[ 33.048254] kauditd_printk_skb: 9 callbacks suppressed [ 33.048260] audit: type=1800 audit(1576795087.836:33): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.075448] audit: type=1800 audit(1576795087.836:34): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.094740] random: sshd: uninitialized urandom read (32 bytes read) [ 37.345616] audit: type=1400 audit(1576795092.136:35): avc: denied { map } for pid=7010 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.396043] random: sshd: uninitialized urandom read (32 bytes read) [ 38.083718] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. [ 43.667991] random: sshd: uninitialized urandom read (32 bytes read) 2019/12/19 22:38:18 fuzzer started [ 43.860121] audit: type=1400 audit(1576795098.646:36): avc: denied { map } for pid=7019 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.733297] random: cc1: uninitialized urandom read (8 bytes read) 2019/12/19 22:38:20 dialing manager at 10.128.0.105:41823 2019/12/19 22:38:20 syscalls: 2653 2019/12/19 22:38:20 code coverage: enabled 2019/12/19 22:38:20 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/12/19 22:38:20 extra coverage: extra coverage is not supported by the kernel 2019/12/19 22:38:20 setuid sandbox: enabled 2019/12/19 22:38:20 namespace sandbox: enabled 2019/12/19 22:38:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/19 22:38:20 fault injection: enabled 2019/12/19 22:38:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/19 22:38:20 net packet injection: enabled 2019/12/19 22:38:20 net device setup: enabled 2019/12/19 22:38:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/19 22:38:20 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 46.968457] random: crng init done 22:40:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5, 0x6809, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 22:40:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/29, 0x1d}, {0x0}, {0x0}, {0x0}], 0x4}, 0x9437907f627f993e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = dup(r3) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 22:40:32 executing program 5: poll(&(0x7f0000000080)=[{}, {}, {}], 0x3, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffeb3, 0x0, 0x0, 0x800e004fe) poll(0x0, 0x0, 0x200000000202) shutdown(r0, 0x0) 22:40:32 executing program 3: poll(&(0x7f00000000c0)=[{}, {}, {}], 0x2000000000000019, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1000006a1, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) shutdown(r0, 0x0) 22:40:32 executing program 4: poll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1000006a1, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) shutdown(r0, 0x0) 22:40:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) recvmsg(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) [ 178.183554] audit: type=1400 audit(1576795232.976:37): avc: denied { map } for pid=7037 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 178.531537] IPVS: ftp: loaded support on port[0] = 21 [ 179.370851] chnl_net:caif_netlink_parms(): no params data found [ 179.378465] IPVS: ftp: loaded support on port[0] = 21 [ 179.412060] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.418644] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.425687] device bridge_slave_0 entered promiscuous mode [ 179.438374] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.444914] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.451897] device bridge_slave_1 entered promiscuous mode [ 179.478443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.489622] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.504080] IPVS: ftp: loaded support on port[0] = 21 [ 179.517267] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.524473] team0: Port device team_slave_0 added [ 179.530320] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.537364] team0: Port device team_slave_1 added [ 179.543096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.551083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.622331] device hsr_slave_0 entered promiscuous mode [ 179.660237] device hsr_slave_1 entered promiscuous mode [ 179.720822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 179.737045] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 179.794569] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.801107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.807883] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.814235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.824942] chnl_net:caif_netlink_parms(): no params data found [ 179.842566] IPVS: ftp: loaded support on port[0] = 21 [ 179.945190] chnl_net:caif_netlink_parms(): no params data found [ 179.958009] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.965103] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.972046] device bridge_slave_0 entered promiscuous mode [ 179.994177] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.000925] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.007762] device bridge_slave_1 entered promiscuous mode [ 180.014811] IPVS: ftp: loaded support on port[0] = 21 [ 180.069028] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.100776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.109657] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 180.115849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.130967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.154490] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.161095] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.168002] device bridge_slave_0 entered promiscuous mode [ 180.176675] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.183067] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.189958] device bridge_slave_1 entered promiscuous mode [ 180.201004] chnl_net:caif_netlink_parms(): no params data found [ 180.219783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.229148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.252665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.259662] team0: Port device team_slave_0 added [ 180.265613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.272919] team0: Port device team_slave_1 added [ 180.285453] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.292816] team0: Port device team_slave_0 added [ 180.300885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.307958] team0: Port device team_slave_1 added [ 180.319191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.326766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.335469] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.352884] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.363195] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 