iscuous mode [ 322.096092][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.103758][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.112556][ T7979] device bridge_slave_1 entered promiscuous mode [ 322.130666][ T7979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.141694][ T7979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.162673][ T7979] team0: Port device team_slave_0 added [ 322.172720][ T7979] team0: Port device team_slave_1 added [ 322.183826][ T7983] IPVS: ftp: loaded support on port[0] = 21 11:09:27 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="ab76b017f674eabab73cffebb2f45bc9b81da7a2996f8a1ba8deaaa94b4792ffbd7fb4", 0x23, 0x2}, {&(0x7f00000000c0)="977a7be69a8a86731269cb3626f8000fc45dca2be56941963b3662355a5cc38227fbf7cd4c4e94b6074e01c962d0c10e4a63668d751eec119ac13dccb447afd9f2cf90352efd656fe07d56b997d33e31f13011ffc5199ea1adf7ace31c19b71139d4a80daac7cce1ea364cd5a8ab84d702de4708d81f8c0903a3ba5c1985421ab465c633e91445dc1fcd1a27ba73426719fec753561aaed174c88d5cd67e4c0b98a65b1458a51e72dbf3f7a698314e48c9e23454da4827c8c46237999fab42a0d9981ed9b15242e63c661ec26d2f065b290135a9e15ce69cd0311c64d7f991222650e4a8a768ff2647a14d136c224b4b6fb3e6da5e5ad47a", 0xf8, 0x8001}, {&(0x7f00000001c0)="b7e5089e8b1951e402258ca1ff0ff54d452f7bb75b4f6be5da23e72b8cffaa511bfa22a70ed9844dad1508428488d10af67166bfb055d4294e7b68cec4a45bd39c2cff5ad44cc4", 0x47, 0xa6fd}], 0x203020, &(0x7f00000002c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, '&/!@!\x94'}}]}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, r1, r3) gettid() syz_mount_image$tmpfs(&(0x7f0000000500)='tmpfs\x00', &(0x7f0000000540)='./file0\x00', 0x401, 0x5, &(0x7f0000000800)=[{&(0x7f0000000580)="34ccb0eda0882abd27c7cba1761bd75cffcdbc6f7ff1efab1a79fc0cddd7aecf95bd362918de1873e5bcc9719ff2c7b7d4a92eca5e19b3ea9aa687abab1092152c9e39ebbe1a8f981aa875aa1c4a09a236a52a632ea59d87e8e1ec586bdb20afb80e40478b30d07646732f357e08482a2c286f9dbcdb039a0ce713e47a", 0x7d, 0xe99}, {&(0x7f0000000600), 0x0, 0x7ff}, {&(0x7f0000000640), 0x0, 0x101}, {&(0x7f0000000680)="bd068376a34e051fe4beff175400a2705306b98c19e3f41410bcf7c3afaac0d84542fdac9580b91440a2d6f6e8f0632fb2897a188a05a08024e2fbb42d166a36bef6e7a59809159ae1ac956362d76d7a63045daccc7cb9bf7ffa555c197a676e4973ad0d434531523bc75d793aa729cf2be2a3cbe7e0a526417678b982726009fd7076264d1eb5a307a6dbfc89f492657692814ff78c1395c8a64a6ef4fee68d0d763db3060bc67e28ff4879308e7b77f67c05f7b7a9397141f7de0a31f58290c040a6", 0xc3, 0xfffffffffffffff7}, {&(0x7f0000000780)="8af769ffbf8180979b0bb5b8cd91bf938a716d369408e15f3bd9314a60d509cc8359ac35b671be0d759d00a704b151c54479cc2be9578f220e46303ba496492705f21dadeb3443676353ea06eb27824a18693803c8fcf505c9826729248fc818462f9484e3c071cefc57e69cb336e8b0af7a36", 0x73, 0x1}], 0x118000, &(0x7f0000000880)={[], [{@euid_eq={'euid', 0x3d, r2}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 'smackfsdef'}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) ptrace(0x4208, r4) r5 = syz_open_dev$vcsn(&(0x7f0000000980)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x2000) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000009c0)) prctl$PR_SET_DUMPABLE(0x4, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/nvram\x00', 0x10300, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x60000000}, 0x40000000) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x24c0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000b00), &(0x7f0000000b80)=0x80) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000c80)={0x0, &(0x7f0000000bc0)="5d6f49da4a7503bbd772a3e552f35e798051039106f38ea067e5364346db3e1d6a1e08b22d453d9c10dfd412e6d35e02ac6d17e867e0cffa78cda27a068ed88dae438303a3142c6e0e7ae9df7e76f831730e11ad9351942c85f34acaa16cf7a5eca85376ef46107c3b3539157ac178fbefce89a852e7de175c604dff1a23ec22035eda078b8aff9853d4e2ca9468", 0x8e}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000cc0)={{0x2, 0x4e23, @multicast1}, {0x89d33c2278cc1393, @remote}, 0x0, {0x2, 0x4e21, @rand_addr=0x1}, 'netdevsim0\x00'}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/full\x00', 0x80100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000d80)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000dc0)={r9, 0xcfa519ea5b927789, r6}) rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='./file0\x00') r10 = open(&(0x7f0000000e80)='./file1\x00', 0x141000, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r10, 0xc0605345, &(0x7f0000000ec0)={0x9, 0x0, {0x3, 0x3, 0x0, 0x2ec5f0150841bd7c, 0x50000000}, 0x7fff}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x90001}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r12, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x4a, 0x2}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_open_dev$vivid(&(0x7f00000010c0)='/dev/video#\x00', 0x0, 0x2) ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000001300)=0xe8) syz_mount_image$btrfs(&(0x7f0000001100)='btrfs\x00', &(0x7f0000001140)='./file1\x00', 0x25, 0x1, &(0x7f00000011c0)=[{&(0x7f0000001180)="8bb3a69487fee42eb59018920a7c05b4f10c0b8247b82ecd14121030ce90e844ecd0317c535a", 0x26, 0x4}], 0x4, &(0x7f0000001340)={[{@fragment_metadata='fragment=metadata'}, {@check_int_print_mask={'check_int_print_mask'}}, {@barrier='barrier'}, {@ssd='ssd'}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}], [{@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}, {@euid_eq={'euid', 0x3d, r13}}, {@fsname={'fsname', 0x3d, 'netdevsim0\x00'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@obj_role={'obj_role', 0x3d, '/dev/nvram\x00'}}]}) [ 322.231904][ T7979] device hsr_slave_0 entered promiscuous mode [ 322.290920][ T7979] device hsr_slave_1 entered promiscuous mode [ 322.435287][ T7979] netdevsim netdevsim0 netdevsim0: renamed from eth0 11:09:28 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x3119c0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x3, 0x200) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @remote}}, 0x1e) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) getpid() ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x38, "f4e140bf79c5453daeb75ded69bf580919e9b39d1b6c86573724937cd1ad1a00c8d613f77c6c8ec8ff8ca3a2d4d15fd6090c3d2fd73cfc66"}, &(0x7f0000000480)=0x40) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=r4, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000500)={0xfff7, 0x6, 0x1000}, 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000540)={0xfffffe00, 0x35323645, 0x1, @discrete={0x7}}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000580)={0x22a7, 0x9, 0x4, 0x0, 0xfffffffd, {0x0, 0x2710}, {0x1, 0x1, 0x4, 0x1, 0x8, 0x5, 'YgU*'}, 0x7, 0x1, @userptr=0x65c, 0x7, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000900)={0x7fffffff, 0xc, 0x4, 0x0, 0x3, {r7, r8/1000+10000}, {0x5, 0x12, 0x3, 0x5, 0x0, 0x1, "e02aca93"}, 0x9, 0x1, @fd, 0x422, 0x0, 0xffffffffffffffff}) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000980)='/proc/capi/capi20ncci\x00', 0x200, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f00000009c0)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000000b00)=""/105, 0x69}, {&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000c00)=""/108, 0x6c}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000d00)=""/111, 0x6f}], 0x7, &(0x7f0000000e00)=""/253, 0xfd}, 0x80000000}, {{&(0x7f0000000f00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000f80)=""/50, 0x32}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/51, 0x33}, {&(0x7f0000002000)=""/103, 0x67}, {&(0x7f0000002080)=""/26, 0x1a}], 0x5, &(0x7f0000002140)=""/6, 0x6}, 0x4}, {{&(0x7f0000002180)=@sco, 0x80, &(0x7f0000002340)=[{&(0x7f0000002200)=""/36, 0x24}, {&(0x7f0000002240)=""/198, 0xc6}], 0x2, &(0x7f0000002380)=""/211, 0xd3}}, {{&(0x7f0000002480)=@ax25={{}, [@rose, @netrom, @remote, @bcast, @netrom, @remote, @rose, @bcast]}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/166, 0xa6}], 0x1, &(0x7f0000002600)=""/210, 0xd2}, 0x1}, {{&(0x7f0000002700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/206, 0xce}, {&(0x7f0000002880)=""/154, 0x9a}, {&(0x7f0000002940)=""/23, 0x17}, {&(0x7f0000002980)=""/209, 0xd1}, {&(0x7f0000002a80)=""/129, 0x81}], 0x5, &(0x7f0000002bc0)=""/196, 0xc4}, 0x81}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000002cc0)=""/226, 0xe2}, {&(0x7f0000002dc0)=""/212, 0xd4}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/39, 0x27}, {&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/6, 0x6}], 0x7, &(0x7f0000005000)}, 0x9}], 0x6, 0x10124, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008d40)=[{{&(0x7f00000051c0)=@caif=@util, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005240)=""/78, 0x4e}, {&(0x7f00000052c0)}, {&(0x7f0000005300)=""/114, 0x72}, {&(0x7f0000005380)=""/38, 0x26}], 0x4, &(0x7f0000005400)=""/22, 0x16}, 0x3ff}, {{&(0x7f0000005440), 0x80, &(0x7f0000006ac0)=[{&(0x7f00000054c0)=""/196, 0xc4}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/193, 0xc1}, {&(0x7f00000066c0)=""/56, 0x38}, {&(0x7f0000006700)=""/239, 0xef}, {&(0x7f0000006800)=""/48, 0x30}, {&(0x7f0000006840)=""/42, 0x2a}, {&(0x7f0000006880)=""/86, 0x56}, {&(0x7f0000006900)=""/201, 0xc9}, {&(0x7f0000006a00)=""/157, 0x9d}], 0xa, &(0x7f0000006b80)=""/57, 0x39}, 0x9}, {{&(0x7f0000006bc0)=@nfc_llcp, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006c40)=""/8, 0x8}, {&(0x7f0000006c80)=""/32, 0x20}, {&(0x7f0000006cc0)=""/225, 0xe1}], 0x3, &(0x7f0000006e00)=""/116, 0x74}, 0x6}, {{&(0x7f0000006e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000007480)=[{&(0x7f0000006f00)=""/25, 0x19}, {&(0x7f0000006f40)=""/117, 0x75}, {&(0x7f0000006fc0)=""/245, 0xf5}, {&(0x7f00000070c0)=""/171, 0xab}, {&(0x7f0000007180)=""/102, 0x66}, {&(0x7f0000007200)=""/239, 0xef}, {&(0x7f0000007300)=""/226, 0xe2}, {&(0x7f0000007400)=""/84, 0x54}], 0x8, &(0x7f0000007500)=""/214, 0xd6}, 0xfffffffb}, {{&(0x7f0000007600)=@can, 0x80, &(0x7f0000008c80)=[{&(0x7f0000007680)=""/253, 0xfd}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/252, 0xfc}, {&(0x7f0000008880)=""/151, 0x97}, {&(0x7f0000008940)=""/165, 0xa5}, {&(0x7f0000008a00)=""/214, 0xd6}, {&(0x7f0000008b00)=""/210, 0xd2}, {&(0x7f0000008c00)=""/105, 0x69}], 0x8, &(0x7f0000008d00)=""/45, 0x2d}, 0x20}], 0x5, 0x895e2676fa01fc4b, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000008e80)='/dev/sequencer2\x00', 0xaf3375d09a2d9ca7, 0x0) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008ec0)='/dev/vsock\x00', 0x200, 0x0) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000091c0)='/dev/vga_arbiter\x00', 0x301400, 0x0) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000009200)='/proc/self/net/pfkey\x00', 0x111000, 0x0) r17 = syz_open_dev$mice(&(0x7f0000009240)='/dev/input/mice\x00', 0x0, 0x400000) pipe(&(0x7f0000009280)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000009400)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000093c0)={&(0x7f00000092c0)={0xf4, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r13}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r17}, {0x8, 0x1, r0}, {0x8, 0x1, r18}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xcf7d5414a8016ec7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) unshare(0x2000000) clock_gettime(0x0, &(0x7f000000aa80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000a900)=[{{&(0x7f0000009440)=@ax25={{0x3, @netrom}, [@null, @rose, @null, @remote, @null, @null, @netrom, @default]}, 0x80, &(0x7f00000099c0)=[{&(0x7f00000094c0)=""/206, 0xce}, {&(0x7f00000095c0)=""/214, 0xd6}, {&(0x7f00000096c0)=""/227, 0xe3}, {&(0x7f00000097c0)=""/54, 0x36}, {&(0x7f0000009800)=""/152, 0x98}, {&(0x7f00000098c0)=""/143, 0x8f}, {&(0x7f0000009980)=""/30, 0x1e}], 0x7, &(0x7f0000009a40)}, 0x2}, {{&(0x7f0000009a80)=@can, 0x80, &(0x7f0000009c00)=[{&(0x7f0000009b00)=""/213, 0xd5}], 0x1}, 0x806c605}, {{&(0x7f0000009c40)=@un=@abs, 0x80, &(0x7f0000009d00)=[{&(0x7f0000009cc0)=""/36, 0x24}], 0x1, &(0x7f0000009d40)=""/176, 0xb0}}, {{&(0x7f0000009e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000009f00)=[{&(0x7f0000009e80)=""/74, 0x4a}], 0x1, &(0x7f0000009f40)=""/6, 0x6}, 0x8}, {{&(0x7f0000009f80)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f000000a500)=[{&(0x7f000000a000)=""/120, 0x78}, {&(0x7f000000a080)=""/252, 0xfc}, {&(0x7f000000a180)=""/216, 0xd8}, {&(0x7f000000a280)=""/45, 0x2d}, {&(0x7f000000a2c0)=""/212, 0xd4}, {&(0x7f000000a3c0)=""/37, 0x25}, {&(0x7f000000a400)=""/231, 0xe7}], 0x7, &(0x7f000000a580)=""/163, 0xa3}, 0x2}, {{&(0x7f000000a640)=@pppoe, 0x80, &(0x7f000000a7c0)=[{&(0x7f000000a6c0)=""/234, 0xea}], 0x1, &(0x7f000000a800)=""/199, 0xc7}, 0x81}], 0x6, 0x1, &(0x7f000000aac0)={r19, r20+30000000}) r22 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f000000ab40)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r21, &(0x7f000000ac00)={&(0x7f000000ab00), 0xc, &(0x7f000000abc0)={&(0x7f000000ab80)={0x2c, r22, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, [{0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc131}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ff46b21}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 322.501737][ T7979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.620625][ T7979] netdevsim netdevsim0 netdevsim2: renamed from eth2 11:09:28 executing program 4: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0xfffffff8, 0x1, 0x4, 0x10000, 0x4, {0x77359400}, {0x2, 0xc, 0x0, 0xff, 0x40, 0x17, "3cffa760"}, 0x1, 0x3, @userptr=0x3, 0x2, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/131) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x2, 0x22000) r2 = socket$rxrpc(0x21, 0x2, 0xa) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000180)={{0x2, 0x0, @reserved="5af024c2b6adcc987ad940d1f6b54d2ca10dab63f5003ca052021a8bd1169082"}}) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x20000, 0x2000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200)={0x2, 'veth1\x00', {0x9}, 0x8}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x1004, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000280)={0x8, 0xd8a, 0x6d, 0x1, 0x7}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x341000, 0x0) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000300)=0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x400280, 0x0) r11 = openat$vfio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vfio/vfio\x00', 0x101600, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r9, &(0x7f0000000500)={r10, r11, 0x80000000}) socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r13, &(0x7f0000000800)={&(0x7f0000000580), 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, r14, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) r15 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20ncci\x00', 0x45c881, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r15, 0x4018ae51, &(0x7f0000000880)={0x200, 0x165d, 0x9}) dup2(r12, r1) r16 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000940)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x22000}, @can={0x1d, 0x0}, @ipx={0x4, 0x8000, 0x800, "5754aa742696", 0x6}, 0x2, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000900)='bond_slave_1\x00', 0x5, 0x7, 0x8}) bind$can_raw(r16, &(0x7f00000009c0)={0x1d, r17}, 0x10) [ 322.711617][ T7979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.774378][ T7986] IPVS: ftp: loaded support on port[0] = 21 [ 322.797629][ T7988] IPVS: ftp: loaded support on port[0] = 21 [ 322.833414][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.840547][ T7979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.847882][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.854963][ T7979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.901825][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 323.018382][ T7979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.036760][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.046562][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.054959][ T7983] device bridge_slave_0 entered promiscuous mode 11:09:28 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x84) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$TIOCSSERIAL(r3, 0x541e, &(0x7f0000000140)={0xc8, 0x4, 0x2, 0x6d, 0x7, 0x6, 0x2326, 0x3, 0xffff, 0x5, 0x7, 0x8, 0x1, 0x5, &(0x7f0000000100)=""/7, 0x5, 0x1, 0x1ff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000240)="0aba2839f4a0771ec8d46d683e88c3eff9f9da21816178f3e34f4d171e0ffb2206ee814183f7a1fdf2eaff2b30ff8e4d818dd9543ba1140bf0745f335357b456fb56891b43e0951f4e1946c077d3676276077015c7b359182443a01e23a2d11493b974d5ec23d235cd1f522b0788f24f2dd1e0ca89d9dc5da9bdaa16416f92df500956d36e7976e11e0b862e088e05edbb4de6fb33c52c2fc64dae803f2fd49814a14f09d0f3cc6ba51402277a1f1c5e31af2671ae73d310d7ecd25b4434e7beb53003eb2195ccb67d0d65c6d4b1c7b93a18320a0db8051dedacdce26e911c3b89ad912c43c97d8defe1403cd34a177489", 0xf1, 0x2}, {&(0x7f0000000340)="7ecc84069d53cadd3a505973c4da12871be511e19765ce2bf9ed052c4be8af670ad79b1e2c564120826f9e1dd2ba88575980f045ea65fb227ed46984bd29793968c8ecee3754b522779af1c85fac3820876e863bb30728", 0x57, 0xffffffffffffff7f}], 0x640a0, &(0x7f0000000540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x30, 0x0, 0x0, 0x37]}}, {@huge_within_size={'huge=within_size', 0x3d, '.$'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x37, 0x0, 0x0, 0x61, 0x33, 0x38], 0x2d, [0xd64460e54fd8c601, 0x63, 0x32, 0x37], 0x2d, [0x63, 0x38, 0x62, 0x63], 0x2d, [0x30, 0x50, 0x35, 0x31], 0x2d, [0x32, 0x37, 0x32, 0x33, 0x64, 0x64, 0x32, 0x39]}}}, {@subj_role={'subj_role', 0x3d, 'vmnet0security'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r4}}, {@audit='audit'}, {@obj_user={'obj_user', 0x3d, '+'}}, {@fsname={'fsname', 0x3d, '##'}}, {@seclabel='seclabel'}, {@context={'context', 0x3d, 'user_u'}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000840)=r5) r6 = accept$inet(r1, &(0x7f0000000880), &(0x7f00000008c0)=0x10) read(r6, &(0x7f0000000900)=""/50, 0x32) recvmmsg(r3, &(0x7f00000022c0)=[{{&(0x7f0000000940)=@isdn, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/154, 0x9a}, {&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/96, 0x60}], 0x4, &(0x7f0000000cc0)=""/198, 0xc6}, 0x1}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/236, 0xec}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/191, 0xbf}, {&(0x7f0000002100)=""/51, 0x33}, {&(0x7f0000002140)=""/85, 0x55}], 0x6, &(0x7f0000002240)=""/92, 0x5c}, 0x9}], 0x2, 0x40000000, &(0x7f0000002340)={0x77359400}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002380)='/dev/sequencer\x00', 0x1440, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000023c0)={0x51c, 0x8001, 0x8, 0x9}, 0x8) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000002400)={0x0, @src_change}) r8 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x5, 0x200880) ioctl$TCSBRKP(r8, 0x5425, 0x74f) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002500)={'hsr0\x00', {0x2, 0x4e20, @multicast1}}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000002580)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000002540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x101ffff7f, 0xffffff00, 0x5, 0x5, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x181]}}, {@mac=@local, {[0x0, 0xff, 0x17e]}}, 0x3, 0xd6d, 0xff, 0x0, 0x7ff, 0x8, 'syzkaller1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x1f}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff, 0xffffffff, 0x8, 0x8, {@empty, {[0x101, 0x0, 0x80, 0x1709a5199daa5dcf, 0x220dc36e02915b82, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff]}}, 0x449e, 0x2, 0x1, 0x8d, 0x8, 0x1, 'veth0_vlan\x00', 'rose0\x00', {}, {0x70062b2c662a2be5}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x8001, @remote, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002a00), &(0x7f0000002a80)=0x60) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000002b00)={0x0, &(0x7f0000002ac0)}, 0x10) r11 = syz_open_dev$vcsa(&(0x7f0000002b40)='/dev/vcsa#\x00', 0x8, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002b80)={0x0, @in={{0x2, 0x4e23, @rand_addr=0xfff}}, 0x6, 0x5, 0x200, 0x0, 0x40, 0x1, 0xff}, &(0x7f0000002c40)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000002c80)={r12, 0xb360, 0x4}, &(0x7f0000002cc0)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000002d00), &(0x7f0000002d40)=0xe) r13 = add_key(&(0x7f0000002d80)='blacklist\x00', &(0x7f0000002dc0)={'syz', 0x2}, &(0x7f0000002e00)="9721fa092cf3d696a99bbc7110d94835ae26086939", 0x15, 0xfffffffffffffffc) keyctl$setperm(0x5, r13, 0x1320802) [ 323.064294][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.072984][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.084170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 323.117201][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.118420][ T7992] IPVS: ftp: loaded support on port[0] = 21 [ 323.125575][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.137893][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.147031][ T7983] device bridge_slave_1 entered promiscuous mode [ 323.158049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.167025][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.250306][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.260080][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.268577][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.277384][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.284718][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.292647][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.301346][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.310001][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.317079][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.325159][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.334695][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.343668][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.352907][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.362265][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.385733][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.404275][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.420168][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.428891][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.438064][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.446683][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.455299][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.464136][ T7986] chnl_net:caif_netlink_parms(): no params data found [ 323.488502][ T7996] IPVS: ftp: loaded support on port[0] = 21 [ 323.498414][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.519352][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 323.532961][ T7983] team0: Port device team_slave_0 added [ 323.556168][ T7983] team0: Port device team_slave_1 added [ 323.651468][ T7983] device hsr_slave_0 entered promiscuous mode [ 323.689806][ T7983] device hsr_slave_1 entered promiscuous mode [ 323.729687][ T7983] debugfs: Directory 'hsr0' with parent '/' already present! [ 323.779759][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.786925][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.794997][ T7986] device bridge_slave_0 entered promiscuous mode [ 