0x4}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x1c, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ERSPAN_HWID={0x8}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 02:30:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) lstat(&(0x7f00000000c0)='.\x00', 0x0) setregid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) epoll_create1(0x0) mmap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x8, 0x40010, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0xa000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x7ff, 0x6, 0xfffffffb, 0x0, 0xd11, 0x7, 0x10000]}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) [ 237.020165] protocol 88fb is buggy, dev hsr_slave_0 [ 237.025717] protocol 88fb is buggy, dev hsr_slave_1 [ 237.034159] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:30:12 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup3(r1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) shmctl$SHM_UNLOCK(0x0, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f00000000c0)=0xff) getpid() socket$can_raw(0x1d, 0x3, 0x1) [ 237.081584] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 237.090237] kauditd_printk_skb: 3 callbacks suppressed [ 237.090251] audit: type=1400 audit(1574217012.677:60): avc: denied { prog_run } for pid=7915 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 237.152574] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 02:30:12 executing program 0: clone(0x2000700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x268300, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e23, 0x7, @empty, 0x40}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x6}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x68) unshare(0x20020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RATTACH(r2, 0x0, 0x0) [ 237.227945] team0: Device gre1 is of different type 02:30:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8080) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5", 0x20) [ 237.373613] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 237.437510] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 02:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/53) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000000)) 02:30:13 executing program 1: socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ustat(0x6, &(0x7f00000000c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) poll(&(0x7f0000000040)=[{r1, 0x4}, {r2, 0x2004}, {r5, 0x40}, {r7, 0x2020}, {0xffffffffffffffff, 0x4}, {r0, 0x1000}], 0x6, 0xffff7fff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x4, 0x0) [ 237.515527] team0: Device gre1 is of different type [ 237.576811] audit: type=1800 audit(1574217013.167:61): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16568 res=0 [ 237.640478] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 02:30:13 executing program 2: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xff00000000000000, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x403, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x4, 0x1, 0x1}, 0x16, 0x3, 0x0, 0x0, "337c58eef63ed8872c57e0e1d1675d06371dd2c6deac5e554abb552b6bda03ab4883f77b51d51ebeb6592059bbd1a3b8c106e56c52156fa40ef1ddd43f3d1e77"}, 0x48}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000440)={r4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1f, {0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x4, 0x800000b}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x7f, 0xd0ec, 0x6, 0x9}, &(0x7f0000000100)=0x98) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) close(r5) sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x4, 0x1, 0x1}, 0x16, 0x3, 0x0, 0x0, "337c58eef63ed8872c57e0e1d1675d06371dd2c6deac5e554abb552b6bda03ab4883f77b51d51ebeb6592059bbd1a3b8c106e56c52156fa40ef1ddd43f3d1e77"}, 0x48}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000440)={r7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1f, {0x0, @in={{0x2, 0x0, @broadcast}}, 0x4, 0x400, 0x0, 0x4, 0x800000b}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x0, 0xd0ec, 0x6, 0x9, 0x20}, &(0x7f0000000100)=0x98) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0xa10000, 0x5, 0x7fff, [], &(0x7f0000000040)={0x67, 0x0, [], @ptr=0x8}}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 237.754258] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 02:30:13 executing program 3: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x800, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0x320f) ioctl$TCSETSF(r5, 