180.373603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.382626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.389822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.418139] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.424327] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.483391] device hsr_slave_0 entered promiscuous mode [ 180.521794] device hsr_slave_1 entered promiscuous mode [ 180.562724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.623319] device hsr_slave_0 entered promiscuous mode [ 180.660240] device hsr_slave_1 entered promiscuous mode [ 180.700283] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.706654] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.714106] device bridge_slave_0 entered promiscuous mode [ 180.720703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.728612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.736624] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.743044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.749997] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.758821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.769519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.777849] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.784356] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.792222] IPVS: ftp: loaded support on port[0] = 21 [ 180.798237] device bridge_slave_1 entered promiscuous mode [ 180.814402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.821667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.844051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.854731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.863081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.872291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.879774] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.886147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.896320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.916301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.926691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.946939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.959151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.968253] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.975909] team0: Port device team_slave_0 added [ 180.982498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.989533] team0: Port device team_slave_1 added [ 180.996850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.006496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.015582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.023430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.037033] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.046813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.058871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.067248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.095062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.103063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.116204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.193395] device hsr_slave_0 entered promiscuous mode [ 181.230316] device hsr_slave_1 entered promiscuous mode [ 181.270752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.278198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.288214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.298792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.309540] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.315574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.327886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 181.335050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.344137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.356165] chnl_net:caif_netlink_parms(): no params data found [ 181.371828] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 181.415911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.432341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.438822] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 181.488424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.496384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.504340] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.511019] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.517888] device bridge_slave_0 entered promiscuous mode [ 181.537951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.544678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.565140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.572632] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.578973] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.586005] device bridge_slave_1 entered promiscuous mode [ 181.599878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.606748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.614768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.631946] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 181.638019] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.660751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.676523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.684489] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.691879] chnl_net:caif_netlink_parms(): no params data found [ 181.707980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.725759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.737094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.745098] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.758558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.766632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.774331] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.780694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.787570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.795708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.805117] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 181.811279] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.843573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.850783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.860709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.868017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.875863] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.883461] team0: Port device team_slave_0 added [ 181.889171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.896384] team0: Port device team_slave_1 added [ 181.908579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.917828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.928992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.936348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.943390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.951198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.958818] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.965200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.972269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.979880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.987922] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.994309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.003147] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 