323.802654][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.809738][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.817770][ T7986] device bridge_slave_1 entered promiscuous mode [ 323.829756][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.837078][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.846752][ T7988] device bridge_slave_0 entered promiscuous mode [ 323.879549][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.886703][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.896313][ T7988] device bridge_slave_1 entered promiscuous mode [ 323.915383][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.923101][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.943924][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.954657][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.966548][ T7979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.980625][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 323.990945][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.005661][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.050869][ T7986] team0: Port device team_slave_0 added [ 324.058086][ T7986] team0: Port device team_slave_1 added [ 324.121774][ T7986] device hsr_slave_0 entered promiscuous mode [ 324.179836][ T7986] device hsr_slave_1 entered promiscuous mode [ 324.239653][ T7986] debugfs: Directory 'hsr0' with parent '/' already present! [ 324.272831][ T7988] team0: Port device team_slave_0 added [ 324.280123][ T7988] team0: Port device team_slave_1 added [ 324.293867][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 324.311048][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.320240][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.345964][ T7979] device veth0_vlan entered promiscuous mode [ 324.367533][ T7983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.412494][ T7983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.471708][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.480371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.489199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.497570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.561610][ T7988] device hsr_slave_0 entered promiscuous mode [ 324.629877][ T7988] device hsr_slave_1 entered promiscuous mode [ 324.669627][ T7988] debugfs: Directory 'hsr0' with parent '/' already present! [ 324.683641][ T7983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.751298][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.758426][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.766471][ T7992] device bridge_slave_0 entered promiscuous mode [ 324.776363][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.783569][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.792380][ T7992] device bridge_slave_1 entered promiscuous mode [ 324.799319][ T7983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.848297][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.855471][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.863540][ T7996] device bridge_slave_0 entered promiscuous mode [ 324.881211][ T7979] device veth1_vlan entered promiscuous mode [ 324.890849][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.897951][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.905954][ T7996] device bridge_slave_1 entered promiscuous mode [ 324.938468][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.966275][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.980241][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.989375][ T7986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.031457][ T7986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.076531][ T7986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.123431][ T7986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.184293][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.252597][ T7992] team0: Port device team_slave_0 added [ 325.259284][ T7988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.291465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.304205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.321168][ T7996] team0: Port device team_slave_0 added [ 325.328531][ T7992] team0: Port device team_slave_1 added [ 325.347973][ T8006] fuse: Bad value for 'fd' [ 325.364164][ T7988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.422727][ T7988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.423070][ T8011] fuse: Bad value for 'fd' 11:09:31 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000100)="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", 0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x728da5aa63db1f00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000040)=""/107) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000d00)) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d40)) r6 = getpid() process_vm_readv(r6, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) clone3(&(0x7f0000001080)={0x40000000, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x34}, &(0x7f0000000e80)=""/140, 0x8c, &(0x7f0000000f40)=""/203, &(0x7f0000001040)=[0x0, 0xffffffffffffffff, r6], 0x3}, 0x50) write$cgroup_pid(r1, &(0x7f0000000000)=r7, 0xfffffffffffffe48) [ 325.481599][ T7988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.571391][ T7996] team0: Port device team_slave_1 added [ 325.591482][ T26] audit: type=1804 audit(1579345771.186:31): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/1/bus" dev="sda1" ino=16520 res=1 [ 325.619028][ T7992] device hsr_slave_0 entered promiscuous mode [ 325.627312][ C1] hrtimer: interrupt took 44411 ns [ 325.648641][ T26] audit: type=1804 audit(1579345771.236:32): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/1/bus" dev="sda1" ino=16520 res=1 [ 325.675198][ T26] audit: type=1804 audit(1579345771.246:33): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/1/bus" dev="sda1" ino=16520 res=1 [ 325.704486][ T7992] device hsr_slave_1 entered promiscuous mode [ 325.729207][ T8015] IPVS: ftp: loaded support on port[0] = 21 [ 325.750255][ T7992] debugfs: Directory 'hsr0' with parent '/' already present! [ 325.901773][ T7996] device hsr_slave_0 entered promiscuous mode [ 325.939889][ T7996] device hsr_slave_1 entered promiscuous mode [ 325.999494][ T7996] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.076367][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.122686][ T7992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.133420][ T587] tipc: TX() has been purged, node left! [ 326.182149][ T7992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.240600][ T26] audit: type=1804 audit(1579345771.836:34): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/1/bus" dev="sda1" ino=16520 res=1 [ 326.273222][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.279930][ T26] audit: type=1804 audit(1579345771.866:35): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/1/bus" dev="sda1" ino=16520 res=1 [ 326.280523][ T7992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.315903][ T8016] IPVS: ftp: loaded support on port[0] = 21 [ 326.372282][ T7992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.445229][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.463008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.471062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.479123][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.487393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.552478][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.571076][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.590118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.599038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.610961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.618222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.629151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.639105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.650331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.657476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.668416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.678539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.690363][ T7996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.771548][ T7996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.826838][ T7996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.872925][ T7996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.954803][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.966191][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.975837][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.984908][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.993921][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.002636][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.011274][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.018396][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.026329][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.034925][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.043640][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.050881][ T7998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.059225][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.067285][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.075354][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.085760][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.094457][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.130388][ T7983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.140929][ T7983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.153509][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.162690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.171781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.180641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.187717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.195665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.204296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.212942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.221651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.230216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.237656][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.245698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.254424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.263243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.272495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.281762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.290844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.299580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.307783][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.316652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.325149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.334579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.342641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.351077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.358673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.367157][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.397038][ T7986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.413455][ T7986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.423714][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.433462][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.444030][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.452662][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.462086][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.470824][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.483848][ T7988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.497068][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.522826][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.531513][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.540497][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.549077][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.557702][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.567808][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.586288][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.609587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.617158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.625942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.633850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.661890][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.680732][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.688505][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.698116][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.707521][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.715337][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.740662][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.757627][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.766482][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.779970][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.794624][ T7983] device veth0_vlan entered promiscuous mode [ 327.848270][ T7988] device veth0_vlan entered promiscuous mode [ 327.856134][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.865160][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.874033][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.882832][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.891673][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.898815][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.906869][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.915099][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.924079][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.932614][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.965748][ T7983] device veth1_vlan entered promiscuous mode [ 327.984613][ T7988] device veth1_vlan entered promiscuous mode [ 328.002703][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.014923][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.024783][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.034562][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.045322][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.055646][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.065588][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.075534][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.086183][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.097232][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.108215][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.118443][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.125553][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.136895][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.146034][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.166112][ T7992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.181398][ T7992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.198063][ T7986] device veth0_vlan entered promiscuous mode [ 328.222467][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.231005][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.239187][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.249209][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.265118][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.280242][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.289154][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.316430][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 11:09:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x22e060, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0xc30000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000180)=""/146, 0x92, 0x40000081, &(0x7f00000005c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) r7 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) [ 328.334402][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.350054][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.363196][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.372626][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.391808][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.400699][ T7986] device veth1_vlan entered promiscuous mode [ 328.414130][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.425612][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.433819][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.442126][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.451072][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.461966][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.470890][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.478325][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.493141][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.508478][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.539178][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.551265][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.584336][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.602654][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.627089][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.634317][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.679233][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.680888][ T8021] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 328.692181][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.717409][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.724573][ T7998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.733151][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.745855][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:09:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x34000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x1}], 0x1}}], 0x2, 0x0) [ 328.746303][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.747329][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.748128][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.749056][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.750021][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:09:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000048003950323030302e75"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x26f) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x8000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="90000000010804002abd7000fedbdf25070000010600024000150000050003002900000014000480080001400000010008000140bc0a1702f7bfbd512c01b57f21c0f2000000030900010073797a30000000004c00048008000140000003ff080001400000008108000140000000040800014000000005080001407fffffff0800014000005d7a08000140000000010800013fffffe10408000140000001ff"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d283b0ca39e2aeeb6eae643e2bf34ed9e65bc921cb6d0dd7dcbfd07f3e2ea1df33343159f751c08520bd749a686f9e7a303", @ANYRESHEX=r5, @ANYBLOB=',\x00']) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000fda8df2504000001"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$dsp(r6, &(0x7f00000003c0)="a2", 0x1) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r7, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$dsp(r8, &(0x7f00000003c0)="a2", 0x1) setsockopt$inet6_dccp_int(r8, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4) bind$bt_rfcomm(r7, &(0x7f0000000340)={0x1f, {0x8d95, 0x80000000, 0x84, 0x9, 0x6, 0x175a}, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r10, 0x5, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8001444}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r10, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x400440c) [ 328.751795][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.770363][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.771049][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.838219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.838946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.847582][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.898198][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.898923][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.949672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.950506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.954981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.955593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.969829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.969976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.971805][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.976333][ T7992] device veth0_vlan entered promiscuous mode [ 329.015186][ T7992] device veth1_vlan entered promiscuous mode [ 329.244333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.244907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 329.245476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.245993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.275046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 11:09:35 executing program 3: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000640)=""/91, 0x5b) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x1b}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}], 0x7, &(0x7f0000002400)=""/191, 0xbf}}], 0x14c, 0x0, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={[], 0x25}, @loopback, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast}}}}, &(0x7f0000000200)={0x0, 0x2, [0x6e2, 0x17b, 0x9a5, 0xc25]}) 11:09:35 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="ab76b017f674eabab73cffebb2f45bc9b81da7a2996f8a1ba8deaaa94b4792ffbd7fb4", 0x23, 0x2}, {&(0x7f00000000c0)="977a7be69a8a86731269cb3626f8000fc45dca2be56941963b3662355a5cc38227fbf7cd4c4e94b6074e01c962d0c10e4a63668d751eec119ac13dccb447afd9f2cf90352efd656fe07d56b997d33e31f13011ffc5199ea1adf7ace31c19b71139d4a80daac7cce1ea364cd5a8ab84d702de4708d81f8c0903a3ba5c1985421ab465c633e91445dc1fcd1a27ba73426719fec753561aaed174c88d5cd67e4c0b98a65b1458a51e72dbf3f7a698314e48c9e23454da4827c8c46237999fab42a0d9981ed9b15242e63c661ec26d2f065b290135a9e15ce69cd0311c64d7f991222650e4a8a768ff2647a14d136c224b4b6fb3e6da5e5ad47a", 0xf8, 0x8001}, {&(0x7f00000001c0)="b7e5089e8b1951e402258ca1ff0ff54d452f7bb75b4f6be5da23e72b8cffaa511bfa22a70ed9844dad1508428488d10af67166bfb055d4294e7b68cec4a45bd39c2cff5ad44cc4", 0x47, 0xa6fd}], 0x203020, &(0x7f00000002c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, '&/!@!