0x5412, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200500, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r9, r10, 0x0, 0x320f) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x100}) ioctl$TCSETA(r8, 0x5406, 0x0) bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 02:30:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x7c82d9308dbf15e5, 0x0) semctl$GETALL(0x0, 0x0, 0x3, &(0x7f0000000540)=""/4096) 02:30:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000002980)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050bd25a80648c6394fb0324fc0010000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/165) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) [ 237.900137] protocol 88fb is buggy, dev hsr_slave_0 [ 237.905267] protocol 88fb is buggy, dev hsr_slave_1 02:30:13 executing program 2: syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1d, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000240)) sendto$inet6(r2, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000000140), 0x35000, 0x0, 0x0, 0x429) recvfrom(r6, &(0x7f0000005280)=""/4101, 0x1005, 0x0, 0x0, 0x1f4) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$unix(r8, &(0x7f0000000140), 0x35000, 0x0, 0x0, 0x429) recvfrom(r8, &(0x7f0000005280)=""/4101, 0x1005, 0x0, 0x0, 0x1f4) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, 0x8) 02:30:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffefd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xcb9c4cafceb2e7a5) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r7, @ANYBLOB="9316ecb2cf80b99f21be96babbd8ca303ac48cbe3bc46688b54805bbd1a4497bc47875a2ca4ca2a97b3824946223fb8e893c93f72669e4b1dcaad9bb933bf28d5b5b40ba2570fd75ee77d388e13dc7a3b38d0155daf1f748b41d3f2a41a3d883f3406878c2d36219b4ed82bb6ce2788ebd7d2b54a451c0f60edfee"], 0x20}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f00000025c0)='/dev/vbi#\x00', 0x0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r9, r10, 0x0, 0x320f) sendmmsg(r10, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r7, 0x3b}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="276b049c8c6255c8624177e0d313695df191a1b9fe0c24044f63b7b2b247f147a2b50c9f51453c692d7d0c5794a4473bcafb5ed16f90dae25cb233ae0bcacaee", 0x40}, {&(0x7f0000000240)="602d77e618e14d82126dc9ffafa969fa70c3690cc132b122a63da2f5fb40de07e3de2b7ede9bbd55137d", 0x2a}, {&(0x7f0000000280)="77d25b92dc2d9f3def6fe18dd85a1f59dba9a891e83f833d8216097b47470cb8ebda0411", 0xffffffffffffffb3}, {&(0x7f00000002c0)="c410e391b1897b03996a9f6b24e86dd5eb2cbab3be861f0da444f70da67119729eb874c9d726f324a8e23fa8f10b79b677fc7e99b91a5e49184d700edd7cab32c878bb6382bbfe0bbf63d980e2b6861577c2b1e3f8b5036d142b78f3405b6a68f7470d4f4d7142036ed627348a82f5fed40b33afd0a93b66745a53dbbcf9361d3b2592b19d86a0243cf7d7c5ccd94387b67614dcf91c0b6be84b50a2792f1ee72ad216d0d00792c7b564534c8998fe0eb9a7129c0a409f660f0032", 0xbb}], 0x4, &(0x7f00000003c0)=[{0x1010, 0x0, 0x8, "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"}, {0x1010, 0x0, 0x0, "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"}, {0x38, 0x107, 0x7, "fee0a46daaa0895fb617174cfa9394917f8d66cfe8926aa2f88cb4c11b3a2a6ab85b07"}, {0x108, 0x3a, 0x80000002, "ae147ba17755c4c816c745a63b0157818fe505600ea59616c5800c16985b2378a4f6bd0ca23148be8e7b33a3cd8cac7c9f08b35abe388ffe94c554a348a6ee9e4b8680a7888c1b3b958291b6395a7b56d7708faca445969a7215a20e2e1754feb480d34bfc7782be10423ba83d4cc164faa97b6020a66a715d7474fca718de5bfbdcf72a7916e032df59dcaaf118bb7a89261954f4ccfd09f5edb27ad47df153ca7b8af51a617b40050318c699918c81893e1e0571aa2502df1ebdc4bbd74f1d9967d8a0c480bc8796d3a247ae2f47733c80532f44ca1eb5698c3cbb8d84548f950d8065f3d481ed7d88959f3412e0c6c6a7380a5e44b7"}, {0xa0, 0x10f, 0x1, "ccd159f6463e848de3ebd553058be2f1864e907bd475e88cb5a3d4393bc7c773b600cc34829d30183136680ac0f44f7306ab1d60433d896594c87ea31b42c8e07a6d4b60aac5533e946b01ecbb6716dfe9347b52cd9b81ba0dd1fec8e50d4330e45508220a0b3848e22bc3eb6a4ccac62aa43ede2c5bf1c2994a897152d9f16f96124763bed33a8df8"}], 0x2200}}, {{&(0x7f0000002600)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x4, 0x0, {0xa, 0x4e24, 0x4, @local, 0x70}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002680)="720617", 0x3}], 0x1, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x3f0}}], 0x2, 0xbb8) 02:30:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x111400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010c040}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 02:30:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x43e92678790634d8, 