182.009214] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.017012] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.025064] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.032130] device bridge_slave_0 entered promiscuous mode [ 182.038887] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.045422] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.052338] device bridge_slave_1 entered promiscuous mode [ 182.058456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.066758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.075335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.089409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.105286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 22:40:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r1, r0) [ 182.113182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.121194] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.127557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.135766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.143657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.162211] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.168579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.184584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.198700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 22:40:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r1, r0) [ 182.214615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.221744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.229325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.239549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.248235] bond0: Enslaving bond_slave_0 as an active interface with an up link 22:40:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 182.293692] device hsr_slave_0 entered promiscuous mode [ 182.310363] device hsr_slave_1 entered promiscuous mode [ 182.311523] hrtimer: interrupt took 35085 ns [ 182.345900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.355075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.367771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.375739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.387789] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.394185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.408883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.417518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.428803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 182.438284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 22:40:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 182.449563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.458251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.477031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.487242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.497917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.507586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.524594] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 182.537719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.545710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.558098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.566015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.577840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.587973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.608472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 182.628790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.635922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.644440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 22:40:37 executing program 0: perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff0b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 182.652217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.659785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.675365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.683136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.695002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.703241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.711140] team0: Port device team_slave_0 added [ 182.717684] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.731168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 22:40:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40b}, r3, 0x0, 0xffffffffffffffff, 0x8) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r2, 0x0, 0xa, &(0x7f00000000c0)='syzkaller\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002b00050bd25a80648c6356c11224fc001a0004000a000000053582c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 182.769757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 182.777655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.787107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.795596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.810586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.819777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.827280] audit: type=1400 audit(1576795237.606:38): avc: denied { create } for pid=7104 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.852098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.856481] audit: type=1400 audit(1576795237.626:39): avc: denied { write } for pid=7104 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.863269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.894360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.904340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 182.914818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.922036] team0: Port device team_slave_1 added [ 182.927514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.942997] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 182.948998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.956240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.963979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.974731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 182.982057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.990415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 182.999092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.006549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.014685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.022223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.103715] device