\x94'}}]}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, r1, r3) gettid() syz_mount_image$tmpfs(&(0x7f0000000500)='tmpfs\x00', &(0x7f0000000540)='./file0\x00', 0x401, 0x5, &(0x7f0000000800)=[{&(0x7f0000000580)="34ccb0eda0882abd27c7cba1761bd75cffcdbc6f7ff1efab1a79fc0cddd7aecf95bd362918de1873e5bcc9719ff2c7b7d4a92eca5e19b3ea9aa687abab1092152c9e39ebbe1a8f981aa875aa1c4a09a236a52a632ea59d87e8e1ec586bdb20afb80e40478b30d07646732f357e08482a2c286f9dbcdb039a0ce713e47a", 0x7d, 0xe99}, {&(0x7f0000000600), 0x0, 0x7ff}, {&(0x7f0000000640), 0x0, 0x101}, {&(0x7f0000000680)="bd068376a34e051fe4beff175400a2705306b98c19e3f41410bcf7c3afaac0d84542fdac9580b91440a2d6f6e8f0632fb2897a188a05a08024e2fbb42d166a36bef6e7a59809159ae1ac956362d76d7a63045daccc7cb9bf7ffa555c197a676e4973ad0d434531523bc75d793aa729cf2be2a3cbe7e0a526417678b982726009fd7076264d1eb5a307a6dbfc89f492657692814ff78c1395c8a64a6ef4fee68d0d763db3060bc67e28ff4879308e7b77f67c05f7b7a9397141f7de0a31f58290c040a6", 0xc3, 0xfffffffffffffff7}, {&(0x7f0000000780)="8af769ffbf8180979b0bb5b8cd91bf938a716d369408e15f3bd9314a60d509cc8359ac35b671be0d759d00a704b151c54479cc2be9578f220e46303ba496492705f21dadeb3443676353ea06eb27824a18693803c8fcf505c9826729248fc818462f9484e3c071cefc57e69cb336e8b0af7a36", 0x73, 0x1}], 0x118000, &(0x7f0000000880)={[], [{@euid_eq={'euid', 0x3d, r2}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 'smackfsdef'}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) ptrace(0x4208, r4) r5 = syz_open_dev$vcsn(&(0x7f0000000980)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x2000) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000009c0)) prctl$PR_SET_DUMPABLE(0x4, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/nvram\x00', 0x10300, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x60000000}, 0x40000000) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/sequencer2\x00', 0x24c0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000b00), &(0x7f0000000b80)=0x80) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000c80)={0x0, &(0x7f0000000bc0)="5d6f49da4a7503bbd772a3e552f35e798051039106f38ea067e5364346db3e1d6a1e08b22d453d9c10dfd412e6d35e02ac6d17e867e0cffa78cda27a068ed88dae438303a3142c6e0e7ae9df7e76f831730e11ad9351942c85f34acaa16cf7a5eca85376ef46107c3b3539157ac178fbefce89a852e7de175c604dff1a23ec22035eda078b8aff9853d4e2ca9468", 0x8e}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000cc0)={{0x2, 0x4e23, @multicast1}, {0x89d33c2278cc1393, @remote}, 0x0, {0x2, 0x4e21, @rand_addr=0x1}, 'netdevsim0\x00'}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/full\x00', 0x80100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000d80)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000dc0)={r9, 0xcfa519ea5b927789, r6}) rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='./file0\x00') r10 = open(&(0x7f0000000e80)='./file1\x00', 0x141000, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r10, 0xc0605345, &(0x7f0000000ec0)={0x9, 0x0, {0x3, 0x3, 0x0, 0x2ec5f0150841bd7c, 0x50000000}, 0x7fff}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x90001}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r12, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x4a, 0x2}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_open_dev$vivid(&(0x7f00000010c0)='/dev/video#\x00', 0x0, 0x2) ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000001300)=0xe8) syz_mount_image$btrfs(&(0x7f0000001100)='btrfs\x00', &(0x7f0000001140)='./file1\x00', 0x25, 0x1, &(0x7f00000011c0)=[{&(0x7f0000001180)="8bb3a69487fee42eb59018920a7c05b4f10c0b8247b82ecd14121030ce90e844ecd0317c535a", 0x26, 0x4}], 0x4, &(0x7f0000001340)={[{@fragment_metadata='fragment=metadata'}, {@check_int_print_mask={'check_int_print_mask'}}, {@barrier='barrier'}, {@ssd='ssd'}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}], [{@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}, {@euid_eq={'euid', 0x3d, r13}}, {@fsname={'fsname', 0x3d, 'netdevsim0\x00'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@obj_role={'obj_role', 0x3d, '/dev/nvram\x00'}}]}) [ 329.275826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.276812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.277296][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.286187][ T7996] device veth0_vlan entered promiscuous mode [ 329.468177][ T8083] 9pnet: Insufficient options for proto=fd [ 329.530070][ T7996] device veth1_vlan entered promiscuous mode [ 329.553975][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.571106][ T8081] 9pnet: Insufficient options for proto=fd 11:09:35 executing program 4: creat(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000080)={0x400000000, 0xf20, 0x9, 0x3, 0x216, 0x2, 0x200, 0x4}, &(0x7f00000000c0)={0x9, 0xd5a2, 0xb6, 0x10001, 0x5d36f0bf, 0x7, 0x30f, 0x2}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x7fff, 0x1440000000000000, 0x73a6, 0x2, 0x756, 0xffffffffffffff3b}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000200)={&(0x7f00000001c0)={0x2}, 0x8}) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000580)="4c224d3922e7ff44607ac5f53bed0723bbe428445c326807c858aedd98cc4b894def83651bc2338880000000b3630071fbcfc667281c3f4c936d12bb61cbba38cd584711bfdbc16e9da5e5487a", 0x4d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f00000002c0)="1e0c3eb9660b25c93a3e390aff5dacdbb900e1552f5382635f03e9bf5f6d08716763603dafabe33abf5ecfd80ab0a35980bd9813f2e48011786e9505d22ac4f1e62fc500e0e30647ea5e559082741d9a7247284bc0c9413b53af162786f65100542906d2eafcf1e697cb08f177a64febf1a552661e53f81286ca61963ec103b74fcb6ff6c21bb4f6646c22a42029db0d46095dffca70389506") r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0xfffffee8) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) [ 329.580803][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 11:09:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x118, 0x118, 0x0, 0x118, 0x118, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @broadcast}, @remote, [], [], 'hsr0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x18}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 11:09:35 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f77657264697265462f62756e2cf9d9726b6469723d2e2f66296c696c6530"]) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x5) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e2bb92596b4005fef7012bade43acf150a1162b3af270ef20e5311b6c38c8680a4ab510f4a7c343329c62304bab75a75f5ad6d1a6b54819f19ea711a02d8174090689d3062462917947faa8ed4506b2692cc6bf474656452fc08fcd505548d3b97e4c3d274a9c7950cec1b8a3c"]) 11:09:35 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1f, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xb0971b2b56008495}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40000) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000004c0)="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") fcntl$dupfd(r5, 0x92402bc8bf8ce8bd, r6) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x208200) sendfile(r0, r5, 0x0, 0x8000fffffffe) 11:09:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8001, 0x80000) rt_sigpending(&(0x7f0000000140), 0x8) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @ipx={0x4, 0x7ff, 0x1dd43b43, "33430e725e00", 0x1}, @ethernet={0x1, @local}, @nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x0, 0x0, 0xf801, &(0x7f0000000180)='ip_vti0\x00', 0x5, 0x0, 0xff00}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x957a, 0xc0011038, &(0x7f0000000080)="ee764173245bb999dd24b30245b6ea645f447dd4e4ea8aed688f4c63cf0e8c24dc58075e67190a62020e973206cf8f462b21c9df1a9cadba1113", &(0x7f00000000c0)="1ef79fe8a26435e6e34435fb2fb45480b6e5baeb0664bc177379e37585b29774efbdb7794799070eeb8f678ade8c", 0x2db, 0x2e}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480010000507000004000000000000000000bb1cf4176cde729543b2d4f4ab329c653b13d300d7a870de474e9c0ac345e622e65bbe309522223bd640b83da8b595c6e8385ed4fc09211d66a51be2a9d3c0c98588c3dd1496095bebf51f211bc49a9d8b5c8ac1d1b744da3909d53604a4b67a1c894f652d3c413c662ae656bf777f76b262fb6ab9bdf22c5e68017f00106c9f8e2612adb7046e8f8a6f2d4de4ec75d5106e575bb64a0f6332e5663993f6c8438fb70a5c73c16576fcce86ab569d22db8deec315139dd376218248474ca1a7082f7daf79b892d5d45b8ee5", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b0001006d00000c00020005000200000000000a0005000400000000000000"], 0x48}}, 0x0) [ 329.930123][ T8116] overlayfs: unrecognized mount option "lowerdireF/bun" or missing value [ 329.959345][ T8110] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 329.983874][ T8107] x_tables: duplicate underflow at hook 1 [ 330.061220][ T26] audit: type=1804 audit(1579345775.656:36): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir207361314/syzkaller.h6Wvgd/0/file0" dev="sda1" ino=16547 res=1 [ 330.107230][ T8125] overlayfs: unrecognized mount option "lowerdireF/bun" or missing value [ 330.190890][ T26] audit: type=1804 audit(1579345775.706:37): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/2/bus" dev="sda1" ino=16555 res=1 11:09:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x100000001, 0x1, 0x3}, &(0x7f00000000c0)=[{}, {}, {}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11:09:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:09:35 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000015c0)='/dev/input/mouse#\x00', 0x101, 0x80202) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="f04000001a0075430000000000000000fe8000000000000000000000000000bbff0200000000000000000001800000000000730982e772f382b8000000001e7a316d8c8c1d789ddbc99e8cfaeb4240cd7c077f73790755339eac7e4f491fad5fa42261a312e06e62bd16552b44d475934ff7000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000b20015878a77c9d5cbb5a7959fc35c342e82b9006f35b07cd3cd9b2a6f5cca7dc37c2ccb177a7e2da1d498131cd24586d2384a4d75324833904108262d2224e686c817"], 0xf0}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) mmap(&(0x7f000005b000/0x4000)=nil, 0x4000, 0x0, 0x10000000000031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getdents64(r3, &(0x7f0000000100)=""/168, 0xa8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 330.339976][ T26] audit: type=1804 audit(1579345775.716:38): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 11:09:36 executing program 2: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x100, 0x2) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffffcc, 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x1f8000, 0x7, 0x4, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r3 = socket(0xa, 0x1, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xfffffffffffffe2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'\x00', r6}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20000}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@remote, 0x0, r7}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000200)={@rand_addr="cba3130b3a9c46053761cdc7f33ed72b"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x40}, 0xffffffffffffff8a) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffffff7be, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername(r9, 0x0, &(0x7f0000000140)) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffff7be, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) getpeername(r8, 0x0, &(0x7f0000000140)) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r10, 0x0, 0x0, 0xfffffefffffff7be, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername(r10, 0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 330.513040][ T26] audit: type=1804 audit(1579345775.726:39): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 [ 330.538248][ T8151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:09:36 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x20}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r1, r2}, &(0x7f00000009c0)=""/263, 0x107, &(0x7f0000000040)={&(0x7f0000000580)={'sha3-256\x00'}}) [ 330.719084][ T26] audit: type=1804 audit(1579345775.726:40): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 11:09:36 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaab1c3, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x101, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], 0xf000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000200)=0x10001, &(0x7f0000000240)=0x4) [ 330.815350][ T26] audit: type=1804 audit(1579345775.736:41): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/2/bus" dev="sda1" ino=16555 res=1 [ 330.986154][ T8182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.046178][ T26] audit: type=1804 audit(1579345775.926:42): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 11:09:36 executing program 0: fchdir(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000001c0)={0x400, [0xa6a, 0x191c, 0x37c, 0x2, 0x9, 0x5, 0x9, 0x78, 0x1, 0xca3, 0x6, 0x6, 0xfad9, 0x0, 0x7fff, 0x1c0, 0x800, 0x1b, 0x1, 0x0, 0xc86a, 0x0, 0x2, 0x100, 0x1, 0x1, 0x200, 0xcf20, 0x0, 0x7f, 0x0, 0xaf, 0x4, 0x0, 0x4, 0x5, 0x7fff, 0x5, 0x0, 0x0, 0x4, 0x58, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x6], 0x5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 11:09:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x100000001, 0x1, 0x3}, &(0x7f00000000c0)=[{}, {}, {}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 331.113526][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.147055][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.230752][ T26] audit: type=1804 audit(1579345775.926:43): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 [ 331.352355][ T8155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.387351][ T26] audit: type=1804 audit(1579345775.926:44): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/5/bus" dev="sda1" ino=16556 res=1 [ 331.565819][ T26] audit: type=1804 audit(1579345776.246:45): pid=8155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130406571/syzkaller.fN30Fw/3/bus" dev="sda1" ino=16560 res=1 [ 331.571534][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.615419][ T26] audit: type=1804 audit(1579345776.296:46): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/3/bus" dev="sda1" ino=16562 res=1 [ 331.641948][ T26] audit: type=1804 audit(1579345776.296:47): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir207361314/syzkaller.h6Wvgd/1/bus" dev="sda1" ino=16556 res=1 [ 331.689544][ T8195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 11:09:37 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010a76c000108000000000000000000000000ca54b0c598177f7f72adc098014d66058260afcda52339d7aad870bc5262512a1100102de5c6457cb6964d750aed5b50602298fd447c6cf174038f804bba0e2ae1df67ae37c3815a8a1d2aa090d132947935c36d971bb0b1228e057a3b2d298bc6bc7c6a1ae63cc6cdcab440e31690869cd9428439e4cf6c14ca11a847511a39fbe17330", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}, 0x1, 0x400000000000000}, 0x0) [ 331.762384][ T26] audit: type=1804 audit(1579345776.546:48): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/6/bus" dev="sda1" ino=16567 res=1 11:09:37 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000080)) 11:09:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0xf, 0x6, 0x0, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) shutdown(0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x101, 0x7, 0x4, 0x0, 0x100, {0x77359400}, {0x9, 0x0, 0x5, 0x8, 0x0, 0x0, "57b50edb"}, 0xc780, 0xf472602d83790a52, @userptr=0x80000001, 0x2}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227b11e2daf85534aa6f5083067b0248878f07a91df1acc99e664c11cbf51b4f6bff473e9c200351ccaefebd642492cfc5ead68cb6a050655a837ad411cb73394239fdd9e33efb5b63c5ff85708d8994e34841e04ec5f4962c4636b7fb34f186b86bb0467bdd13133ef429bda82f9b8e15eae491432dd2a52707c"], 0x8f) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10492400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x600a005) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x400, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000600)={{{@in=@loopback, @in=@empty, 0x4e23, 0xfffa, 0x4e23, 0x40, 0xa, 0x40, 0x80, 0xabf95a2f0a6c0a98, r11, r12}, {0x7ff, 0x0, 0x1, 0x0, 0x911, 0x7, 0x4, 0xb5c4}, {0x7ff, 0x20, 0xfffffffffffff800, 0x9}, 0x8, 0x6e6bb4, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d3, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3505, 0xa2658d6536f55a51, 0x3, 0x80, 0x1, 0x1, 0x37}}, 0xe8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x6) accept(r5, 0x0, 0x0) r13 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r13, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xea}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, 0x0, 0x0, &(0x7f0000003bc0)}}], 0x1, 0x0) 11:09:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 332.040445][ T26] audit: type=1804 audit(1579345776.576:49): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/6/bus" dev="sda1" ino=16567 res=1 11:09:37 executing program 0: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$mice(0x0, 0x0, 0x181021) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x100082) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0xff00) syz_open_dev$loop(0x0, 0x0, 0x0) 11:09:37 executing program 2: 11:09:38 executing program 5: getpid() getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) [ 332.690537][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:09:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 11:09:38 executing program 2: syz_open_dev$binderN(&(0x7f0000000680)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 332.859835][ T8218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.930052][ T8246] debugfs: File '8245' in directory 'proc' already present! [ 332.988472][ T8246] debugfs: File '8245' in directory 'proc' already present! 11:09:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 11:09:38 executing program 1: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0xff00) 11:09:38 executing program 3: 11:09:38 executing program 4: 11:09:38 executing program 3: 11:09:38 executing program 5: getpid() getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 11:09:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 11:09:39 executing program 1: 11:09:39 executing program 3: 11:09:39 executing program 4: 11:09:39 executing program 1: [ 333.720133][ T8251] debugfs: File '8245' in directory 'proc' already present! 11:09:39 executing program 2: syz_open_dev$binderN(&(0x7f0000000680)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 11:09:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 11:09:39 executing program 4: 11:09:39 executing program 3: 11:09:39 executing program 1: [ 333.898771][ T8290] debugfs: File '8288' in directory 'proc' already present! 11:09:39 executing program 4: [ 333.971604][ T8290] debugfs: File '8288' in directory 'proc' already present! 11:09:39 executing program 0: 11:09:39 executing program 3: 11:09:39 executing program 1: 11:09:39 executing program 4: 11:09:39 executing program 0: 11:09:39 executing program 3: 11:09:40 executing program 2: 11:09:40 executing program 1: 11:09:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:40 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11:09:40 executing program 3: 11:09:40 executing program 5: getpid() getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 11:09:40 executing program 3: 11:09:40 executing program 0: 11:09:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:09:40 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='systemem\xc9\xe0\xf4\x88sum$\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46"], 0x4) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') 11:09:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x201, 0x0) write$input_event(r0, 0x0, 0x0) 11:09:40 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) accept4$tipc(r3, 0x0, 0xfffffffffffffffd, 0x800) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20c41, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000080)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10c00, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000140)={0x6, 0x3f}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x0, 0x4}) unshare(0x60020000) [ 335.173711][ T8339] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/4' not defined. 11:09:40 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:40 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(r0, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000900)=""/4096) 11:09:41 executing program 1: write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setns(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x6, [{{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x390) [ 335.401641][ T8349] IPVS: ftp: loaded support on port[0] = 21 11:09:41 executing program 5: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @dev}}]}, 0x110) 11:09:41 executing program 2: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:09:41 executing program 3: syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) r0 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="1c", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="1c", 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) r5 = request_key(&(0x7f0000000580)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r5, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000200)="1c", 0x1, 0xfffffffffffffffe) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)='y\x7fl2\x87eth1\x00', 0x0) 11:09:41 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) [ 335.689583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.695596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.776023][ T8375] IPVS: ftp: loaded support on port[0] = 21 [ 335.795417][ T8378] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 11:09:41 executing program 3: unshare(0x40600) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6800) [ 335.838446][ T8378] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.863668][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.899878][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.909359][ T8019] tipc: TX() has been purged, node left! [ 335.921140][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.939715][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.958225][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.978519][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.013018][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.023305][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.079491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.085580][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.159658][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.165904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.239484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.409502][ C0] net_ratelimit: 1 callbacks suppressed [ 336.409508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.420918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 337.039506][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.045344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 337.759490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.765393][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:09:43 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet(0x2, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 11:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/13) 11:09:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b0a9ba610200"}) 11:09:43 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) accept4$tipc(r3, 0x0, 0xfffffffffffffffd, 0x800) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20c41, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000080)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10c00, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000140)={0x6, 0x3f}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x0, 0x4}) unshare(0x60020000) [ 338.266989][ T8401] IPVS: ftp: loaded support on port[0] = 21 11:09:43 