0x20000204, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000350000000000000063013600000000009500000000000000e0ff019dd72c99d57c368fcd63"], &(0x7f0000003ff6)='G\x00', 0x5, 0xb8, &(0x7f0000000140)=""/187, 0x0, 0x0, [], 0x0, 0x13, r0, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x70) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)={0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x4000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) [ 238.303518] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 238.459928] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 02:30:14 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000080)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 02:30:14 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0xe9, 0x1, 0x6ad2}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2011, r2, 0x0) r3 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) dup3(r4, r1, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x110080, 0x0) write$eventfd(r5, &(0x7f0000000240)=0xc, 0xfffffffffffffede) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)) fcntl$setstatus(r4, 0x4, 0x44000) mmap(&(0x7f00005a4000/0x1000)=nil, 0x1000, 0x200000d, 0x40010, r0, 0xc9699000) io_setup(0x3, &(0x7f0000000100)=0x0) epoll_create1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0xb, 0x0, &(0x7f0000000040)=0xd74f4d742032328e) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x7, &(0x7f00001ba000/0x600000)=nil, 0x1) io_submit(r6, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 238.678476] audit: type=1804 audit(1574217014.267:62): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir415229926/syzkaller.sojzWc/10/bus" dev="sda1" ino=16559 res=1 02:30:14 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) write$apparmor_exec(r1, &(0x7f0000000600)={'\\C\x1b]P\x0e\x06C\xc3MY\x1d\x9b9%\a\x16\xb1\x9b=cy\xeaU\x0e3\\C6\x9bmwH_\xcb\xaa\xc7\xa6\x10&\xb0A\tim\x9bB\xd21\xd2\xbe\xddEf \xa0\xa6v\xf7\xe7\x89\xec\xbf\xc8\x97\xb37\xf0\x10\xcd\xd9\xaf;\xec\xccT\x9e\xe0\xbaw3\xc4K\v\x0e\xca\xdb\xa5\xe6\x91\xdc\x8d3\xf8\xec/\xa4U\x87\x02g\x06k\x9fW[.c\xb1\xd4y\xd4\xca=\f\xd8Q[\xacb\xa3f4\x9el\x90\x878[\x00\xd9\x04\x1a\xa6\xa4\x17\xa6(\x05tl\x17\xef\x1bU\xfbD\xec\x88\xd4\xa0&\xdb\x95wp\xfb\x01[\x8c\xc4(\xbb)\xf3\xa9\x1b\tt\xd3W\x11t\x1f\xa4n\xfd:\x90${\xc5\x16\xa5\x96\x88\xc78\xc0g\xb9\xbe\xbd1\x11}\x8d\'\x15+\xfe\x91\xed\x1e\xeb]\xfa\x9dS\xe6\x12\x9f\r\xc8\x81\xca\xd9\f\xfd\xc8/\xb99\xaa\x1a\r\x92\xae\xb6\xd2\xb8\xb7\f[\xd8y\xc6O\xcfE\xb4\xe6\x16\x1fT\x1e\x9b\x9c\f\x8d\xed1\x96\"\x83\x98\xb1S`\xc7\'\xc2\xbf\xb7', 'fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x9b\x0fJ\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'}, 0x50f) [ 238.785809] audit: type=1804 audit(1574217014.267:63): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir415229926/syzkaller.sojzWc/10/bus" dev="sda1" ino=16559 res=1 02:30:14 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) [ 238.859887] protocol 88fb is buggy, dev hsr_slave_0 [ 238.865030] protocol 88fb is buggy, dev hsr_slave_1 [ 238.879578] audit: type=1400 audit(1574217014.377:64): avc: denied { map } for pid=8016 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=29418 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 02:30:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @dev}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x67, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xd00}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) [ 238.939864] protocol 88fb is buggy, dev hsr_slave_0 [ 238.945069] protocol 88fb is buggy, dev hsr_slave_1 [ 239.036592] audit: type=1804 audit(1574217014.627:65): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/" dev="sda1" ino=2328 res=1 [ 239.109896] protocol 88fb is buggy, dev hsr_slave_0 [ 239.115016] protocol 88fb is buggy, dev hsr_slave_1 02:30:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$evdev(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) fstatfs(0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) write$tun(r2, 0x0, 0x0) [ 239.144354] audit: type=1804 audit(1574217014.627:66): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/" dev="sda1" ino=2328 res=1 02:30:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 02:30:14 executing program 4: mmap(&(0x7f0000542000/0x2000)=nil, 0x2000, 0x7, 0x4154031, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0) tkill(0x0, 0x0) r3 = getpgrp(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3) r5 = creat(0x0, 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x0) perf_event_open(0x0, r3, 0x44, r4, 0x8) [ 239.726302] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 239.779129] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:30:16 executing program 2: dup(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000180)={'ip6gre0\x00'}) 02:30:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000040880)='./file0\x00', 0x10000, 0x1) 02:30:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r1, 0x5d13cd2d0d3daa79, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x24}}, 0x0) 02:30:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffb}]}) ustat(0x5, 0x0) 02:30:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000200)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)) dup2(r4, r3) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 02:30:16 executing program 3: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)={0x1ad227dc888, 0xffffffff}) [ 241.247117] audit: type=1326 audit(1574217016.837:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8081 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 [ 241.254625] [ 241.273598] ============================= [ 241.277750] WARNING: suspicious RCU usage [ 241.281904] 4.19.84 #0 Not tainted [ 241.285449] ----------------------------- [ 241.289602] include/linux/radix-tree.h:241 suspicious rcu_dereference_check() usage! [ 241.297486] [ 241.297486] other info that might help us debug this: [ 241.297486] [ 241.305648] [ 241.305648] rcu_scheduler_active = 2, debug_locks = 1 [ 241.312596] 2 locks held by syz-executor.0/8085: [ 241.317355] #0: 00000000dc7ff893 (&sb->s_type->i_mutex_key#12){+.+.}, at: memfd_fcntl+0x235/0x1750 [ 241.326734] #1: 00000000f94a873c (&(&(&mapping->i_pages)->xa_lock)->rlock){-.-.}, at: memfd_fcntl+0x4bc/0x1750 [ 241.336990] [ 241.336990] stack backtrace: [ 241.341501] CPU: 1 PID: 8085 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 241.348338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.357678] Call Trace: [ 241.360314] dump_stack+0x197/0x210 [ 241.364008] lockdep_rcu_suspicious+0x153/0x15d [ 241.368683] memfd_fcntl+0xfdf/0x1750 [ 241.372483] ? __fget+0x340/0x540 [ 241.375936] ? find_held_lock+0x35/0x130 [ 241.379999] ? __fget+0x340/0x540 [ 241.383462] ? memfd_file_seals_ptr+0x160/0x160 [ 241.388124] ? lock_downgrade+0x880/0x880 [ 241.392329] ? kasan_check_read+0x11/0x20 [ 241.396582] do_fcntl+0x200/0x1020 [ 241.400116] ? f_getown+0xc0/0xc0 [ 241.403602] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 241.408908] ? selinux_file_fcntl+0x74/0x140 [ 241.413320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.418879] ? security_file_fcntl+0x8d/0xc0 [ 241.424504] __x64_sys_fcntl+0x16d/0x1e0 [ 241.428625] do_syscall_64+0xfd/0x620 [ 241.432441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.437621] RIP: 0033:0x45a639 [ 241.440804] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.459695] RSP: 002b:00007f809d255c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 241.467409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 241.476068] RDX: 0000000000000008 RSI: 0000000000000409 RDI: 0000000000000004 [ 241.483342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.490609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f809d2566d4 02:30:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r3) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000440)='y', 0x1, r4) [ 241.497879] R13: 00000000004c1068 R14: 00000000004d3c60 R15: 00000000ffffffff 02:30:17 executing program 3: [ 241.525026] audit: type=1804 audit(1574217016.837:68): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir415229926/syzkaller.sojzWc/14/bus" dev="sda1" ino=16594 res=1 02:30:17 executing program 4: 02:30:17 executing program 1: 02:30:17 executing program 3: [ 241.616756] audit: type=1804 audit(1574217017.107:69): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir415229926/syzkaller.sojzWc/14/bus" dev="sda1" ino=16594 res=1 02:30:17 executing program 1: 02:30:17 executing program 2: 02:30:17 executing program 4: 02:30:17 executing program 1: 02:30:17 executing program 3: 02:30:19 executing program 0: 02:30:19 executing program 5: 02:30:19 executing program 1: 02:30:19 executing program 4: 02:30:19 executing program 3: 02:30:19 executing program 2: 02:30:19 executing program 1: 02:30:19 executing program 3: 02:30:19 executing program 5: 02:30:19 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 