hsr_slave_0 entered promiscuous mode [ 183.160441] device hsr_slave_1 entered promiscuous mode [ 183.201206] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.213256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 183.220814] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 183.232816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.243314] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.249310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.257104] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.264247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.272470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.281788] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.287788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.296048] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.312628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.319285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.337498] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 183.346113] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.357584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.370795] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.379268] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 183.386598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.393788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.415658] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.424941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.431819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.447988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.457972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.469113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.491685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.507587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.527165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 183.538041] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.546346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.554001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.565307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.581461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.589799] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.606466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.614795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.622855] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.629211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.636255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.647585] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.655929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.663675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.670650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.677537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.691998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.699497] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.705858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.715467] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 183.722844] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.732502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.744191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.751467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.759153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.767678] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.774064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.780831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.788441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.801434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.813717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.829003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.842919] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.849289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.858559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.868999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.877678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.887529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.897981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.909917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.925248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.932832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.941456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.949026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.957126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.965408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.975074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 22:40:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x5, 0x6809, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 22:40:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40b}, r3, 0x0, 0xffffffffffffffff, 0x8) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r2, 0x0, 0xa, &(0x7f00000000c0)='syzkaller\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002b00050bd25a80648c6356c11224fc001a0004000a000000053582c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 183.985115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 183.994881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.011508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.021548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.028483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.038482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.046319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.053890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.061443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.069102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.086423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 184.096909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.104274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.112446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.119994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.129621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.149617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 184.156119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.165622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 184.174180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.182387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.196464] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 184.202995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.211595] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 