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setns(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x6, [{{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x390) 11:09:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 11:09:43 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='auxv\x00') getpeername$packet(r4, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000000c0)={0x9, 0xba, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0xffe1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) r5 = socket$unix(0x1, 0x0, 0x0) connect(r5, &(0x7f0000000000)=@rc={0x1f, {0x0, 0x4, 0x0, 0x0, 0x1, 0x9f}, 0x6}, 0x80) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) 11:09:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/164, 0x4c4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)=""/254) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90) [ 338.489472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 338.495431][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 338.697941][ T8003] tipc: TX() has been purged, node left! 11:09:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/udplite6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x602000, 0x0) preadv(r1, &(0x7f00000017c0), 0x351, 0x100800100000000) 11:09:44 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getpid() ioprio_get$pid(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000340)="72618d74151d959615ac4ffb184c284733a47ff843", 0xfffffffffffffeda, 0x3}], 0x4000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:09:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000400000000000000000000001f000000000000004000"/40], 0x28) [ 339.119491][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 339.125329][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:46 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) dup2(r0, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:09:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x0, 0x0, 0x120, 0x0, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x58, 'srh\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 11:09:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000206005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000010000d94bfeadbfce0d4ed6f71b242b42000000ea0000040000000000000000e1e8154f707c51bf00000000000000000800000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 11:09:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60acfc0800483a00fe8000000000000000000000000000aaff020000000000000000000000000001040090780000000060e2a5c200000000fe8000000000000000000000000000aa4d668dc02365ea7554fe8000000000000000000000000000002c010000000000000000c204000000003ff4c432f59ccdfa"], 0x0) 11:09:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:09:47 executing program 1: syz_emit_ethernet(0x1211, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) [ 341.401010][ T8462] x_tables: duplicate underflow at hook 2 [ 341.413184][ T8461] x_tables: ip6_tables: srh.0 match: invalid size 16 (kernel) != (user) 56 [ 341.428644][ T8462] x_tables: duplicate underflow at hook 2 11:09:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@local, @random="3e2b13536723", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}, 0x0) 11:09:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket(0x2, 0x2, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:09:47 executing program 2: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 11:09:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005580)={&(0x7f0000004a00)={0x14, 0x0, 0x404}, 0x14}}, 0x0) 11:09:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RFSYNC(r2, 0x0, 0x0) tkill(r1, 0x1000000000016) [ 341.930282][ C0] net_ratelimit: 12 callbacks suppressed [ 341.930291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.941762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 342.319473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.325327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 342.399490][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 342.405321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 342.479487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 342.485385][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 342.639512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.645699][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:09:50 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:09:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x1601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xec3802f9741d278f}]}}]}]}]}], {0x14}}, 0x7c}}, 0x0) 11:09:50 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000011000100000000005901ad48079d245e"], 0x28}}, 0x0) 11:09:50 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000013740), 0x0, 0x8000) 11:09:50 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x40000c0, 0x0, 0x398) 11:09:50 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040), 0x0) 11:09:50 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) 11:09:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:09:50 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2100, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x5452, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'hsr0\x00'}) 11:09:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:09:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x94}]}, 0x24}}, 0x0) [ 347.449482][ C1] net_ratelimit: 20 callbacks suppressed [ 347.449491][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.460949][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:53 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000b17091ff0800000000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) 11:09:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a06091c000000000000000000000000070001000700000008000940000000000900020073797a3200000000100008800c000780080009"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffdc, 0x0) 11:09:53 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:09:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PIO_CMAP(r1, 0x541b, &(0x7f0000000000)) 11:09:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:09:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5421, &(0x7f0000000080)) [ 347.706220][ T8558] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:09:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x15a6, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000b17091ff0802000000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) 11:09:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) 11:09:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000b17091a4ffffff0000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) 11:09:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x15a6, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000b17091ff0800000000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) 11:09:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x2}, [@NFT_MSG_NEWSET={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 348.159467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.165302][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.559497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.565436][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.639447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 348.645229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 348.719485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 348.726075][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:56 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0xa, 0x6, 0x1c09, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}]}, 0x1d2}}, 0x0) 11:09:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) 11:09:56 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db505") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{0x0}], 0x1}}], 0x1, 0x0) 11:09:56 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:09:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a300000000060000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140081006c6f0000000000000000000000000000080002400000000008000140000000000800074000000001140000001100010000000000000000000000000a"], 0xa8}}, 0x0) 11:09:56 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 11:09:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) 11:09:56 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:09:56 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:09:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:09:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) [ 352.719466][ C0] net_ratelimit: 14 callbacks suppressed [ 352.719475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.731064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.799632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.805441][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 352.879501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.885489][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 353.049476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 353.055278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 353.679515][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.685442][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:59 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:09:59 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db505") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{0x0}], 0x1}}], 0x1, 0x0) 11:09:59 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:09:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x15a6, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000b17091ff0800000000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) 11:09:59 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:09:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:09:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:09:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:09:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:02 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:02 executing program 1: 11:10:02 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:10:02 executing program 1: 11:10:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r0, 0x20400000, 0x0) lseek(r0, 0x20400000, 0x0) 11:10:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:02 executing program 1: 11:10:03 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:03 executing program 1: 11:10:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r0, 0x20400000, 0x0) lseek(r0, 0x20400000, 0x0) 11:10:03 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 357.839573][ C1] net_ratelimit: 18 callbacks suppressed [ 357.839583][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.851110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 358.559836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.565948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.959486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.965274][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 359.039474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.045269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.119487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.125395][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:05 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:05 executing program 1: 11:10:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r0, 0x20400000, 0x0) lseek(r0, 0x20400000, 0x0) 11:10:05 executing program 2: 11:10:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 11:10:05 executing program 2: 11:10:05 executing program 1: 11:10:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:06 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:06 executing program 2: 11:10:06 executing program 1: 11:10:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:06 executing program 2: 11:10:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:06 executing program 1: 11:10:06 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 11:10:06 executing program 2: 11:10:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:06 executing program 1: 11:10:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) [ 363.119500][ C0] net_ratelimit: 16 callbacks suppressed [ 363.125634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.131495][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 363.209456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.215287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.289488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.295686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.439532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.445577][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:10:09 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:09 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:09 executing program 1: 11:10:09 executing program 2: 11:10:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:09 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 11:10:09 executing program 1: 11:10:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:09 executing program 2: 11:10:09 executing program 5: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r5, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 11:10:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 364.079457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 364.085258][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:12 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) 11:10:12 executing program 5: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x1) 11:10:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) [ 366.916541][ T8839] md: invalid raid superblock magic on mtdblock0 [ 366.933806][ T8839] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 366.942671][ T8839] md: md_import_device returned -22 11:10:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:12 executing program 5: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setreuid(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) [ 367.106149][ T8853] md: invalid raid superblock magic on mtdblock0 [ 367.144937][ T8853] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 367.186099][ T8853] md: md_import_device returned -22 11:10:12 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 367.213926][ T8859] md: invalid raid superblock magic on mtdblock0 [ 367.223614][ T8859] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 367.227862][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 367.300994][ T8859] md: md_import_device returned -22 [ 368.239554][ C1] net_ratelimit: 20 callbacks suppressed [ 368.239574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.252069][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.959478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.965309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 369.359515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 369.365359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 369.439489][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 369.445372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 369.519463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 369.525431][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001, 0x4}, [@ldst={0xffffffbd}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x367, 0x10, &(0x7f0000000000), 0xffb9}, 0x48) 11:10:15 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d0007a660a18000184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c9727808700146000"/486], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x20, 0x3, 0x7, 0x0, 0x100000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x20000, 0xf92, 0x1, 0x1, 0x7f, 0x8, 0x3}, r2, 0xb, r1, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) write$cgroup_int(r3, &(0x7f0000000400)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000300)='cpu.stat\x00') write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_int(r4, &(0x7f0000000100)=0x8, 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000380)={0x5, 0x70, 0x3, 0x0, 0x5, 0x8c, 0x0, 0x80000001, 0x40000, 0x11, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000140), 0xd}, 0x12000, 0x5, 0x577, 0x4, 0x5, 0x65, 0x9}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e24f008001fffffff00ff40fbac141411e934a0a662079f4b4d2ff1c2feca6aab845013f2325f1a00000007000000004425181aa500000000", 0x0, 0x104, 0x60000000}, 0x40) 11:10:15 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:15 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 11:10:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31100, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d800d0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 11:10:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:15 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) [ 370.298164][ T8898] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 370.325654][ T8898] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 370.481153][ T8898] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 370.498788][ T8898] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 11:10:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x20400000, 0x0) lseek(r1, 0x20400000, 0x0) 11:10:18 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:18 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x2, @empty, 0xfffffff8}}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0xb8, 0x10c, 0x2, "e6627bd954b3451bcdf69237b5e0082c30141d177cf69e3c777c64223547b7e5a6865818eeda3365fc09342dc90d3c80c7e20f36b198916b9355b93de1e80939e147364be5cfcb8b29786a0fd05a5341a1c9e4ccabae33434572ea991621274d72666c9cfdacc5ccbfb53e8f60627a3359f44e407325a42d4e821cde7b2d4c2b2eda91505a2eb7e1acc81adcc611b6192b2ba1a9d59b94e2b9c800104a46496f893cdeec"}, {0xb0, 0x115, 0x4, "2b477c6808696c331a4d334f19ee9367a7818a6dadb63f6d2f0e62f5bd70462e460d3b75451b56f53fc677437fe86f039368e1e3dd2b2c69feb369d287c45227754b26b481821b0802ee85880cc3301b73a519107b2df62dbd06fa7f62e406a95672dff7b7527bbe01873228a86afefb959d7de3146dc0f8d512078fef8a205a65ad3b9a97f2235c27dcbfb9eabb139458b67a96d0db96d9851586"}, {0xe8, 0x106, 0x0, "d4db6fa4c1f97d2419e3518ed160bf75907a6c026cb8c3ace84ac21be1ea1d28c1f53b82935397329bdb0920908792dfb97226c3c8fe658a73f53bd228ee61912e6eaea34e19f29833053f0f9d7f71800e6aebf6e27c67b7ca409b8a76a2c08db5c2f8d28c9bf5d977040616fb863ef346507d851a5a2d92e91db201bfe01a6bd83913fb892c6a62d6a98cd50cfb1476ae1a25141362334a0cc05d2c5fbe2cf0d98125b1c4ca88629ec85ad70af662e51b2c90e6d0c3257533ba2b9efbd94d31eb55fb6736e16802c2f89f071cc597d283bf4ccf22"}, {0x98, 0x0, 0xb18, "9459122f0cb40319769559b976b0c5dccabb47651552a4bdc2b248803def92390025c890f8ff1cde010b83c2d87573c2555bcdf3f495062c7621f35b85a69ddf4e46cc500fb42b6542bc1e91c9052fc4076e5fd9cd687be8f2536df913e43556fe1fb43c37bfbbe5701078881bc5a1cc774ab2f9369593a85cdc52627f79147d97ff50c8"}, {0x88, 0x110, 0x80000000, "528832d9026c40727f57166bb45b49caca7b1b9ba62c21f1653f9d330205f7b86354d61d465abf1ea362f200654aa64e8d7fb8acafc81c21fe8eb92e37bc7cecfbaaf0f989c98c9db6fe94860393a5411c215b6b207c78f89071ac52385d42886fe38705349b66eba12fac4df690fa309b00"}, {0x60, 0x1, 0x4, "d55debbc7d14ef6cdab1bc8a4da803c5bb0e00b60b2248841bbd53ef6d60deb5d98ded6890488647cef6b807d807c88d28fde0fe780d93965415d171063fdf841d051c12b9ab260d15"}, {0xf0, 0x111, 0x8, "3be62dc518446bb040b8feabf687c5e210c4b8bcde663547557cf62851859df2697c2dd59bd095b35990cc360a37c700d3489d54c5ab1486de5ab7308a42d903217839658b15f38a2aaf07aec08202f6312feccf1a0a23d159c119ecb05743db0276d7f8b58bf31a9d16b50e07ce5e7cde9c7be3b58c00b492e0970351585dfbbf04eeebf5d4039a4bf13fbcd0f44b25d880d858fb08a65f6afa5ca099ae81c014f87b0751f697d88c68d57ba532c8501308ce7abbfe4ba1b8c02b159f772597aa09b61c9f39c10cbe8ae42e971ecd3e0c6b0f3bbe197577caa0"}, {0x78, 0x0, 0x6, "40c9b3f18dd8fe95eb95a1d8d7aae7790135e0eaf910a7c0d89d2e08b9ceb1c30bb1a50c03f0ef129208d562fd7945e7c3b265e69fb07940a1ae32d32e5b39b14c277139da2a28381245ab481dce1e3199ad55e9c13769db46b0a1fd7605586e35c78a92a20925"}, {0x20, 0x108, 0x0, "34cf349b2c419961393c0e"}, {0x1010, 0x0, 