02:30:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRES64, @ANYBLOB="95522d01e5a4562e1d8270dc97c8"], 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:20 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02fb3d6f6a06d0d3"], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup3(r2, r1, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) 02:30:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 02:30:20 executing program 3: syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1d, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000240)) sendto$inet6(r2, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000000140), 0x35000, 0x0, 0x0, 0x429) recvfrom(r6, &(0x7f0000005280)=""/4101, 0x1005, 0x0, 0x0, 0x1f4) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$unix(r8, &(0x7f0000000140), 0x35000, 0x0, 0x0, 0x429) recvfrom(r8, &(0x7f0000005280)=""/4101, 0x1005, 0x0, 0x0, 0x1f4) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, 0x8) 02:30:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 244.572024] kvm: emulating exchange as write 02:30:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000035040400010000000704000001000000b7050000000000006a0a00fe000000008500000009000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000240)=0x1f, &(0x7f0000000280)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) connect$vsock_dgram(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) socketpair(0x4, 0x3, 0x6b, &(0x7f0000000200)) sendfile(r1, r2, 0x0, 0x320f) close(r2) 02:30:20 executing program 5: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000003c0)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev-control\x00', 0x168c0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') preadv(r4, &(0x7f00000017c0), 0x333, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001640)={0x0, 0x12d, 0xfa00, {0x8, &(0x7f0000000240), 0x0, 0xf}}, 0x20) r5 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x92, 0x0, 0x8, 0x0, r5}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000004c0), 0x0) sched_setscheduler(0x0, 0x0, 0x0) r6 = socket(0x1, 0x800, 0x0) r7 = syz_open_procfs(0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) r8 = epoll_create(0x6) epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], @ANYRES64=r5]) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000340)={&(0x7f0000000600)=""/220, 0x18f}) r9 = getpid() rt_tgsigqueueinfo(r9, r9, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r9) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) 02:30:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000002c0)=""/234, &(0x7f0000000040)=0xea) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0xe0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 244.804210] kauditd_printk_skb: 1 callbacks suppressed [ 244.804224] audit: type=1400 audit(1574217020.397:71): avc: denied { map } for pid=8192 comm="syz-executor.5" path="/dev/nullb0" dev="devtmpfs" ino=15439 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 02:30:20 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, r8}}, 0x38) 02:30:20 executing program 4: pipe(&(0x7f0000000340)) lsetxattr$security_evm(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="04006e00ccbf1824f6d2caa80fa5a0e392cd39641534eff87c1413312abae5959f1197d0e82a6c6d98cdc91e373c53cb7a039c1c3496396aae68f8f0c25595057f33c0effdb2639b86bd5324d030f043373b408d22b9cbb4f9583be779a32fb638c9aab00cf37aa1ab219413fcc504a7c35625ed3054eb6b5214394479ff5b1c6433c6a1eb93edcb25389c36ab0a3ed41ced26a489f5f4d7599a868e18ab6067aee621f72b5bd04efc86195af9ab9f944c36b9b583278c871ed0ed104dfcf347127c83aceb4acaae872706c814baa3f41a4f7ad38c3616e21af906617e259125c023ba4c1fca48b9b7e79a8ab66a6684a339a3f86790d3024a1783f229029003b0710ccff1bcba282fdcef8bc46d0e8f69191caaa9692362bd4c42491a21eda2e00a208407247ffe298e6c808455e132ed05169c7e2c773dbb0997621ee15be613b3baa3dad7633843768dfbe2f80c7a22b90d6c329d2cec175f6a1e8bbbdf40afd1bed43082689b4f11d19c7cb19711e2c7f5f03dd64fec63e52362a467919f1a65e3dbb207870a5e21cab8e5335b2746185a0bdb9e"], 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpgrp(r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = fcntl$getown(r3, 0x9) rt_tgsigqueueinfo(r2, r4, 0x1f, &(0x7f0000000180)={0x11, 0x40, 0x9}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r5, 0x3f, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write(r6, &(0x7f0000000280)="da9803a2b8acc2d4f110ad05f9a5b66f841a2bc51e8c6169cd9d89ec7e4b31cbdbd81cdf3b3076a7280520501c98f93a270b54af87a1b45c5c6dc06101ff5078cf39fd8926fab45bf72b9db0697264d9f6dded26cb95d91ab2e2734e1b00298af195e582f76eb9dd13c50574d0daf2ebab24387bf447561e997564d135a0d1237330a24f1f8f39ab3abf5e36c8223985cdfd9e7ac1a588aba5", 