184.218646] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.225714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.233185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.247766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.256519] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 184.265209] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.275752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.282708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.295002] 8021q: adding VLAN 0 to HW filter on device batadv0 22:40:39 executing program 5: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 22:40:41 executing program 3: dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000003c0), 0x4) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x3, 0x0, 0x0, 0x0, 0x2) fchdir(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8}, 0x10) 22:40:41 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff0c1000e313000000093903680000000006000300126b", 0x26) 22:40:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/198, 0x1e0}, {0x0}, {0x0, 0xe2}], 0x100000000000000c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff74, &(0x7f00000017c0), 0x2}, 0x0) shutdown(r1, 0x0) 22:40:41 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000740)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 22:40:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffd66, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) accept(r1, &(0x7f0000001b80)=@xdp, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/113, 0x71}, 0x800}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/232, 0xe8}], 0x1, &(0x7f00000005c0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000000680)=@pppol2tp, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000001900)=""/88, 0x58}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/211, 0xd3}, {&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/213, 0xd5}], 0x6}, 0x69534f8d}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/229, 0xe5}], 0x2, &(0x7f0000003100)=""/24, 0x18}, 0x5dbf8ae6}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/79, 0x4f}], 0x1, &(0x7f0000003280)=""/251, 0xfb}, 0x6c}], 0x6, 0x40002000, &(0x7f0000003500)={0x77359400}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) clone(0x40000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000003540)=0x4, 0x2) listen(r4, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003580)='/dev/rfkill\x00', 0x200, 0x0) fcntl$setstatus(r5, 0x4, 0x0) 22:40:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x8010000000000084) close(r1) close(r2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) [ 186.285355] k: renamed from caif0 22:40:41 executing program 3: dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000003c0), 0x4) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x3, 0x0, 0x0, 0x0, 0x2) fchdir(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8}, 0x10) [ 186.384214] device k entered promiscuous mode [ 186.394101] A link change request failed with some changes committed already. Interface k may have been left with an inconsistent configuration, please check. 22:40:41 executing program 3: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="b07e15d325def4ebc9cbb083f881f5755f3e164c4d9fb412fa7b66051a5ce751bdb30d74b71e65d25b15f906db46b1ce896ffb1211", 0x35}], 0x1}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000001800018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xc0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 186.542093] IPVS: ftp: loaded support on port[0] = 21 22:40:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000740)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') r1 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 22:40:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x8010000000000084) close(r1) close(r2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 22:40:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x8010000000000084) close(r1) close(r2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 22:40:41 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast, {[@generic={0x44, 0x4, "ef04"}, @generic={0x44, 0x2}]}}, @igmp={0x0, 0x0, 0x0, @remote}}}}}, 0x0) 22:40:41 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 22:40:41 executing program 3: poll(0x0, 0x0, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1000006a1, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) shutdown(r0, 0x0) 22:40:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffd66, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) accept(r1, &(0x7f0000001b80)=@xdp, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/113, 0x71}, 0x800}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/232, 0xe8}], 0x1, &(0x7f00000005c0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000000680)=@pppol2tp, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000001900)=""/88, 0x58}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/211, 0xd3}, {&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/213, 0xd5}], 0x6}, 0x69534f8d}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/229, 0xe5}], 0x2, &(0x7f0000003100)=""/24, 0x18}, 0x5dbf8ae6}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/79, 0x4f}], 0x1, &(0x7f0000003280)=""/251, 0xfb}, 0x6c}], 0x6, 0x40002000, &(0x7f0000003500)={0x77359400}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) clone(0x40000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000003540)=0x4, 0x2) listen(r4, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003580)='/dev/rfkill\x00', 0x200, 0x0) fcntl$setstatus(r5, 0x4, 0x0) 22:40:41 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2000, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "34e21a", 0x0, 'a^`'}}}}}}, 0x0) 22:40:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r0) close(r1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 22:40:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 22:40:41 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2000, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "34e21a", 0x0, 'a^`'}}}}}}, 0x0) 22:40:42 executing program 0: clone(0x1000080000611, 0x0, 0x0, 0x0, 0x0) getpid() waitid(0x0, 0x0, 0x0, 0x3, 0x0) [ 187.358452] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:40:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r0) close(r1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 22:40:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd5ef, 0x5}, 0x1, 0x5de5, 0x4, 0x0, 0xc05}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_open_dev$loop(0x0, 0x0, 0x49c00) getpid() r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 22:40:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x8010000000000084) close(r1) close(r2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 22:40:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xffffffff) [ 