0xffffffff, "4ea01cacc76a23349925f73b0159eef3b4f72a3e51ded715a76ecc0b0cf363bdc882aebba8cb9f3b1e614965f5b2063ae66d8d01e2b5d0dc2b3474f3ffe267442bc5c5170315164f5548a435655c2ef7eeae5125453a77fd94bb7d656e75ba2ae9dc927ea1b200ec31483a86fb4dc04a5d367eb5206dabcc3c1fb72f36eaa51748afa4fd02fc016289cef94767149071084354c3d693cba77625972db34eeb930677b488c7bfa5c20e123796aec528526ada249d9c3f524f2ff9ff8870a5eada0762023f752551385338bccf675a7db9230efeb6b6b371fb7ae390e95b0feb079c31bacc757a6bcd8837ebb386b95743cd55e5c10d19f61bf988f07a9277e1b7b633376fe9546d3cdba47e3ec97fce23211ad627e48e6af67c3779bce716dfcd4d6c27b5802be2f88ee1d35720ff7e8e6dd0316f3eabc2d16b0b31646f198360fcff593e592591d253032d2a7ef3fc055ae0d4cce56191f4ebd12b5ac16610c0d886b1a27da235360283a67339720f051c29996273ecd7d96c09a1358ea1ad2a45bad71764a12ebfc4b8270826cec331801d2a4930ca4c156b5749b546b2b648313458f43bfc2a75b02d413666745ba91deba54ca695fdb22d1e4ef5b0233cf2f29d17cd0dbe32550963004882871be0d171a3ccf266b22937e82352703f3228a09d0f3396a1ac82a33bbb2d1863c8bab85f3d6c71817d5bbc9acaf388e8b6d189b5189726f4b8a795392a9fad66a63cf1687f5fe0222f986414b7c3e9129c9d4252b3847ccd4fa160587d2a5ee48ce526bba1ee3f13cdec1e292321ff2214d4c83755858249df9205073773fdd153c06e1a6310b92c84097cf5fc184549844ba6778d9b3708962b19e20d2db3b059c4b703c4038154b8dda5cf8eb3679d30d887cae5422e1228f63ab66f97e895dc9497d2bbb9cd347d59f439ab27eb8d12eef645352d5f461aa25d0f8cae1174aaa4f6825a9d2fb2fabf312e93b0ab209f4486af6947fea7812ffb68a44943706e9a297153383bb98a6f75c0933633279f6490756fa5c8f4c93cf830308b6700b13a6bf560e6c7624823a73a686e7c03f7cf316ce7042b17448b6ef43178b9b03b20acad52b5d77943e7a094c19a449741ad9ef4a7f584315b82d120e31e1d67cbc0ab40096a38eec8ca85f041d93949ec2917e0871668abe0562309dda9da5665e12aadf9639e7865d81bf581caeade8909f3a5894c65276860aefa33c597146ca6667d9e712aa2ff1262939ff443937ea630dfb8452e634d46be7827afb3e52b9da8b93923edf0e393016c1adeb06cf5d894f11115de5f07d05c21632a1be7936dceca121a8ff13b067489694e142234822ba824d84064e9fd42d8a2cc23bb26bb6e2011dd34d680ed389c9e33ebf19bb3540088b7d969794f279dc9b904f7591f82babf9f701509349341e6763d1d49e26ec3ea9be3f1d8f951e971cee3d7ac14bad7b98e9929c972aabdeae19cf6a32dbec47b5f740acf4d4aa0dd44226078121f41c09a5c375a926bf472545e4f8f6c5dbb749f0be5716c05401e5a3d0204a488544df997e6079df1edfd65929128ef9643452057561ffa1245952e30901a7b717304696f94c0cd7465bd1dd734b2aff919011b3e7a435f6bdfbefdd8d078a461d2cdf858fc4f6c70e29a26d1c7baf3d5fe3ebb6ccd82e99b38df18b0032d64f3f702cb41636883c6593aa873a03239e45c664a23251c55e981b71dfe6de7ec86efaca52df8428ecdd18b096a5394ae8553633ff05cccbba4a83386c9c785338610ba56ec57c36d88d2c4b44717e54f65b7e71ee68ab8674420f0f8ebe8c24065c861194edeb10927e49a1def821c33c3241fb7361b58c4da4f062e520a91cc9e11fcb718ff79450dddd7116cc2c508888ee7898f257353c39c80d9550f8afb62bea23b02540819a66daf9a5d34d1361170587811db7275922266b616cdb1d49ce8f91d999a3dc08fd4e0d9c6713db96f1969899aca1791ee5883db85a3f45df00284390a0744c850acb9f747c4fa8f85e9e836a3395273754d8b757d37a9e5a1ce61dc34d1a69ddf1c03c9f6390c200a7c4367f3aac3167efa1ed1bde04698b683cd90ec22387ee98875fbb07d1418cb3f35db097b3f0107f4803eef95f03c67bf765030d4f0cd28be86e3f2bea01925972598b5f328208febfde09cda84b41a78d2771021902cf1ae6e041a206bede88aa1a17e38dbf3e2c9b1bdd8163d8a53d501538db70891617882f11feebde5cd27c9d521914ea0e2d797dc08c5e147c3472d579f995a0694a912bef79ef2f8bf4c59852dda4d5a02183c93710a488c0ecafef2a2da4d1c327c0302acb9fa709818486d2769e788606c18023a3f845dfb30b4c5c0f55d828661ace22a1510511964a2901e7b734a096f06f6f94b6982e4d2e37f1caad7436073b31d06a6264028e7eeb93353ccb8e3744b335a11b57e940ee6b3fcb378387c3b18f6066f8f40b2b89f0b0a3082a35ea7854ecb282175ea99378ed759e7afe3a11b5206a989c63ba67be31eb3bd8c0607d637e620229311276367fb1e77ef79c9947080cf14691080c2f59c2c777aada9cb6d72020cf1dc9530ce99c0c7a8c56ed31c106cc4c3ddb615f1b05a72ac3994fe4bb9a52143f6877db52de4ffd773a78bdef3ed1547ffab6614e257019e2684a2fea6b9de58c12065a863dee4753f9c352c168d3d0cb02d82340dfa9f276b39aa560c3e86998294d0616ca0aef566387d85c4ff480cebe2ba43eb3349211e063b02f2b411720fbba0a4e427941ab8b909642acb817bf33d4af45b8e206966c629c9ebb87ac3292104885371135b8cc34e12a598ca2498fd97817e1344669000179e9afacd7f4237f2a9134ff9d350179ecc13c5b8a65fd3d0dac72acc5dfd6f16998ab08e2b949c83afb4c4509ca809d1cd71f3412d10548e5612bf35f5ea989b5250c667cbecdd11af18d4aa600223a47bea871bd83012703949d8c1ce9d45adc2b101a92c82540745c5a1289a6bc077f10a59be46db1c2033a955058fc3708728b878a230c0d22276357383f24c9589bd1e11a6c7e262c1e3e03fd2c63ef0590d42541891e1b28010eb168c009fed2bca44ca2453c14b6af1f3bb4190ccfd15864aa6470b54193a59dc4539ddca31c432a1e5add0bf6940cd7e32829732f44d7b6e73588f46f12fedcfa8ab52e669c9d683e52813dc718f2bf13bf974c8a5c6885129f5c6554cc35777db96cbc83de241b4aa4ce6e4e4c7112587990242560e98187c489d784352ed859f6e2dd0b18c1c3fb0f0b7138355b603817d3411f43d2bdf2671d53bf6088b098af7b131028fa1c1e0061a838ce91bdf9a770907887170a40bfd057268a048933088a570b998b36b3bc8e4d2fd3726f8832d2ea242f75e112deccf6d3e831c5120457e5858e107f7cde1b2b083c7bea3aded319c1802fcbf2b03835d12305ba3a8e89735110c6a7a0617f648f7a4316b5ec3c5959e39e46f660d1ada3f0198d6f393b53758db087460ee47b6bb2d1db1dde460626d2f6beb7f3d6ff02412a4ab62a7c13467216309ac7f08bdc9263de86fd0168b91c0d514097faba8acd3fccc9f315fad452a8b889a35e1a9108fae8bc0fcb4d1033fd5f6c51d5ca28489ac39baa152bc4cbb38649af83bdac337ad7ba508d4f4f97a78d4ba7419d9170ba92717dc0af75f07e2c4aa4b0ad3d377869e4ef188b148a1299c8f6049527636fc6bd86ec721a65584365cb25cd842426772608d861486522263fa675c8155adeceb491fd63874106851525afc24fc9496db86152f17f3aa32ce5f98ce90c132e0934e0df0544093ed84da033495cd4c7934657685dde2d4be6c24339a4a503d6ad393f92e860d90433d2eade936fa72aaeedb825725bf8094811690ae19d831639035d031f6ec2a4e7d91471fd1b208f3e37e29e5b28d7563b7213e61bb3ed9125474707003b75b05a0385d40f6139dc7b70e30fe5dc2cc7531d0a58afae36a6cf4c49ec7e69635e0baa495dcc6e25107debb51d44709c829abbc2a3e2d0ab0075626f7ef3ebdd0fe5efdcd508b6843fde5218ca4afbee8590bb970a056972bee613419b9c5948955d4e975442e19875b8405dbb11e2f3f6d017ffa2a9f2b2fc806e08d5e37a1a392d353b27ae0d70cb06d687e31cb75a0ef8ec32896f22c879e21d2374632a6956c12d5791c5b7add117b0b571578c5b137f981e0769c3515e0aabc0be73e759540fa34080598817636ed00c19c717d6ba2712afe1b27ba16c4ca335adaaf07c6786163c94131e197d4107e676c49f8e9ea798015a432020dac9bcb155ef7bff8f06acf178658606f4571173a050e3d9bca6bae533780f8ab74ba4bc3685638cb40d520175c4528001b49d825013416012160f7138601d887fd6a867d853c686dd1d62bc5e70754479876263d8380fe93e508dda875fd5e64109d168139eada4971f3419a19b1e645b6ae5ee9ebbc0569801bf24617c9b7c6c015265797fdda68a407f9bad4eed7d9ab6d0fb48258b219784c486d8b92ec8134c749727691d257649ad9cdfc6a6ab226ec125ae98ed3d031fb731ecc92917748e9e9d379bccd4ae794abdeb9b8de9d884038421f6e9198f93a62918a5b456d617f0dd6f91081e6bcf5cb262218bc51f24be06372ce593994d7fa31590264c12b231e6ebbaddce66dc57db4aa727f7c41111251f340cb7e65149d6961d696ca42d86b46c0129f81d8f918978a32f2a299503ca2e927d7cd4c5665ce3034778c91511a0a1bee5f647fb3a817e53809cc6b7c946c2f13b2cb24f2148c8125e1679c0de696413adc03331d651e9f889a261c1ecd14defbb64f7b4198cc95fd1b523a7b4c25d082f2e62324b0cf0cfa1bbfa57c67fb9ea1c50313603137e8de9fde2fd265fff23f28b077761a98f8f3d6e9665554ee22347a2b631e0a7a24939558145b06cb207d1829a41b70b84de61aecfb4ec59af2a8fb3b4b668ed67ee5e8a7a468ce967ac111236b4deddc726268f6dbcafd3fa26fb07175801d62194fa05a72c58326951864c64c6a51168dd3e0753c377a34e7815e14dfefa6f350df875f27fe1df98f68d60b789a1da301e34dccb8439a07b73e7d42f202f734bf4449b76ccdab1751f0ed4f2eaf1fa60011cc4c9d0fb8865314d749deffc84d49e846b5673691f364ef0ca236f40a9ae5e19527d8b347eba57ed6a76fe1719d9e97340fe067e2366b17c7f6249b58f411bdfe379c13a14e5ae68414471b3837d0e582192a2bf9ed37070f97da3e26183f3d263855560fe97ff1d20db9551e8f965758e6867cd78dd8fc7deb1ea5b8232b0bd94c077245f28826e699449661888105acdb0221a55d98cc119f42442163c455bf9314b31d50ee2cda8a6fb3ba786f5ee39cbe253c73d074c6140b4f4e1acc8302c64784206cb569e896c1bf881da91e4a295f260af4f0b5cb46a98acd5fac2f7c0f9f5f403c672000d046da2ca8ff4651ae4cc61a931839243a37be291a4c7b953b024c301de6ab29822728e179a964d3f86fbb7e743430fb450e5cb373bfc86488c7798884332f6d72b7d45d6c717bacd7ff44fa07fe4400aea08878fbcf9139cd5f1c0acb5d42e4134d8a6a892988498f88b61dbd3cb94b03c7f0321d6fdab1ed95be982900ead2348aeecba73e21a4c2453bec50245bf5062b1e73be18307d74055491b5898f4bf92db7714e21465d13c8549715747b0c0abef5666e839dc452576a1c44fe5ed02400747c0a416434ef667ab2108f16dd5200894cb36c"}], 0x1568}, 0x20000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000003c0), 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x6609, 0x0) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x5, 0x5, 0x75f7, 0x80, r5, 0x1a5c, [], 0x0, r7, 0x1}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r8, 0x4) 11:10:18 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0f7af2b75d0d1f034b1b5526bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55aa8ff822ca943354aa8a6d2c1ba15edfe0969a9ddc125b6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x44, 0xbe, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072beb3014cd3ec8a755c1e1380081ffad000036e8d5000000010000001400000500240609880bd320d98a61a90057c9bf", 0x0, 0x401}, 0x28) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086607, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086607, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) 11:10:18 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:18 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed0a8064d20010002f000080", 0x14}], 0x1}, 0x0) 11:10:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:19 executing program 1: mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x10) 11:10:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:19 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:19 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) gettid() getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x8, 0x0, 0x2, 0x5, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x78b}, 0x80, 0x100, 0x0, 0x8, 0x0, 0x23}, 0xffffffffffffffff, 0x1, r2, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r5 = gettid() perf_event_open(0x0, r5, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f0000000480)=r5, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r5, 0x12) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000c28645fa4d1796811a60000000010000465f3f7f000000009100f6f035432ddc76e866684dfd135db3554ac41fa850bbdf6edfb79962bee4b4a123f923e63618"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001600)={r9}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='-em1lo\'(:(\x00', r9}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000200)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\x00\xfb\xaad\x1a\xa0') r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9b5) 11:10:19 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cea", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:10:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f00000009c0)=""/119, 0x77}}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008740)={&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000008700)=[{0x0}, {0x0}, {&(0x7f0000008680)=""/23, 0x17}, {&(0x7f00000086c0)=""/38, 0x26}], 0x4}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000008a00)={0xffffffffffffffff, 0xc0, &(0x7f0000008940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x4, 0x6, 0x0, 0x5}, &(0x7f00000088c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008a40)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@exit]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x1, &(0x7f0000000240)=""/1, 0x0, 0x0, [], 0x0, 0x3, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) write$cgroup_subtree(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008740)={&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000008700)=[{&(0x7f0000007640)=""/47, 0x2f}, {&(0x7f0000008680)=""/23, 0x17}, {&(0x7f00000086c0)=""/38, 0x26}], 0x3}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000008a00)={0xffffffffffffffff, 0xc0, &(0x7f0000008940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)=0x100, 0x0, 0x0, 0x0, &(0x7f0000008840)={0x2, 0x1}, 0x0, 0x0, 0x0, &(0x7f00000088c0)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008900)=0x3}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000001380)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020662a, 0x20000009) socket$kcm(0x29, 0x0, 0x0) 11:10:21 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:21 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:21 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0xcc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000019c0)={r1}) sendmsg$kcm(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80, &(0x7f0000001a80)}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001840)={r0}) socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000200)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\x00\xfb\xaad\x1a\xa0') 11:10:21 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:21 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x80a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) 11:10:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:22 executing program 5: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:22 executing program 1: 11:10:22 executing program 2: 11:10:24 executing program 5: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:24 executing program 1: 11:10:24 executing program 2: 11:10:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:24 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:25 executing program 2: 11:10:25 executing program 1: 11:10:25 executing program 5: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x0, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:25 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:25 executing program 1: 11:10:25 executing program 2: 11:10:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x0, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:25 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 379.759448][ C0] net_ratelimit: 2 callbacks suppressed [ 379.759457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.771813][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:10:25 executing program 1: [ 379.839448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 379.845287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 379.919447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 379.925302][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 380.079527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 380.085346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 380.719476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 380.725392][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:28 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x0, 0x0) lseek(r2, 0x20400000, 0x0) 11:10:28 executing program 2: 11:10:28 executing program 1: 11:10:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:28 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:28 executing program 2: 11:10:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:10:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001540)=""/77, 0x4d}}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005700)=[{{&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000240)="841f", 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000441ce5bfb8af9cb5288a1103e000df02000000007f00000100000000"], 0x30}}], 0x2, 0x0) 11:10:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 382.734429][ T9094] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 11:10:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) [ 384.879478][ C1] net_ratelimit: 22 callbacks suppressed [ 384.879488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.891181][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) 11:10:31 executing program 1: mount$fuse(0x0, 0x0, &(0x7f0000000440)='fuse\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000640)="62f27e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 11:10:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:10:31 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:31 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:31 executing program 2: r0 = timerfd_create(0x8, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0) 11:10:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x0, 0x0) [ 385.764351][ T9115] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 385.803258][ T9115] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 11:10:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x0, 0x0) 11:10:31 executing program 2: [ 385.936987][ T9115] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 11:10:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 385.987380][ T9115] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 385.999443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.005266][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:10:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x0, 0x0) [ 386.046488][ T9115] EXT4-fs (loop1): mounting with "discard" option, but the device does not support discard [ 386.080018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.085948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 386.117663][ T9115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 386.159443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.165447][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:31 executing program 2: 11:10:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$cont(0x20, r0, 0x0, 0x0) [ 386.319502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.325396][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 386.574273][ T9164] ptrace attach of "/root/syz-executor.1"[9163] was attempted by "/root/syz-executor.1"[9164] 11:10:34 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:34 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) 11:10:34 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:34 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x4400, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0x280900) 11:10:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x5210c2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) [ 388.792905][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 388.792977][ T26] audit: type=1804 audit(1579345834.386:68): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/49/bus" dev="sda1" ino=16847 res=1 11:10:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 388.846772][ T26] audit: type=1800 audit(1579345834.416:69): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16847 res=0 11:10:34 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x20, r0, 0x0, 0x0) 11:10:34 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x20, r0, 0x0, 0x40) 11:10:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 389.003408][ T9191] ptrace attach of "/root/syz-executor.1"[9190] was attempted by "/root/syz-executor.1"[9191] 11:10:34 executing program 1: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x39f) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) [ 389.121844][ T9197] ptrace attach of "/root/syz-executor.1"[9196] was attempted by "/root/syz-executor.1"[9197] 11:10:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 389.576771][ T26] audit: type=1804 audit(1579345835.166:70): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/49/bus" dev="sda1" ino=16847 res=1 [ 389.616319][ T26] audit: type=1804 audit(1579345835.206:71): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/49/bus" dev="sda1" ino=16847 res=1 [ 389.645807][ T26] audit: type=1800 audit(1579345835.206:72): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16847 res=0 [ 390.159504][ C0] net_ratelimit: 16 callbacks suppressed [ 390.159514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 390.171253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 390.249459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 390.255342][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 390.329451][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 390.341696][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 390.479501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 390.485368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 391.119489][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.125432][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:37 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010200000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27ad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee452e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd644b4a44b807c9765cc7ef43c3cc0a6ad3d3976656d475dd2ed789004be03884e042acd2e35f09c7a1f97f9561f62837e1d38eab98e6a7285bb0c6c190b9abc4b5705eb1073fe63e88f6ff7e510c2795288a69aa52ff32a89c9bd496d5d61d02cd952aa6226b3098ec9215fcf5becbfd7b53b4c65b74873ae66ba6d7376bc7354c34a49c042125d49ac436ffe132d9c1a6387e727f033a1c826c168fa5af31afa37d533a71b70a3fa9a264a9f32802f68343d4272d11e557a9419461864a0043b6121646cf2e2a7709fea8c226444cdccb045fe8015d399dbde39f6b3294bec68ddbb1eb12d48bdace9b339bc89f2274ae621edefca16fbbb75d53b1097ab1f8bcf81e7b949ef7e5b24639f4bbe0c9854cf403bd90e81b4cf87938e1a7c0efc690af72961c3366c5dc70a6df2a4b00"/877], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="000e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11:10:37 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:37 executing program 2: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x4400, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0x280900) 11:10:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:10:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000), 0x8) [ 392.096222][ T26] audit: type=1804 audit(1579345837.686:73): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/50/bus" dev="sda1" ino=16871 res=1 11:10:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd8ba}, 0x21224}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000540)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 11:10:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 392.167221][ T26] audit: type=1800 audit(1579345837.686:74): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16871 res=0 11:10:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 11:10:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd8ba}, 0x21224}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000540)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 11:10:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:10:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:40 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='personality\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x800000c4) 11:10:40 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_NO_NEW_PRIVS(0x27) 11:10:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2084020, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) [ 395.279457][ C1] net_ratelimit: 20 callbacks suppressed [ 395.279465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.290934][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:40 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 395.468213][ T9287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 395.999502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.005317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 396.399495][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.405280][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 396.479480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 396.485323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 396.559460][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 396.565554][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd8ba}, 0x21224}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000540)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 11:10:43 executing program 2: r0 = socket(0x840000000002, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 11:10:43 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:43 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 398.263393][ T9306] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 11:10:43 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:43 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x1f5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:10:44 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) utimensat(r0, 0x0, 0x0, 0x180) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x9, &(0x7f0000000880)=[{&(0x7f0000000240)="5c986260f77cda242cfd81d8a40c3b7fb98dfa0184b0cfae8d17dd0f3d4b2a964bcfe4644c66bf9cf61a965c8c5d92e5209576454be40602d8f69c4e33e76c32d1b2299d8473bc15f27f49059ab165215732b7e1907d44dddada5296bb6d23fb0a3f57ef0341613165a6adb2392f7165f11a243c1cf2a185d00f11c379e082421967e80596ea41bffeb421a93926f91ae848ae7f3ffb7aa84041", 0x9a, 0x42f}, {&(0x7f0000000300)="b31916671ad41cc80368036b23e823b985afe6b0ee45b6b3f71490d3aa64940177a589822260c6911025c2280aff87f0643d130a5db6e8c0c565d53043c28ab17f123de365fdc36fecaf4b0ba0acf047b25f983d0cf38062f7a945d34c5db8f5662dac714c250c0e31ab8b4c870baf91e3f1aa3aa348219bec102833acad80", 0x7f, 0x8}, {&(0x7f0000000380)="5e17f23e3d7e8363dbe2c5ac7168d4cb144479a3882d5b6aed07767f7f8f5ce7e64d5d0f86e4d98a60e75db4695ca3411104365eb68b5af60651b082f3819b7ff3145874e8b5e7d171e99f71f1e4672ec30111f394d54486cfecf9224db4638fcee67522807aad2a8a8f447b66fb5b71ba344d8fbe9f8f3097943d48b1319ecbf7b686e66142772d59906605d6e6b007d7b541b925e670da", 0x98, 0x1}, {&(0x7f0000000440)="76581d9b851083d63806c95c119029221633c438cb5ef570f740c1054da5cb9d5381469454cd5fdfe939f08a65d397ec507650de0a3789731b80fe82e68e6bf6bc561d0fee4b841593883ec2fd227188fa7e254ee34b45c9e485dc3957d2f07c16c76c352e2a74f29a39aa91280d22e7dd0fc1cc585c85590e3b464140ee328f537bd84a809eb705a2d852981804c2f6c99544969ba9e37c3beb586338d9965a2519b61172de701954f88a0280318198798f3060830b3485cb35bd4f5f0ee8fffe", 0xc1, 0x3f}, {&(0x7f0000000540)="1bd1ff2526ab00de01cde255512dd7c70e030090587aa47755e5b2b115d24711271181258b0bf162b324aae26c81cf1d5dd1c8363b8c5dba11e5b21f16009517865866f42514d339d2fd1dc729ebbf3e9cb39dd18fde43c06dea32e5473e1f7780bd7ff6e50d16aa5430016ca0bd1468ec09a0ccee6c08187ab9e1765a7197d506ae68967cb0ac704e329fc1f5e9aa9500e34b8044d24e8c8f4a100c554450d4e91a4c6130a664d78cd10a5e6e367c4cb8bdcf0c7320aa4dfb711864fc324a56eea5d97dfb2610b5728190", 0xcb, 