0x99) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x166d185b89d85893) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) [ 244.939409] audit: type=1800 audit(1574217020.407:72): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="dev-control" dev="sda1" ino=16623 res=0 02:30:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4408, 0x9, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r1, 0x5425, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) request_key(&(0x7f0000000140)='user\x00', 0x0, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) 02:30:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x20201) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0xd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x80000001, 0xffffffff, 0x2018, 0x9, 0xb, 0x3, 0x1, 0x3}}) writev(r1, &(0x7f0000001440)=[{&(0x7f0000001180)="bd", 0x1}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) [ 245.311048] IPVS: ftp: loaded support on port[0] = 21 [ 245.340353] protocol 88fb is buggy, dev hsr_slave_0 [ 245.346335] protocol 88fb is buggy, dev hsr_slave_1 [ 245.532383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44216 sclass=netlink_xfrm_socket pig=8212 comm=syz-executor.4 02:30:21 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getpid() perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xdd, 0x10080000001}, 0x1020, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) dup3(r0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000080)={0x6ea, 0xffff}) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 02:30:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0xd23dae327bc9ca23) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25140000100006000800010071000000040002002c0009400800020004000000080002000500000008000100010800010005000000080006000400120000ac4d8e246c53a7d08bafacf239fd314d88da95df1e155d05e27fc6b9630405be3f7e41643252a0eeaab49665e619e66928f88542"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 02:30:21 executing program 2: ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) socket(0x1, 0x6, 0xf8) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000000e6) getpeername$netrom(r1, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000e6) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x110d1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x9c0a, 0x0}}], 0x8000000000003b0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) [ 245.900197] protocol 88fb is buggy, dev hsr_slave_0 [ 245.905756] protocol 88fb is buggy, dev hsr_slave_1 02:30:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1218408, &(0x7f0000000180)={[{@session={'y\xa1\x01\x00\x00\x80\x00', 0x3d, 0x9}}]}) [ 246.088831] IPVS: ftp: loaded support on port[0] = 21 [ 246.172823] hfsplus: unable to parse mount options [ 246.229865] audit: type=1800 audit(1574217021.807:73): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16625 res=0 [ 246.302294] hfsplus: unable to parse mount options 02:30:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:23 executing program 5: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x8005}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x5e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) r8 = openat(r7, &(0x7f0000000340)='./file0\x00', 0x20000, 0x103) ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000000380)={0x20, 0x101, 0x81}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r9, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r9, 0x81, 0x10, 0x4, 0x3}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r9, @in6={{0xa, 0x4e21, 0x9, @local, 0xfff}}}, &(0x7f0000000300)=0xfffffffffffffec9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0x4f9, "c4028eb76f5936b23603000000000000006ccd1d47c0afb6aaf49374373420d00abb4492c3ceab36c79765e52b732065e1d38f4df21ed8b1d4a3aab6061133a7e402ab4b7b3c5a00560c0f6948214a61e4052835a1cb0fb8c700d5a8d4b541567b3b268533524bc3977cb48fdcd92f2bf94951168a7972116743234de0d0fa7e6d45b0adc83b2ec6e59b5b6f8ee8f91773dd4c64e91c50dc29894f02590a6c6e"}, &(0x7f0000000480)=0x30) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r10, r0, 0x0, 0x6, &(0x7f0000000240)='smaps\x00', 0xffffffffffffffff}, 0x30) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, 0x22, 0x200, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0x38, [@typed={0x8, 