187.668893] audit: type=1400 audit(1576795242.456:40): avc: denied { map } for pid=7345 comm="syz-executor.2" path="/dev/dsp" dev="devtmpfs" ino=553 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 22:40:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00\x00\x00\x00\x00\xc0', 0x3, 0x0) 22:40:42 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') socket$inet6(0xa, 0x80003, 0x80) 22:40:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffd66, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) accept(r1, &(0x7f0000001b80)=@xdp, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/113, 0x71}, 0x800}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/232, 0xe8}], 0x1, &(0x7f00000005c0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000000680)=@pppol2tp, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000001900)=""/88, 0x58}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/211, 0xd3}, {&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/213, 0xd5}], 0x6}, 0x69534f8d}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/229, 0xe5}], 0x2, &(0x7f0000003100)=""/24, 0x18}, 0x5dbf8ae6}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/79, 0x4f}], 0x1, &(0x7f0000003280)=""/251, 0xfb}, 0x6c}], 0x6, 0x40002000, &(0x7f0000003500)={0x77359400}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) clone(0x40000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000003540)=0x4, 0x2) listen(r4, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003580)='/dev/rfkill\x00', 0x200, 0x0) fcntl$setstatus(r5, 0x4, 0x0) 22:40:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd5ef, 0x5}, 0x1, 0x5de5, 0x4, 0x0, 0xc05}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_open_dev$loop(0x0, 0x0, 0x49c00) getpid() r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 22:40:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xffffffff) 22:40:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r0) close(r1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 22:40:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x9, 0x0, 0x0, 0x100000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd5ef, 0x5}, 0x1, 0x5de5, 0x4, 0x0, 0xc05}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10) fallocate(r0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040), 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0x63f2d605a0d987df) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x49c00) getpid() r3 = gettid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x93c22a5876a4b2c5, 0x4, 0x0, 0x9, 0x0, 0x27}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) [ 188.000125] protocol 88fb is buggy, dev hsr_slave_0 [ 188.005356] protocol 88fb is buggy, dev hsr_slave_1 22:40:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000003c0)=0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x3, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2) set_thread_area(&(0x7f0000000400)={0x5, 0x207dabef84e67d9c, 0xffffffffffffffff, 0x1, 0x2, 0x1}) fchdir(r2) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000200"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR, @ANYBLOB='\a\x00'/24], 0x48}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r8, r6) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000240)={0x7, 0x8}, 0x10) 22:40:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000001380)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380), 0x313) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 22:40:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) 22:40:43 executing program 0: perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff0b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 188.371901] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:40:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r0) close(r1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 22:40:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000003c0)=0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x3, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2) set_thread_area(&(0x7f0000000400)={0x5, 0x207dabef84e67d9c, 0xffffffffffffffff, 0x1, 0x2, 0x1}) fchdir(r2) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000200"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR, @ANYBLOB='\a\x00'/24], 0x48}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r8, r6) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000240)={0x7, 0x8}, 0x10) 22:40:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x9, 0x0, 0x0, 0x100000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd5ef, 0x5}, 0x1, 0x5de5, 0x4, 0x0, 0xc05}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10) fallocate(r0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040), 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0x63f2d605a0d987df) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x49c00) getpid() r3 = gettid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x93c22a5876a4b2c5, 0x4, 0x0, 0x9, 0x0, 0x27}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x6}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 22:40:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffd66, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@remote}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) accept(r1, &(0x7f0000001b80)=@xdp, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/113, 0x71}, 0x800}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/232, 0xe8}], 0x1, &(0x7f00000005c0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000000680)=@pppol2tp, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000001900)=""/88, 0x58}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/211, 0xd3}, {&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/213, 0xd5}], 0x6}, 0x69534f8d}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/229, 0xe5}], 0x2, &(0x7f0000003100)=""/24, 0x18}, 0x5dbf8ae6}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/79, 0x4f}], 0x1, &(0x7f0000003280)=""/251, 0xfb}, 0x6c}], 0x6, 0x40002000, &(0x7f0000003500)={0x77359400}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) clone(0x40000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000003540)=0x4, 0x2) listen(r4, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003580)='/dev/rfkill\x00', 0x200, 0x0) fcntl$setstatus(r5, 0x4, 0x0) 22:40:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000003c0)=0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x3, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x2) set_thread_area(&(0x7f0000000400)={0x5, 0x207dabef84e67d9c, 0xffffffffffffffff, 0x1, 0x2, 0x1}) fchdir(r2) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000200"/24, @ANYPTR, @ANYBLOB="0503080000000000", @ANYPTR, @ANYBLOB='\a\x00'/24], 