0x81}, {&(0x7f0000000640)="51e703d8c7ef22e831ee2ccccf490e727cdf7bc006c639a58b1e99e2eae5df908419f690826f9e018e9861aefb69c1c8e3b3144204f4e7d1351e57c2429a518f810d914d3b1154c62edc8dbe25c36d5d339a8ba9adb49c3d0b0bd899c2aa0403c00bfe06bb270d60c93ef2b8bccfc2ad9e6a505fcb047a87639cd08111a9a61a58b5e3b9aef47e9875", 0x89, 0x20}, {&(0x7f0000000700), 0xfffffffffffffe84}, {&(0x7f0000000740)="b3b4c86eb194b105cd313a9243e4ce17a4cff1df877df544be5934dec7e635dcfd9a75036d58f209ca0bd34223982eef74f1117475a25a0513c55aa9067c4d8512da36bf18fe8328aa6be19f6a3e576f6cd61e9067f8c396fb2b05a8a1d818b349d8d4344473b77d2ec461cc15687f9dfc5a3ca1b6124c662827ab3a67b115740905261bffee92a6e8f634f0ad982557437313f301776128b85cdbcb245b9dd4a7f03b58f358362eec8d84929fd7d8f7aa5a5a9f13854ba3d5e4d7ba374269c8e5225e9c03b759b341ba20920d566003629b42db85", 0xd5, 0x3}, {&(0x7f0000000840)="41e59574af081cddaaac9df4a0be6ede2ef21e67eb5310cecdc65893e487914acfc54c1b845283a77313d178ee5ebfaebea3", 0x32, 0x2}], 0x20, &(0x7f0000000bc0)=ANY=[@ANYBLOB='mode=lfs,alloc_mode=default,jqfmt=vfsv1,disable_roll_forward,extent_cache,noextent_cache,acl,resuid=', @ANYRESHEX=0x0, @ANYBLOB=',obj_role=,subj_type=/selinux/enforce\x00,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030302c7063723d3030303030303030ecf74d7a4b4d6671081177f23030303830303030302c7569643e", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f74797065da3220819b8cec2574a0970f3d786673002c00"]) 11:10:44 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:44 executing program 1: socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') sendfile(r0, r1, 0x0, 0x320f) 11:10:44 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:44 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 398.898616][ T9331] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 398.913671][ T9331] XFS (loop4): SB validate failed with error -5. [ 398.933806][ T2503] blk_update_request: I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 11:10:44 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 398.967966][ T2503] blk_update_request: I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 11:10:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) 11:10:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r3}}, 0x18) 11:10:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) 11:10:45 executing program 2: 11:10:45 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:45 executing program 1: 11:10:45 executing program 2: 11:10:45 executing program 0: [ 400.559489][ C0] net_ratelimit: 10 callbacks suppressed [ 400.559498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.571266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 400.639479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 400.645248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 400.719480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 400.725379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 400.879466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.885611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 401.519480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.525467][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:47 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:47 executing program 1: 11:10:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:47 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:47 executing program 0: 11:10:47 executing program 2: 11:10:47 executing program 1: 11:10:47 executing program 0: 11:10:47 executing program 2: 11:10:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:47 executing program 1: 11:10:47 executing program 0: 11:10:50 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:50 executing program 2: 11:10:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:50 executing program 0: 11:10:50 executing program 1: 11:10:50 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:50 executing program 0: 11:10:50 executing program 2: 11:10:50 executing program 1: 11:10:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:50 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:51 executing program 1: 11:10:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:51 executing program 0: 11:10:51 executing program 2: 11:10:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:51 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:51 executing program 1: 11:10:51 executing program 2: 11:10:51 executing program 0: 11:10:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:10:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:10:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:51 executing program 0: socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:10:51 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:10:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 406.399518][ C0] net_ratelimit: 22 callbacks suppressed [ 406.399526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 406.411294][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 406.799463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 406.805277][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 406.879457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.885452][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:52 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 11:10:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:52 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:10:52 executing program 0: [ 406.959444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.965252][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:52 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:10:52 executing program 1: 11:10:52 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000200)) [ 407.119450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.125248][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:10:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) 11:10:53 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0x31}, 0x80, 0x0}, 0x0) 11:10:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x48c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack_expect\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x7ffffffff000) 11:10:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) 11:10:53 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:10:53 executing program 1: socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924924b1, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x80, 0xb, "87f55bcc726bba69"}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x890) 11:10:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x106, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x13]}, 0x3c) 11:10:53 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) 11:10:53 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:53 executing program 2: r0 = epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r2 = epoll_create(0x100) ioctl$FIBMAP(r2, 0x1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000140)={0x10}) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) dup(r5) listen(r4, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x80000001, 0x12) fchdir(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:10:53 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82, 0x0) 11:10:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc), 0x0) 11:10:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 11:10:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc), 0x0) 11:10:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x106, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x13]}, 0x3c) 11:10:54 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc), 0x0) 11:10:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/877], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca00000800ffffffba000000ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 11:10:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ff", 0x3) 11:10:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x1f5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) open(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x80000001, 0x12) 11:10:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ff", 0x3) 11:10:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 11:10:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 11:10:57 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:10:57 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:10:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ff", 0x3) 11:10:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) gettid() close(r2) 11:10:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) 11:10:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:10:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 411.929510][ C1] net_ratelimit: 24 callbacks suppressed [ 411.929519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 411.941025][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:10:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:10:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:10:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:10:57 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 412.639459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 412.645428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.039460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.046516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.129437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.135285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.209451][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.215280][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:00 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x221}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x1, 0x0) 11:11:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/autofs\x00'}}]}}) 11:11:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 11:11:00 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:00 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 414.732123][ T9708] ptrace attach of "/root/syz-executor.1"[7983] was attempted by "/root/syz-executor.1"[9708] 11:11:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:00 executing program 1: epoll_create1(0x0) epoll_create1(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) 11:11:00 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000008000, 0x86128) accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="0601a255cf8a1e1902000000af6c68da0044dff259d35a0535000004"], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fb48f4445ed5", 0x18) open$dir(&(0x7f0000000180)='.\x00', 0x8, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0x4ebf}], 0x10000000000002d1, 0x0) 11:11:00 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:00 executing program 1: socket(0x18, 0xc002, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0xc002, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) [ 417.199489][ C0] net_ratelimit: 18 callbacks suppressed [ 417.199499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 417.211713][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 417.279536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 417.285555][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.359499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 417.365501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.519497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 417.525395][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:03 executing program 0: 11:11:03 executing program 1: 11:11:03 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:03 executing program 2: 11:11:03 executing program 1: 11:11:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:03 executing program 2: 11:11:03 executing program 0: 11:11:03 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:03 executing program 1: 11:11:03 executing program 2: [ 418.159449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 418.165443][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:06 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:06 executing program 1: 11:11:06 executing program 0: 11:11:06 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:06 executing program 2: 11:11:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:06 executing program 1: 11:11:06 executing program 0: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 11:11:06 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 11:11:06 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x23091, r2, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:11:07 executing program 2: [ 422.319482][ C1] net_ratelimit: 22 callbacks suppressed [ 422.319492][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 422.331137][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.039495][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.045307][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 423.439475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.445486][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 423.519450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.525278][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.599462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.605250][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:09 executing program 1: 11:11:09 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:09 executing program 2: 11:11:09 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:09 executing program 0: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 11:11:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f000000b000/0x4000)=nil}) 11:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0x9000aea4) 11:11:09 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:10 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0x9000aea4) 11:11:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 11:11:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x11, r2) 11:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0x9000aea4) 11:11:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) 11:11:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x45a}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000040)=0x1854c397) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 427.395882][ T9866] kvm: emulating exchange as write 11:11:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:13 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:11:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="66ba4100ec0f20e035002000000f22e00f7ef2f2e0000fc77a9d8fe96091ad5200000064f30fc7b70f00000066b83c010f00d0ea7b5549161c00f0312407", 0x125}], 0xabb4cbfa6006e1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsync(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 427.599468][ C0] net_ratelimit: 18 callbacks suppressed [ 427.599497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 427.611014][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:13 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) read$alg(r0, &(0x7f00000000c0)=""/169, 0xa9) [ 427.679466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 427.685255][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:13 executing program 0: rt_sigaction(0x17, &(0x7f0000000180)={0x0, {}, 0x0, 0x0}, &(0x7f0000000240)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000280)) [ 427.759448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 427.765268][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x81) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18}, 0x18) [ 427.929459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 427.935311][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x37e0c043ec01399b}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x0, @stop_pts=0x40}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:13 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 11:11:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x0, 0x0, 0x1) 11:11:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 428.559445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.565362][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:16 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:11:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x45a}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000040)=0x1854c397) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:11:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 11:11:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, &(0x7f000000d000/0x2000)=nil}) 11:11:16 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:16 executing program 0: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 11:11:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x9, 0x0, 0x0) 11:11:16 executing program 0: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 11:11:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 11:11:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b000000000080e0310d1ba2788c7076f29746af92cbca022830fb185c4223673fac558efcb2821f51d87afa214407000000670528004d541ee990684c44a3476d4ac0901bb3d27ce5e066e6b71e36924b86696d6bdad12c4d3ae1df81aa13fb3ac9c0836494f4c9e53211e925b1bb591210af048788a6d1455d2330525c0255dcdf60dc205e85a6969d71f4de199d289266cd8d8626ad58ddfa8ee962f8d4a612ca6b064834c52afa"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) dup3(r3, r2, 0x0) 11:11:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') [ 432.719467][ C1] net_ratelimit: 22 callbacks suppressed [ 432.719476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 432.731109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.439564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.445505][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:19 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:19 executing program 0: creat(0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 11:11:19 executing program 1: syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:11:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 11:11:19 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:11:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 433.839830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.845991][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 433.861581][ T9998] ISOFS: Unable to identify CD-ROM format. [ 433.919450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.925261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.960476][ T9998] ISOFS: Unable to identify CD-ROM format. [ 433.999669][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.006213][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) socket(0x0, 0x803, 0x0) 11:11:19 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000340)={'trans=unix,', {[], [{@defcontext={'defcontext', 0x3d, 'root'}}]}}) 11:11:19 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 11:11:19 executing program 1: r0 = memfd_create(&(0x7f0000000800)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xff\xffJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0fyXdr\xf7~\xfa\xe6W\xeaL\xfb`\xf3\x04+\xe4\x89=\x82\xef\xe5RD\xe6(\xe6]\x00H\t\xdbV\xad\"n\x13\x1a\x95\x7f0\xa2\xc2NDc\xf6\x82\x9e9,\xfc\x15\xdb\x90G\x92\xdfK\a\x00\x00\x00\x00\x00\x00\x00\xe59\xa8\x16\xbd\xc6:{\xdboM\x12\xb7\xf4#\xa1\xbd~>!\xb5iT$F\x8cpGG\xdc\x06\'\x01\xf5?]\x9e\xd4\x00\xa7\x12\xe8\x9b[\x14\x02\'\x80\xaf\xeaJn\x06\x00\x00\x00\x00\x00\x00\x00m0`\x03\x90\xe0\x86\xb8\xc8l\xda\xc5\xfd\xce\xa0b\xa6\xc2\xe4xc\xd0\x13w\xe1\fX\\\xf5\fL\x82e\xefN\x86\x8a;\xb2h\xbe?9y\xe6\xce%&\x15\xf3p\x94\x84\r\x86\x13\x1fp_\xd2\xb6\x8e\x80Lf0\xb2q7\xb5\x1e\xea\xef\xa3\xef[\xb0l\x14n\xfe\xe1\xe0\t\xd1\xbd\xc5\x92\xf4\x13c\xe9d\x18G<\xd7\x14\xb8\xd29k&R\xc8o\xd0\'\xf2\xfa\x94\x8b\xb7\xb1\xa2LNf\x81\x11~\x06^jd\xf2\x12\x9b\\v\xc4\\\x04vHf\x1c0\x8e$\t|(\xfc\\[Efm\xe416\x89?