0x4, @pid=r11}, @typed={0xc, 0x10, @u64=0xfffffffffffff801}]}]}, 0x2c}, 0x1, 0xfdffffff00000000}, 0x0) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r12, 0x0, 0xf, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 02:30:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0xd23dae327bc9ca23) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25140000100006000800010071000000040002002c0009400800020004000000080002000500000008000100010800010005000000080006000400120000ac4d8e246c53a7d08bafacf239fd314d88da95df1e155d05e27fc6b9630405be3f7e41643252a0eeaab49665e619e66928f88542"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 02:30:23 executing program 2: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000000c0)="4c5b66d18b958db53e9eaba970c962290cd64b8e543576efa6b997220a6b25480f07b619700dea58dd19acfed3f5563381656d86e9846ea054bc8f5dd937f41b08fc49891606c91546d90054fa5a2ddaf15a9376f6ab829529f2bc4e0d042ede811b696f79e612ec213e17192174589dec", 0x71) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1a001b00, 0x297ef) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001880)='cgroup.type\x00', 0x2, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1ff, 0x200800) socket$inet6(0xa, 0x40000080806, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7ff, 0x101000) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x4, 0x101000) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0x320f) r8 = dup2(r5, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc08c5334, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, r8, 0x0, 0xd, &(0x7f0000000780)='\x82#$\'wlan0self}user-)+em1\x00'}, 0xfd95) write$RDMA_USER_CM_CMD_DISCONNECT(r8, &(0x7f0000000400)={0xa, 0x4}, 0xc) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x7, 0x9, 0x7, 0x0, 0x2, 0x1414, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, @perf_config_ext={0xfff, 0x7fffffff}, 0x1020, 0xd7b, 0xfff, 0xe, 0xff, 0xff, 0x2}, r4, 0x8, r8, 0xd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r9, r10, 0x0, 0x320f) 02:30:23 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1, &(0x7f0000003680)=""/187, 0xbb}}], 0x2, 0x0, &(0x7f0000005480)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setreuid(0x0, 0x0) pipe(0x0) getresuid(&(0x7f0000004180), 0x0, 0x0) 02:30:23 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaa", 0x97) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) ptrace$cont(0xa, r0, 0x40000, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0x320f) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x29, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x4, 'lblc\x00', 0x0, 0xac8, 0x66}, 0x2c) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x7fd, 0x180) 02:30:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) 02:30:23 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpid() getpid() sched_setscheduler(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$KDDISABIO(r0, 0x4b37) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4d0, 0x0, 0x40000084], [0x3a]}) unshare(0x40000000) 02:30:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e22, 0xcf9, @local}, 0x89) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ff000000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, &(0x7f0000000140)=0xc) 02:30:23 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0xfffffddb, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x5, 0x0, 0xd9}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000300)=""/108) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xe607, 0xfffffffffffffff9, 0x24}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 02:30:23 executing program 5: r0 = gettid() r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f0000000280)=""/130) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1002000000013) 02:30:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0xd23dae327bc9ca23) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25140000100006000800010071000000040002002c0009400800020004000000080002000500000008000100010800010005000000080006000400120000ac4d8e246c53a7d08bafacf239fd314d88da95df1e155d05e27fc6b9630405be3f7e41643252a0eeaab49665e619e66928f88542"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 248.237801] libceph: connect [d::]:6789 error -101 [ 248.243560] libceph: mon0 [d::]:6789 connect error [ 248.247556] IPVS: ftp: loaded support on port[0] = 21 [ 248.420886] FAT-fs (loop3): Directory bread(block 513) failed [ 248.436848] FAT-fs (loop3): Directory bread(block 514) failed [ 