0x48}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x40000}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r8, r6) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000240)={0x7, 0x8}, 0x10) [ 188.720704] protocol 88fb is buggy, dev hsr_slave_0 [ 188.726152] protocol 88fb is buggy, dev hsr_slave_1 [ 188.800093] protocol 88fb is buggy, dev hsr_slave_0 [ 188.805267] protocol 88fb is buggy, dev hsr_slave_1 [ 188.836246] ================================================================== [ 188.843730] BUG: KASAN: use-after-free in __list_del_entry_valid+0xdc/0xf5 [ 188.850734] Read of size 8 at addr ffff88807e2b4ae0 by task syz-executor.3/7433 [ 188.858165] [ 188.859786] CPU: 1 PID: 7433 Comm: syz-executor.3 Not tainted 4.14.159-syzkaller #0 [ 188.867655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.877000] Call Trace: [ 188.879585] dump_stack+0x142/0x197 [ 188.883214] ? __list_del_entry_valid+0xdc/0xf5 [ 188.887873] print_address_description.cold+0x7c/0x1dc [ 188.893141] ? __list_del_entry_valid+0xdc/0xf5 [ 188.897802] kasan_report.cold+0xa9/0x2af [ 188.901950] __asan_report_load8_noabort+0x14/0x20 [ 188.906871] __list_del_entry_valid+0xdc/0xf5 [ 188.911359] cma_cancel_operation+0x28c/0x960 [ 188.915846] ? trace_hardirqs_on_caller+0x400/0x590 [ 188.920857] rdma_destroy_id+0x95/0xb70 [ 188.924824] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 188.929919] ? complete+0x61/0x80 [ 188.933371] ucma_close+0x110/0x310 [ 188.937005] ? ucma_free_ctx+0xa30/0xa30 [ 188.941056] __fput+0x275/0x7a0 [ 188.944331] ____fput+0x16/0x20 [ 188.947604] task_work_run+0x114/0x190 [ 188.951492] exit_to_usermode_loop+0x1da/0x220 [ 188.956067] do_syscall_64+0x4bc/0x640 [ 188.959948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 188.964789] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.969968] RIP: 0033:0x4144b1 [ 188.973149] RSP: 002b:00007ffd013fd270 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 188.980850] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00000000004144b1 [ 188.988113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 188.995372] RBP: 0000000000000001 R08: ffffffff818fc34f R09: 000000006e783fbf [ 189.002643] R10: 00007ffd013fd350 R11: 0000000000000293 R12: 000000000075bf20 [ 189.009902] R13: 000000000002e17f R14: 0000000000763b08 R15: 000000000075bf2c [ 189.017180] ? __vfs_write+0xef/0x6b0 [ 189.020975] [ 189.022594] Allocated by task 7434: [ 189.026212] save_stack_trace+0x16/0x20 [ 189.030176] save_stack+0x45/0xd0 [ 189.033618] kasan_kmalloc+0xce/0xf0 [ 189.037319] kmem_cache_alloc_trace+0x152/0x790 [ 189.041980] rdma_create_id+0x5a/0x4d0 [ 189.045856] ucma_create_id+0x19b/0x5b0 [ 189.049819] ucma_write+0x231/0x310 [ 189.053435] __vfs_write+0x105/0x6b0 [ 189.057135] vfs_write+0x198/0x500 [ 189.060672] SyS_write+0xfd/0x230 [ 189.064115] do_syscall_64+0x1e8/0x640 [ 189.068000] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.073173] [ 189.074795] Freed by task 7434: [ 189.078066] save_stack_trace+0x16/0x20 [ 189.082031] save_stack+0x45/0xd0 [ 189.085471] kasan_slab_free+0x75/0xc0 [ 189.089345] kfree+0xcc/0x270 [ 189.092442] rdma_destroy_id+0x6fa/0xb70 [ 189.096491] ucma_close+0x110/0x310 [ 189.100107] __fput+0x275/0x7a0 [ 189.103378] ____fput+0x16/0x20 [ 189.106650] task_work_run+0x114/0x190 [ 189.110527] exit_to_usermode_loop+0x1da/0x220 [ 189.115098] do_syscall_64+0x4bc/0x640 [ 189.118975] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.124147] [ 189.125766] The buggy address belongs to the object at ffff88807e2b4900 [ 189.125766] which belongs to the cache kmalloc-1024 of size 1024 [ 189.138589] The buggy address is located 480 bytes inside of [ 189.138589] 1024-byte region [ffff88807e2b4900, ffff88807e2b4d00) [ 189.150539] The buggy address belongs to the page: [ 189.155462] page:ffffea0001f8ad00 count:1 mapcount:0 mapping:ffff88807e2b4000 index:0xffff88807e2b5b00 compound_mapcount: 0 [ 189.166723] flags: 0xfffe0000008100(slab|head) [ 189.171307] raw: 00fffe0000008100 ffff88807e2b4000 ffff88807e2b5b00 0000000100000004 [ 189.179291] raw: ffffea00024b44a0 ffffea00024ca2a0 ffff8880aa800ac0 0000000000000000 [ 189.187172] page dumped because: kasan: bad access detected [ 189.192874] [ 189.194490] Memory state around the buggy address: [ 189.199411] ffff88807e2b4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.206761] ffff88807e2b4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.214117] >ffff88807e2b4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.221469] ^ [ 189.227953] ffff88807e2b4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.235301] ffff88807e2b4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.242647] ================================================================== 22:40:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000001380)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380), 0x313) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) [ 189.250009] Disabling lock debugging due to kernel taint [ 189.402873] Kernel panic - not syncing: panic_on_warn set ... [ 189.402873] [ 189.410282] CPU: 1 PID: 7433 Comm: syz-executor.3 Tainted: G B 4.14.159-syzkaller #0 [ 189.419284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.428628] Call Trace: [ 189.431217] dump_stack+0x142/0x197 [ 189.434839] ? __list_del_entry_valid+0xdc/0xf5 [ 189.439499] panic+0x1f9/0x42d [ 189.442685] ? add_taint.cold+0x16/0x16 [ 189.446653] ? ___preempt_schedule+0x16/0x18 [ 189.451055] kasan_end_report+0x47/0x4f [ 189.455028] kasan_report.cold+0x130/0x2af [ 189.459265] __asan_report_load8_noabort+0x14/0x20 [ 189.464275] __list_del_entry_valid+0xdc/0xf5 [ 189.468769] cma_cancel_operation+0x28c/0x960 [ 189.473258] ? trace_hardirqs_on_caller+0x400/0x590 [ 189.478269] rdma_destroy_id+0x95/0xb70 [ 189.482235] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 189.487330] ? complete+0x61/0x80 [ 189.490804] ucma_close+0x110/0x310 [ 189.494427] ? ucma_free_ctx+0xa30/0xa30 [ 189.498480] __fput+0x275/0x7a0 [ 189.501756] ____fput+0x16/0x20 [ 189.505028] task_work_run+0x114/0x190 [ 189.508929] exit_to_usermode_loop+0x1da/0x220 [ 189.513507] do_syscall_64+0x4bc/0x640 [ 189.517392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.522233] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.527410] RIP: 0033:0x4144b1 [ 189.530592] RSP: 002b:00007ffd013fd270 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 189.538289] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00000000004144b1 [ 189.545539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 189.552790] RBP: 0000000000000001 R08: ffffffff818fc34f R09: 000000006e783fbf [ 189.560038] R10: 00007ffd013fd350 R11: 0000000000000293 R12: 000000000075bf20 [ 189.567289] R13: 000000000002e17f R14: 0000000000763b08 R15: 000000000075bf2c [ 189.574549] ? __vfs_write+0xef/0x6b0 [ 189.579751] Kernel Offset: disabled [ 189.583384] Rebooting in 86400 seconds..