\xacgE\x83*\xf1\xacr\x80i\xc2?,\x18\xca)\b~\xfa\xb4\x96\x8c3\xeb\xdb\x1c\xdc\x90\x195\xea\x86T\n\x82p41\xab\xe3\xf0j\xdbGibe\xeeo{_\xa2h\x8d\x12\xfeI\x94Cf-\xae\xc1{[-\x17\xa9]\xc4\xb8Y\xdd\xbc\x03\xbf\x18\x83\xfen\xa0\x9e\x86\xc6?Lj\x83\xdf:GF+\xdb\xebR\x02\xe4\xa5\x92j\x9f\xd3\xaa\xa4\xe7\x97\xea\x1b\xab\xe5U\xd1=\x0fG}\x8b', 0x7) fallocate(r0, 0x0, 0x0, 0x1) 11:11:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)=@nfc, 0x0) 11:11:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x5450, 0x0) 11:11:20 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:20 executing program 0: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) 11:11:20 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 11:11:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x51010000, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) [ 434.654832][T10034] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 434.704566][T10040] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 434.710719][ T8037] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 434.769583][ T8037] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 [ 434.805426][ T8037] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 434.823448][ T8037] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 11:11:22 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 11:11:22 executing program 2: 11:11:22 executing program 1: 11:11:22 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:22 executing program 2: 11:11:22 executing program 1: 11:11:22 executing program 2: 11:11:22 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 437.031169][T10069] ptrace attach of "/root/syz-executor.4"[10067] was attempted by "/root/syz-executor.4"[10069] 11:11:22 executing program 0: 11:11:22 executing program 2: 11:11:22 executing program 1: 11:11:22 executing program 0: 11:11:22 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 437.273993][T10081] ptrace attach of "/root/syz-executor.4"[10079] was attempted by "/root/syz-executor.4"[10081] 11:11:22 executing program 2: [ 437.492007][T10092] ptrace attach of "/root/syz-executor.4"[10091] was attempted by "/root/syz-executor.4"[10092] 11:11:23 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 437.999463][ C0] net_ratelimit: 18 callbacks suppressed [ 437.999470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.011105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.079459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.085594][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 438.159490][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.165546][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 438.319466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.325325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.959487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.965280][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:25 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:25 executing program 2: 11:11:25 executing program 0: 11:11:25 executing program 1: 11:11:25 executing program 0: 11:11:25 executing program 2: 11:11:25 executing program 1: 11:11:25 executing program 1: 11:11:25 executing program 0: 11:11:25 executing program 2: 11:11:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:28 executing program 1: 11:11:28 executing program 0: 11:11:28 executing program 2: 11:11:28 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:28 executing program 1: 11:11:28 executing program 0: 11:11:28 executing program 2: [ 443.119433][ C1] net_ratelimit: 22 callbacks suppressed [ 443.119442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 443.132586][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 11:11:28 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x800) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 11:11:28 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) clock_gettime(0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8) [ 443.474552][T10153] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 443.486940][T10153] File: /root/syzkaller-testdir780611130/syzkaller.9Tl5rl/98/bus PID: 10153 Comm: syz-executor.2 [ 443.839495][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 443.845323][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:29 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 444.239483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.245333][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.319472][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.325358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.399485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.405444][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:31 executing program 0: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 11:11:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000015c0)='/dev/input/mouse#\x00', 0x101, 0x80202) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="f04000001a0075430000000000000000fe8000000000000000000000000000bbff0200000000000000000001800000000000730982e772f382b8000000001e7a316d8c8c1d789ddbc99e8cfaeb4240cd7c077f73790755339eac7e4f491fad5fa42261a312e06e62bd16552b44d475934ff7000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000b20015878a77c9d5cbb5a7959fc35c342e82b9006f35b07cd3cd9b2a6f5cca7dc37c2ccb177a7e2da1d498131cd24586d2384a4d75324833904108262d2224e686c817"], 0xf0}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) mmap(&(0x7f000005b000/0x4000)=nil, 0x4000, 0x0, 0x10000000000031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getdents64(r3, &(0x7f0000000100)=""/168, 0xa8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:11:31 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:31 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000015c0)='/dev/input/mouse#\x00', 0x101, 0x80202) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="f04000001a0075430000000000000000fe8000000000000000000000000000bbff0200000000000000000001800000000000730982e772f382b8000000001e7a316d8c8c1d789ddbc99e8cfaeb4240cd7c077f73790755339eac7e4f491fad5fa42261a312e06e62bd16552b44d475934ff7000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000b20015878a77c9d5cbb5a7959fc35c342e82b9006f35b07cd3cd9b2a6f5cca7dc37c2ccb177a7e2da1d498131cd24586d2384a4d75324833904108262d2224e686c817"], 0xf0}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) mmap(&(0x7f000005b000/0x4000)=nil, 0x4000, 0x0, 0x10000000000031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getdents64(r3, &(0x7f0000000100)=""/168, 0xa8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:11:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:32 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000015c0)='/dev/input/mouse#\x00', 0x101, 0x80202) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB="f04000001a0075430000000000000000fe8000000000000000000000000000bbff0200000000000000000001800000000000730982e772f382b8000000001e7a316d8c8c1d789ddbc99e8cfaeb4240cd7c077f73790755339eac7e4f491fad5fa42261a312e06e62bd16552b44d475934ff7000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000b20015878a77c9d5cbb5a7959fc35c342e82b9006f35b07cd3cd9b2a6f5cca7dc37c2ccb177a7e2da1d498131cd24586d2384a4d75324833904108262d2224e686c817"], 0xf0}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) mmap(&(0x7f000005b000/0x4000)=nil, 0x4000, 0x0, 0x10000000000031, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getdents64(r3, &(0x7f0000000100)=""/168, 0xa8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:11:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:11:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:11:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:11:32 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 447.176641][ T26] audit: type=1804 audit(1579345892.766:75): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/123/bus" dev="sda1" ino=17078 res=1 [ 447.270155][ T26] audit: type=1804 audit(1579345892.816:76): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/100/bus" dev="sda1" ino=17141 res=1 [ 447.319958][ T26] audit: type=1804 audit(1579345892.886:77): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/121/bus" dev="sda1" ino=17150 res=1 [ 447.349171][ T26] audit: type=1804 audit(1579345892.896:78): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/121/bus" dev="sda1" ino=17150 res=1 [ 447.408033][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.417018][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.446428][T10207] 8021q: adding VLAN 0 to HW filter on device team0 11:11:33 executing program 1 (fault-call:5 fault-nth:0): r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 447.647763][T10225] FAULT_INJECTION: forcing a failure. [ 447.647763][T10225] name failslab, interval 1, probability 0, space 0, times 1 [ 447.660739][T10225] CPU: 1 PID: 10225 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 447.663307][T10209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.669431][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.669438][T10225] Call Trace: [ 447.669464][T10225] dump_stack+0x11d/0x181 [ 447.669491][T10225] should_fail.cold+0xa/0x1a [ 447.669514][T10225] __should_failslab+0xee/0x130 [ 447.669571][T10225] should_failslab+0x9/0x14 [ 447.669607][T10225] __kmalloc+0x53/0x690 [ 447.669631][T10225] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 447.669732][T10225] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 447.669783][T10225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.681094][T10209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.687046][T10225] ? aa_label_sk_perm+0x89/0xe0 [ 447.687070][T10225] ? do_dccp_setsockopt.isra.0+0x2d3/0x610 [ 447.687141][T10225] do_dccp_setsockopt.isra.0+0x2d3/0x610 [ 447.731096][T10225] dccp_setsockopt+0xb3/0xc0 [ 447.731138][T10225] sock_common_setsockopt+0x67/0x90 [ 447.743191][T10225] __sys_setsockopt+0x1ce/0x370 [ 447.743219][T10225] __x64_sys_setsockopt+0x70/0x90 [ 447.743293][T10225] do_syscall_64+0xcc/0x3a0 [ 447.743326][T10225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 447.785060][T10225] RIP: 0033:0x45aff9 [ 447.788999][T10225] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.808797][T10225] RSP: 002b:00007feb2e860c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.817206][T10225] RAX: ffffffffffffffda RBX: 00007feb2e8616d4 RCX: 000000000045aff9 [ 447.825542][T10225] RDX: 0000000000000002 RSI: 000000800000010d RDI: 0000000000000004 [ 447.834669][T10225] RBP: 000000000075bfc8 R08: 0000000000000005 R09: 0000000000000000 [ 447.842638][T10225] R10: 0000000020d14ffc R11: 0000000000000246 R12: 0000000000000005 [ 447.850602][T10225] R13: 00000000000009b1 R14: 00000000004cae0f R15: 0000000000000000 11:11:33 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 447.908554][T10219] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.916253][T10219] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.007979][T10228] FAULT_INJECTION: forcing a failure. [ 448.007979][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 448.025216][T10228] CPU: 0 PID: 10228 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 448.033942][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.044613][T10228] Call Trace: [ 448.047918][T10228] dump_stack+0x11d/0x181 [ 448.052376][T10228] should_fail.cold+0xa/0x1a 11:11:33 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:33 executing program 1 (fault-call:5 fault-nth:1): r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x14180, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'bridge_slave_0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x6c020000, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 448.057024][T10228] __should_failslab+0xee/0x130 [ 448.062003][T10228] should_failslab+0x9/0x14 [ 448.066533][T10228] kmem_cache_alloc_node_trace+0x3b/0x670 [ 448.072307][T10228] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 448.078051][T10228] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 448.084052][T10228] ? __rcu_read_unlock+0x66/0x3d0 [ 448.089107][T10228] ? __read_once_size+0x41/0xe0 [ 448.093976][T10228] __kmalloc_node+0x38/0x50 [ 448.098555][T10228] kvmalloc_node+0x71/0x100 [ 448.103069][T10228] traverse+0x2e0/0x410 [ 448.107285][T10228] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 448.113305][T10228] seq_lseek+0x110/0x230 [ 448.117711][T10228] ? traverse+0x410/0x410 [ 448.122058][T10228] ksys_lseek+0x116/0x160 [ 448.126414][T10228] __x64_sys_lseek+0x4c/0x60 [ 448.131093][T10228] do_syscall_64+0xcc/0x3a0 [ 448.135704][T10228] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.141797][T10228] RIP: 0033:0x45aff9 [ 448.145744][T10228] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.165979][T10228] RSP: 002b:00007ffa25ffec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 448.174907][T10228] RAX: ffffffffffffffda RBX: 00007ffa25fff6d4 RCX: 000000000045aff9 [ 448.183032][T10228] RDX: 0000000000000000 RSI: 0000000020400000 RDI: 0000000000000005 [ 448.191472][T10228] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.199481][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 448.208601][T10228] R13: 00000000000006f1 R14: 00000000004c832a R15: 0000000000000000 11:11:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 448.257338][ T26] audit: type=1804 audit(1579345893.846:79): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/122/bus" dev="sda1" ino=16754 res=1 [ 448.399570][ C0] net_ratelimit: 21 callbacks suppressed [ 448.399580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 448.400547][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.405450][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 448.479479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.485478][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.491784][T10235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.559473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.565293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.719542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 448.725447][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.359734][ C1] protocol 88fb is buggy, dev hsr_slave_0 11:11:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:35 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x3, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f5, 0x8001}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x60, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket(0x2, 0x80002, 0x40) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 449.652371][T10255] FAULT_INJECTION: forcing a failure. [ 449.652371][T10255] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 449.665881][T10255] CPU: 0 PID: 10255 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 449.675045][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.685279][T10255] Call Trace: [ 449.688621][T10255] dump_stack+0x11d/0x181 [ 449.693051][T10255] should_fail.cold+0xa/0x1a [ 449.697672][T10255] should_fail_alloc_page+0x50/0x60 [ 449.702982][T10255] __alloc_pages_nodemask+0xd2/0x310 [ 449.708506][T10255] cache_grow_begin+0x76/0x5c0 [ 449.713292][T10255] ? memcg_kmem_get_cache+0x1b1/0x320 [ 449.718853][T10255] kmem_cache_alloc_node_trace+0x580/0x670 [ 449.725031][T10255] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 449.731018][T10255] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 449.736938][T10255] ? __rcu_read_unlock+0x66/0x3d0 [ 449.742099][T10255] __kmalloc_node+0x38/0x50 [ 449.746741][T10255] kvmalloc_node+0x71/0x100 [ 449.751309][T10255] traverse+0x2e0/0x410 [ 449.755497][T10255] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 449.762018][T10255] seq_lseek+0x110/0x230 [ 449.766609][T10255] ? traverse+0x410/0x410 [ 449.771033][T10255] ksys_lseek+0x116/0x160 [ 449.775504][T10255] __x64_sys_lseek+0x4c/0x60 [ 449.780287][T10255] do_syscall_64+0xcc/0x3a0 [ 449.784808][T10255] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 449.791697][T10255] RIP: 0033:0x45aff9 [ 449.795701][T10255] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.816454][T10255] RSP: 002b:00007ffa25ffec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 449.825065][T10255] RAX: ffffffffffffffda RBX: 00007ffa25fff6d4 RCX: 000000000045aff9 [ 449.833253][T10255] RDX: 0000000000000000 RSI: 0000000020400000 RDI: 0000000000000005 [ 449.841245][T10255] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.849504][T10255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 449.857691][T10255] R13: 00000000000006f1 R14: 00000000004c832a R15: 0000000000000001 11:11:35 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:35 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x4, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:35 executing program 2 (fault-call:5 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02090000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_checksum='journal_checksum'}]}) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x40, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="0d545dfbc27e2277bd3f70dc0d329fdb1cdd9ff633ccb899271d6d22a5b7898edf52c82967fe8896c7bed89dca758d0a93ff3d4aa91963c5cafcbc1f94524accdb1a7243851f5adabfa8cb600921447cb7b4357cb54a1baebdd02580ce519eb2f69b4c66ff4a", 0x66, 0xea}], 0x80000, &(0x7f0000000280)={[{@force='force'}, {@creator={'creator', 0x3d, "42d9d03c"}}], [{@fsuuid={'fsuuid', 0x3d, {[0x74, 0x5d, 0x69, 0xfd, 0xa8, 0x61, 0x32, 0x37], 0x2d, [0x38, 0x36, 0x66, 0x2], 0x2d, [0x65, 0x31, 0x39, 0x64], 0x2d, [0x34, 0x32, 0x36, 0x31], 0x2d, [0x33, 0x5e, 0xd36e5ac1d48a22d, 0x79343a616217ec65, 0x66, 0x33, 0x36, 0x66]}}}]}) 11:11:35 executing program 0: r0 = getpid() execve(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x55f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18094000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a1810000fa95f66d0f202912d356915b90b986d1c065566b5f9e9af87ded9aaae5aa87ae588cd2e9157382d57a095aaeb6a20000000000000000", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x80800}, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) 11:11:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0xd, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0xf, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400004, 0x0) 11:11:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_GET_SECCOMP(0x15) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003640)=[0x0, 0x5]) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x10007, 0xf7ffffffffffd5bd}) r1 = accept(r0, &(0x7f0000000240)=@sco, &(0x7f0000000040)=0x80) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000340)={&(0x7f0000002680)=ANY=[@ANYBLOB="40000000080605090000000000000000010000040000010007000000050001000700000700000000a9f8ef8631d9c70e104073797a31000000001500080073080000000000000000010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) open$dir(&(0x7f0000003680)='.\x00', 0x202c0, 0x82) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x61) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000036c0)=[0x6d, 0x200]) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r6, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000003700)=0x2) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002640)='/proc/capi/capi20\x00', 0x620080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r11 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000440)={{0xffffffffffffffff, 0x2, 0x1, 0x1, 0x2c4c}}) lseek(r10, 0x0, 0x2) sendfile(r10, r11, 0x0, 0x40d09) pwritev(r11, &(0x7f0000000300)=[{&(0x7f0000001480)="3401d49732e3fdd2b4d27409306ef823ad7dfb4bcb0088f15a4f13b9ae1986d09727469d8b74d135a70a6089fa4d9e7b955e5b211f096f92494bab86f5beff3e5736d24e45211dbf630e5036f986ec68f7320200059a3fee8feee86c6a35f1b4a916f3a262ec49185b3688527f558ca477f2350278aaebc12af01c814f79e092ce86abd0f2eb555efd30d7decb506e7f7db9bdc9e6cc68baa285a989d9ae88f35b64e301e00b44b32b17e40386b8", 0xae}, {&(0x7f0000001540)="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", 0x1311}, {&(0x7f0000002540)="ffbbe3e4590b9c7a8db1e2a65b935fd9d497aa7e7910dc7ff47684066bf03831aeb6ce8ee143692b0906c06058b47e2c7bbb3bf688fe47bad02e12feb53bdd3dd0e6fe40686abf319a231f8e810b7ea90f93066df448f0074bfbbb40c4c1342152af1713a475186705138869defdc7ac9905263f937bf2d3a0cc341b7735baf28a0abb999b8a4f9cc450a8abff516c81c867153c2f868eb5e2545adfc3951925cba249d66811a3497f091b5d47ea3f6c86a5d84de7fd95af5f4dbe79d8a0b6407eca2852977c02", 0xc7}, {&(0x7f0000003740)="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", 0x1033}], 0x4, 0x6) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fffdb1144c7eb7a2319a184e333", 0xca, 0x10000}], 0x0, 0x0) [ 452.712373][ T26] audit: type=1804 audit(1579345898.306:80): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.762168][ T26] audit: type=1804 audit(1579345898.326:81): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.809096][ T26] audit: type=1804 audit(1579345898.336:82): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.854085][ T26] audit: type=1804 audit(1579345898.336:83): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.879664][ T26] audit: type=1804 audit(1579345898.346:84): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.904713][ T26] audit: type=1804 audit(1579345898.346:85): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.932483][ T26] audit: type=1804 audit(1579345898.346:86): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.960383][ T26] audit: type=1804 audit(1579345898.386:87): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 452.986379][ T26] audit: type=1804 audit(1579345898.386:88): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 [ 453.010939][ T26] audit: type=1804 audit(1579345898.386:89): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/126/bus" dev="sda1" ino=17160 res=1 11:11:39 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:39 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="03f9ffffff", 0x5) 11:11:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x4) 11:11:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0, 0x0, 0xfffffff0}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0xfb24e000) [ 453.519505][ C1] net_ratelimit: 25 callbacks suppressed [ 453.519514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 453.530994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 453.532694][T10318] team0: Device ipvlan1 failed to register rx_handler 11:11:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x4020) [ 453.736916][T10318] team0: Device ipvlan1 failed to register rx_handler 11:11:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="04f9ffffff", 0x5) 11:11:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0, 0x0, 0xfffffff0}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0xfb24e000) [ 453.964942][T10341] team0: Device ipvlan1 failed to register rx_handler [ 454.249444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 454.255384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 454.639511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 454.645497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 454.719455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.725438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.799450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.805416][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:41 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="0df9ffffff", 0x5) 11:11:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x1000000) 11:11:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0, 0x0, 0xfffffff0}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0xfb24e000) 11:11:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 455.772826][T10349] team0: Device ipvlan1 failed to register rx_handler 11:11:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="0ff9ffffff", 0x5) 11:11:42 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x4000000) 11:11:42 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x32d1}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000001bc0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0xd0, 0x2, 0x6, 0x741882de26a818e7, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x11, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xd0}}, 0x8040) 11:11:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x3) 11:11:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x20400000) 11:11:42 executing program 0: socket(0x0, 0x800000016, 0x0) r0 = socket(0x10, 0x0, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000001f000000000000000000000003000000008e576c0700f5e64ee81df57fb83e4156c7a458b68ef44cc3b3375365e476ea682390da9ef88d596f0000000000000000000000000041473e48e119c8f777bebff2a00c6c517c7f0c31315871af451a0b27c137d03f7c5182aa1f2600143447a83f61a2dadddbc394a89a7ea66b0687145aa79d5528c1bfe413f9b08eb5bf6097"], 0x0, 0x2f}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) accept$netrom(r0, &(0x7f0000000140)={{0x3, @null}, [@netrom, @rose, @remote, @null, @rose, @remote, @null, @default]}, &(0x7f00000001c0)=0x48) bind(0xffffffffffffffff, 0x0, 0x0) 11:11:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x4) 11:11:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x402000000000) 11:11:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f00006bf000/0x2000)=nil, 0x2000, 0x0, 0x81032, 0xffffffffffffffff, 0xbfe70000) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x600000b, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x100000000000000) 11:11:44 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ftruncate(r2, 0x7e) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, &(0x7f0000000180)=""/6, 0x6}, 0x20018100) [ 458.809462][ C0] net_ratelimit: 18 callbacks suppressed [ 458.809472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 458.820950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 458.879462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.885689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 458.895979][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 458.896060][ T26] audit: type=1804 audit(1579345904.486:96): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/138/bus" dev="sda1" ino=17207 res=1 [ 458.954101][ T26] audit: type=1804 audit(1579345904.536:97): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/138/bus" dev="sda1" ino=17207 res=1 [ 458.959453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.989515][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.129500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.135688][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:45 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:45 