248.456914] FAT-fs (loop3): Directory bread(block 515) failed [ 248.477469] FAT-fs (loop3): Directory bread(block 516) failed [ 248.497359] FAT-fs (loop3): Directory bread(block 517) failed [ 248.515046] FAT-fs (loop3): Directory bread(block 518) failed [ 248.530274] FAT-fs (loop3): Directory bread(block 519) failed [ 248.562349] FAT-fs (loop3): Directory bread(block 520) failed [ 248.572055] FAT-fs (loop3): Directory bread(block 521) failed [ 248.590381] FAT-fs (loop3): Directory bread(block 522) failed [ 248.855996] IPVS: ftp: loaded support on port[0] = 21 02:30:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 02:30:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xfffffffffffffdfe, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x224, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x0, 0xe, 0xd77]}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=@routing={0x3c, 0x4, 0x0, 0x2, 0x0, [@rand_addr="370df9b3f2162c39c265512c4bf823b3", @dev={0xfe, 0x80, [], 0x22}]}, 0x28) 02:30:26 executing program 1: getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0xeb5) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070a07021dfffd946fa2830020200a0009000200000000000000aba20400ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x711100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001180)=0x9) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001140)={0xa0736cecff4bd578, r3}) fcntl$getown(0xffffffffffffffff, 0x9) 02:30:26 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0xfffffddb, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x5, 0x0, 0xd9}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0x320f) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000300)=""/108) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xe607, 0xfffffffffffffff9, 0x24}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 02:30:26 executing program 4: ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8907, 0x0) close(r0) open(0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8001, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) 02:30:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d6f64653d3078203030303070907c42000000000000000000"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 250.781889] audit: type=1400 audit(1574217026.337:74): avc: denied { create } for pid=8331 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 02:30:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) unshare(0x40000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) [ 250.874636] mmap: syz-executor.4 (8332) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 02:30:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000, 0x0) dup2(r2, r3) 02:30:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x79, &(0x7f00000000c0)='mime_type}\x00GQ\x1f$\xe7\x10#e\xfbM3\x0e\xfe\xee\xc81\x1a`\x9a\a\xee{=\x91\xab\x8dQ6\xde$\xf7]\'\xb9\x9f\xa2\xe3\x19\x92\x8bj\xcc\a\xb6\x1c\xce4\xf1\x8cNBe\x8f\x9d\x01\x9eN\xf6Kl\x83l\xcf\xb5\xfa\xc8\b\xb4V\x95\x12\xd4\x99\xce\xb78\x1f>\x1eUu\x16%\x13\xba_\xe7eov\xcb+\xa31J]\xff\xf3|\x8d,\xe1q\"\x96\xefM\xbf\xf9D'}, 0x2a0) sched_getattr(r0, &(0x7f0000000080)={0x30}, 0x30, 0x0) [ 251.057511] IPVS: ftp: loaded support on port[0] = 21 02:30:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(&(0x7f0000000140), 0x8) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@raw=[@alu={0x4, 0x0, 0x5, 0x8, 0x5, 0x2, 0x4b97721ceefc326d}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2ad}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x70) 02:30:26 executing program 1: getrlimit(0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1f3054a4}}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x82418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x0, 0x3, 0x6]}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0x320f) dup2(r6, r4) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) [ 251.099480] FAT-fs (loop3): Directory bread(block 513) failed [ 251.110633] FAT-fs (loop3): Directory bread(block 514) failed 02:30:26 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x8}, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{r2, r3/1000+30000}}, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="40a2588b1622771884f433f07ff398ad408bec91ce98dd8a43c16b16e1f851fa7edd5cb1c6c93063560c8793e345915ebc7e3d60215c", 0x36}, {&(0x7f0000000140)="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", 0xfa}], 0x2}, 0x6004405d) [ 251.188920] FAT-fs (loop3): Directory bread(block 515) failed