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x400000000000000) 11:11:45 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xb43f2ebc05957b93, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x6, 0x7}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0x3e0, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-generic\x00\x00\x00\x0f\x00'}}) 11:11:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x389b07d854b1ee22) open(&(0x7f0000000000)='./file0\x00', 0x140, 0x144) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 459.759478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.765333][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:11:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x40000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x5000, 0x1d4}, {0x1, 0x400}], r2}, 0x18, 0x1) 11:11:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x3}, &(0x7f00000002c0)=0x28) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r8, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r8, 0x5, 0x30, 0x3, 0x8}, &(0x7f0000000040)=0x18) r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r11 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r12 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r13 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r14 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r15 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r14, 0x0, 0x2) sendfile(r14, r15, 0x0, 0x40d09) lseek(r14, 0x101, 0x2) sendfile(r12, r13, 0x0, 0x40d09) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000004c0)=""/66, 0x6c}) lseek(r10, 0x0, 0x2) sendfile(r10, r11, 0x0, 0x40d09) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r9, 0x0, 0x9}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x4}}}, 0x84) r16 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r16, 0x20400000, 0x0) 11:11:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x1, &(0x7f0000000040)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8cfac80f35b7f954, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 460.113498][ T26] audit: type=1804 audit(1579345905.706:98): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.198395][ T26] audit: type=1804 audit(1579345905.706:99): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.248089][ T26] audit: type=1804 audit(1579345905.706:100): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.277674][ T26] audit: type=1804 audit(1579345905.706:101): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.305881][ T26] audit: type=1804 audit(1579345905.706:102): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.334930][ T26] audit: type=1804 audit(1579345905.706:103): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.364674][ T26] audit: type=1804 audit(1579345905.706:104): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 [ 460.390727][ T26] audit: type=1804 audit(1579345905.706:105): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/114/bus" dev="sda1" ino=17196 res=1 11:11:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8080) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000000)={0x1bd, {{0xa, 0x4e22, 0x40000000, @mcast2, 0x1000}}}, 0x88) 11:11:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x53, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000202ad0d1bba87c7518b189b15ae90ce745ef35835e0fb96db510c7dda60ce3699f5fd8b2a1d797de2cbeabc996f656c325f16b028285200c81d7c971ff34b8f6d661612a671a825b7c304a419993ebd0e191a2ad01ae9e8700"/108, @ANYRES32, @ANYBLOB="00000000000000000800040060000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="6ef0a2214f4d760b"], 0x50}, 0x1, 0x0, 0x0, 0x24000848}, 0x20004000) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 11:11:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x5, 0x1000, 0xf2, &(0x7f0000000000)="66f3f6cf32ffa4ad0184c6af6f19f418caa0a836b18e0a1e85d0a44e436e03916dd43f6de531d056c21e451cc7de531f333cb923668a4c63396c2df3d1dfd2c88abe544d4c43d91ea96d0064aeabcd5d043bb8eb22ac6908ec5a3dc08f96d67583b613d2bf5256e5ab162a925a507a83a6a3985c4af415f0b037e5df747c593de1618a98ac38124573f3f3e59a54fc87bd3a30492e3d979f250540ddea7171167b719fdf8d8e2a6d913517aa4096e9cca0451b3e5c69317c0c91324a7f32aafed317a360d751a894ca66f761d81a5916e80a409fcd915663a572fbb1adec746dd4eebc122b6bca6f96d555942cae0255d1a8", 0x74, 0x0, &(0x7f0000000100)="ebcc09d45df0c15760e9de14c2945465d13183bc0cbc2eed9c5e06750455b78bb71f9d42774a1a58a3912dda29cae170335bf50848a0f12f8960f4b984bfac22f68f2da5b4c32208a71147390ff3faca3aab093d95d84a86fbc5eba6ee182f95f9497b42be3999f5a40de0708c0779ce74fcd8bb"}) 11:11:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:48 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x5, 0x1000, 0xf2, &(0x7f0000000000)="66f3f6cf32ffa4ad0184c6af6f19f418caa0a836b18e0a1e85d0a44e436e03916dd43f6de531d056c21e451cc7de531f333cb923668a4c63396c2df3d1dfd2c88abe544d4c43d91ea96d0064aeabcd5d043bb8eb22ac6908ec5a3dc08f96d67583b613d2bf5256e5ab162a925a507a83a6a3985c4af415f0b037e5df747c593de1618a98ac38124573f3f3e59a54fc87bd3a30492e3d979f250540ddea7171167b719fdf8d8e2a6d913517aa4096e9cca0451b3e5c69317c0c91324a7f32aafed317a360d751a894ca66f761d81a5916e80a409fcd915663a572fbb1adec746dd4eebc122b6bca6f96d555942cae0255d1a8", 0x74, 0x0, &(0x7f0000000100)="ebcc09d45df0c15760e9de14c2945465d13183bc0cbc2eed9c5e06750455b78bb71f9d42774a1a58a3912dda29cae170335bf50848a0f12f8960f4b984bfac22f68f2da5b4c32208a71147390ff3faca3aab093d95d84a86fbc5eba6ee182f95f9497b42be3999f5a40de0708c0779ce74fcd8bb"}) 11:11:48 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30000050}, 0x40040080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) 11:11:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000100)='smaps_rollup\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/connector\x00') ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x100, 0x9, 0x1}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f00000000c0)) lseek(r4, 0x20400000, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0xff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 11:11:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) accept4$ax25(r1, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose, @default, @rose, @bcast, @netrom, @null]}, &(0x7f0000000080)=0x48, 0x800) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x5, 0x1000, 0xf2, &(0x7f0000000000)="66f3f6cf32ffa4ad0184c6af6f19f418caa0a836b18e0a1e85d0a44e436e03916dd43f6de531d056c21e451cc7de531f333cb923668a4c63396c2df3d1dfd2c88abe544d4c43d91ea96d0064aeabcd5d043bb8eb22ac6908ec5a3dc08f96d67583b613d2bf5256e5ab162a925a507a83a6a3985c4af415f0b037e5df747c593de1618a98ac38124573f3f3e59a54fc87bd3a30492e3d979f250540ddea7171167b719fdf8d8e2a6d913517aa4096e9cca0451b3e5c69317c0c91324a7f32aafed317a360d751a894ca66f761d81a5916e80a409fcd915663a572fbb1adec746dd4eebc122b6bca6f96d555942cae0255d1a8", 0x74, 0x0, &(0x7f0000000100)="ebcc09d45df0c15760e9de14c2945465d13183bc0cbc2eed9c5e06750455b78bb71f9d42774a1a58a3912dda29cae170335bf50848a0f12f8960f4b984bfac22f68f2da5b4c32208a71147390ff3faca3aab093d95d84a86fbc5eba6ee182f95f9497b42be3999f5a40de0708c0779ce74fcd8bb"}) [ 463.919454][ C1] net_ratelimit: 22 callbacks suppressed [ 463.919464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 463.931239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 464.639496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 464.645315][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x5, 0x1000, 0xf2, &(0x7f0000000000)="66f3f6cf32ffa4ad0184c6af6f19f418caa0a836b18e0a1e85d0a44e436e03916dd43f6de531d056c21e451cc7de531f333cb923668a4c63396c2df3d1dfd2c88abe544d4c43d91ea96d0064aeabcd5d043bb8eb22ac6908ec5a3dc08f96d67583b613d2bf5256e5ab162a925a507a83a6a3985c4af415f0b037e5df747c593de1618a98ac38124573f3f3e59a54fc87bd3a30492e3d979f250540ddea7171167b719fdf8d8e2a6d913517aa4096e9cca0451b3e5c69317c0c91324a7f32aafed317a360d751a894ca66f761d81a5916e80a409fcd915663a572fbb1adec746dd4eebc122b6bca6f96d555942cae0255d1a8", 0x74, 0x0, &(0x7f0000000100)="ebcc09d45df0c15760e9de14c2945465d13183bc0cbc2eed9c5e06750455b78bb71f9d42774a1a58a3912dda29cae170335bf50848a0f12f8960f4b984bfac22f68f2da5b4c32208a71147390ff3faca3aab093d95d84a86fbc5eba6ee182f95f9497b42be3999f5a40de0708c0779ce74fcd8bb"}) 11:11:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x4000000, 0x4010, r0, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "e10a3dfc27fdd965473247aa4a828480"}, 0x11, 0x0) 11:11:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = getpid() process_vm_readv(r5, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000300)=""/14, 0xe}], 0x3, 0x0, 0x0, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x1, 0x3, 0x80, 0x4, r6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {r10, r11/1000+30000}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r12, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffff9ad227c9eb569fb3c792426fda754ac767ba8235836bc208fd99000000800000000025b0110dd1220ccaeaa7f0e3c38c738aa18f109fc0abcefdc8"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={r12, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r12, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) r13 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r14 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r13, 0x0, 0x2) sendfile(r13, r14, 0x0, 0x40d09) r15 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r16 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r17, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r15, 0x84, 0x7b, &(0x7f00000000c0)={r17, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r17, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f00000004c0)={r17, 0x322, "823ca7e2d9f596daf718ffa58fb534851b3c48062f2e7bfa82a4db787d0cc9b1de"}, &(0x7f0000000180)=0xffffff63) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r7, 0x404, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x1) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:50 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 465.001038][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 465.001062][ T26] audit: type=1804 audit(1579345910.596:127): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/118/bus" dev="sda1" ino=17259 res=1 11:11:50 executing program 1: r0 = socket(0x11, 0x800, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) [ 465.049444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.055302][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.069598][ T26] audit: type=1804 audit(1579345910.606:128): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/137/bus" dev="sda1" ino=17256 res=1 [ 465.119447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.125248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.199449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.201933][ T26] audit: type=1804 audit(1579345910.636:129): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/118/bus" dev="sda1" ino=17259 res=1 [ 465.205358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.283267][ T26] audit: type=1804 audit(1579345910.656:130): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/118/bus" dev="sda1" ino=17259 res=1 [ 465.330446][ T26] audit: type=1804 audit(1579345910.706:131): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/118/bus" dev="sda1" ino=17259 res=1 11:11:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) 11:11:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xeb315e172b42f986, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="420800a9ccb6759ec35682f67ebdffbfbde99111085dcfbee024eef0ff253b49ae43af6f12d18bb5fc38a8f319a7705f87e7ddf7c7155aaebda51f7ee353f66ced0312d90c1312be616c58dabcfe57151c1a221809046ed13657a2902f876515621c8e9831e2a21b589ba51e6d2d336c32f4e470efb0a561b3db6be43cb85d578420acb48d1e464c64d94a676dadd59df5f6bf58b042c3bc79e1d4c1fadfb67a40", 0xa1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000280)='attr/prev\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$TIOCCBRK(r7, 0x5428) lseek(r5, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000180)=0xffffffe0) sendfile(r5, r6, 0x0, 0x40d09) lseek(r5, 0x10000, 0x0) r8 = dup(0xffffffffffffffff) futimesat(r8, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={{0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r9, 0x0) ioprio_set$uid(0x5, r9, 0x1) 11:11:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x110, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 11:11:51 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 11:11:51 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) prctl$PR_SVE_GET_VL(0x33, 0x19184) [ 466.192064][ T26] audit: type=1804 audit(1579345911.786:132): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/119/bus" dev="sda1" ino=17272 res=1 11:11:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) [ 466.268337][ T26] audit: type=1804 audit(1579345911.786:133): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428293972/syzkaller.uF4VZL/138/bus" dev="sda1" ino=17197 res=1 11:11:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) [ 466.364974][ T26] audit: type=1804 audit(1579345911.786:134): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/119/bus" dev="sda1" ino=17272 res=1 11:11:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:11:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) [ 466.434776][ T26] audit: type=1804 audit(1579345911.816:135): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/119/bus" dev="sda1" ino=17272 res=1 [ 466.480653][ T26] audit: type=1804 audit(1579345911.856:136): pid=10540 uid=60928 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/119/bus" dev="sda1" ino=17272 res=1 [ 469.199468][ C0] net_ratelimit: 18 callbacks suppressed [ 469.199474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.211603][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) sendto$l2tp(r1, &(0x7f00000000c0)="950b7e9785370bef616077aec9b335677ff09a72c44786bb16479b110dec5b694860303bb34a8464c621ffcd69a0051d", 0x30, 0x20040000, &(0x7f0000000100)={0x2, 0x0, @multicast1, 0x4}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x6, 0x1f, 0xff, 0x0, 0x2, 0x284, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8000, 0xfff}, 0x8000, 0x8001, 0x0, 0x2, 0x401, 0x5, 0x9}, 0x0, 0x9, r1, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = dup(r1) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000240)=0x1) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r7, 0x0, 0x40d09) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000140)={0x8, 0x9, 0xfffffddb, 0xe000, 0x188, {}, {0x1, 0x1d6a44a40bdafc0c, 0x2, 0x1, 0x4, 0x1b, "f240b0b3"}, 0x9, 0x2, @userptr=0x4000000000000, 0x2, 0x0, r9}) r10 = open(&(0x7f0000000480)='./bus\x00', 0x800, 0x21) lseek(r4, 0x0, 0x2) sendfile(r4, r10, 0x0, 0x40d09) fstatfs(r10, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r11 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r11, 0x800000010d, 0x7f, &(0x7f0000000000)="00000000ff", 0x5) 11:11:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:54 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:54 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) creat(&(0x7f0000000200)='./bus\x00', 0x0) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) 11:11:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x6c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:54 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 469.290255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.296170][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.359504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.365332][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.380817][T10584] IPVS: length: 108 != 24 11:11:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 469.414224][T10588] IPVS: length: 108 != 24 11:11:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) creat(&(0x7f0000000200)='./bus\x00', 0x0) 11:11:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, {0x2, 0x75, 0x1b}}, 0xa) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:11:55 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 469.519477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.525288][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:11:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8001, &(0x7f0000000040)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2000007, 0x40010, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:11:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:11:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, [], [{0x8, 0x3, 0x5, 0x9, 0x7, 0x2}, {0x7fff, 0x4, 0x4, 0x9, 0x9, 0x3}], [[], [], [], [], []]}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000300)=0x80) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000a40)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x900, 0x1, 0x9, 0x1, 0x800, 0x0, 0xd, 0x7, 0x4, 0x5, 0x0, 0x807a, 0x8000, 0x1, 0x4]}, &(0x7f0000000b40)=0x100) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0x6, 0x0, 0x5, 0x8, 0x1}, &(0x7f0000000bc0)=0x14) sendmsg$inet_sctp(r3, &(0x7f0000000d40)={&(0x7f0000000340)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000380)="a3ceade07478b02fa5fcb6b3c7b12b82f78932693570aa2a95d60a819bcfeef25ecb5a04d4b05512978f61309f8adaa8b8ce8dae4d87518bcdb99775611910f00d0d4e523669a19accec5d777ce4bb271a72254f0224eea526285009cdcb2f44bf3645da959947b54e88a0a7a30c21ad87092a8ac23ad00f9e8827f854764b5bab79de6798b40a254e88e39b532d9d2533549e494a580ccdcdb1e5b21fd683bf90366ac163d74c80331c274cb75723778109a3884414fd2eae363d12ff7dabfa643eb9b67ace0b781df7353c89", 0xcd}, {&(0x7f0000000480)="a3aae539d1f4f13ca1fa04922c3765d7f5961d0b29d75af74816def45dc1907b43a631a554963a28b9c1bc2ff118", 0x2e}, {&(0x7f00000004c0)="9aeab6a964c057101049448c40b9b0bf433286580f79f5aa39c8bb1c10c74576cf6f3f567ffe527e0823e00bfbb91609c2d38015da11dcdd47ecbbf89a8c5c138a4cbf3f24f13ac70a623e4edbec4b66ae5fe82b69be41eb2524360087190665adff63f574c4ef96fbd0cf8c7572cbcd6916f094858e8aea06dfd79cee0b43fe84b58b8c6c437a94e60de666db42649478f266fc6243c4630bcafa2221eac01b09b1591b11b6d2855360172b8cc31a777d46c373f2a58cc0605c87cf13cc1f0d1125ca6300331be8f10199a53a59fa9b7f04b6b15d8501fba65aa7fce721f5f7", 0xe0}, {&(0x7f00000005c0)="519016655baf7be32b6f953a64a572a740e89287dc4d5e0cede8f02ee99bc04aef0552c55fadc5fbdfdeb5cb2270c5d49d2b3ce776505b671de259989b94c63e474a4910af7fdc341bd95789d2504520f80f28e8dd65e3b4aa628c64ad41d84e229301ff0570a6e51c90dd4843b390ed4810630e0b359f8c066ca99019148fd360dc98633ea2d8ece82c0a108f981734d4a09e59c5a17c6b9e7b68d197276deba1ea98251a4c377f627796c4118b330213def811342b5c6eff76cb5072e2cb29d09dfc0fb1c08247dfde4804324159b4", 0xd0}, {&(0x7f00000006c0)="ddfbd55c2de35ad08251bc57db5cbaa7f31561070094f0c15329389be804330fd1a30fe95610f196047379e69d6abc83d38ade41aed49a0d544a967ed7285e5ee31640629ab9ae2e2571cf67d57f8c68c5a4049a1563116071378c23045fed3401fb9dbfc4798ad9190adc263fa2a8a459deac8ce5059610fd4280ce98323886ea0bb412086c81b04d1fef5c6ef7520670febb5940763bdecf0bdee72de55cbcbac1c2a097feaeb4bde32e6a3a510967731f547a2bcdbf", 0xb7}, {&(0x7f0000000780)="4c9ae8e3dad1429d075df5fdaf7181e0ffd86eb4d3f31d62e8818867589171936aa883c5b2c6756d07082f19efd3aa4e5e4a72260418c01b9769aa4aecc132fed1cbf6938edee734d6f683cff8e5aeb232a44e2842f84ed8cba5e9a356269eeb68adeb61eb4492faf438a3ee9f34bfd8dec4285447aea3b7b0f54f3153552a7c66e0e2ffad81e6df55d964cfbe5b295efbef9ae9df31e43777588d267cc9a6a2b892dac724192925018b6a2930316e825d57870592091cf2fd3665fed28574990e92d89d28aa9fff395389cd268c0832cf502028", 0xd4}, {&(0x7f0000000880)="9a86973d7801bb15f291979c578adae3be5cc747296769c86acb28d73337221b6786bd7f75b379d62ea80207658df0dec37abb970e2657b8fd9a8ae2322cea81c2793b79ce543844d12520d07ddcbbd082459d2bebf3bd3fb26bb8ca17c7b2cce513ed24bff638165edf4b93828a1323f5ba237017f47ddb468ea52bd22bf21c890dc3deafd9097446ca6778efc79cbeef553744640b27bec659534ed5f9115fdf31749b1a8563464b0be1d7064d58e2cf141ff5c5fda3c70d4890b07ffcbd32a7619cb84318c38d6ab7b06da3a1bc2cb994a53be8f7ff1a63fa93ef946f182e8a", 0xe1}, {&(0x7f0000000980)="5beb845ba61e455cba1463ac2cdb53475794d6f9ed7fabfc9421fc357d41e7", 0x1f}], 0x8, &(0x7f0000000c00)=[@init={0x18, 0x84, 0x0, {0x8001, 0x101, 0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xcc77, 0x8000, 0x4, 0x8, 0x1, 0x77a47997, 0x7076, 0x5, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0xff, 0x800f, 0x8, 0x1, 0xffff, 0x419, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x20, 0x820a, 0x7ff}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8001, 0x800, 0x3}}, @init={0x18, 0x84, 0x0, {0xffff, 0x8001, 0x7ef3, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @sndinfo={0x20, 0x84, 0x2, {0xfffa, 0x4, 0x6, 0x6c56a325, r8}}], 0x120, 0x588cc}, 0x0) 11:11:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000b5a000/0x2000)=nil, 0x2000, 0x1000001, 0x4001432, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) r2 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) process_vm_readv(r3, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0xfffffffffffffdb2, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x2, r2}) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x30, 0xffffffffffffffff, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:11:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:11:55 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:11:55 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1b441, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)="21a56920a14e61bd7e108bbabef5c90c4ba0d503dd0dab854a751161af7485d547370ea68809c4cafc23c6472b731900676ea17d262291cb7a2b1eb9f99850e1c80d077c1e0877adae1696aaab35a953df7651b70416fe814e648e465a16e149755f75cae040237eef149e167d9198ba00a3cc0d6f77d79a1b8c78e6359d2217da982dfa99a5b6550cf0f7ef6e95a3410736628177afaf07e05092ffda65ca3488e326", 0xa3) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) 11:11:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e20, @multicast2}}) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x40) r3 = getpid() process_vm_readv(r3, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100456ea72aa5e7dd10e61afa9b000037865e00c10c0000", @ANYRES32=r3, @ANYBLOB="0300656d30"], 0x21) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200240, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000200)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 470.159438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 470.165263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 470.245630][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 470.245650][ T26] audit: type=1804 audit(1579345915.836:156): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/124/bus" dev="sda1" ino=17292 res=1 [ 470.314969][ T26] audit: type=1804 audit(1579345915.846:157): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/124/bus" dev="sda1" ino=17292 res=1 11:11:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:11:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'timerslack_ns\x00'}, {0x20, 'timerslack_ns\x00'}, {}], 0xa, "46837d5cfacf0045624a966c287129139c4d"}, 0x3c) lseek(r2, 0x20400000, 0x0) 11:11:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000280)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@version_9p2000='version=9p2000'}, {@debug={'debug', 0x3d, 0xfffffffffffffff9}}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x32, 0x33, 0x32, 0x65, 0x62, 0x0, 0x63], 0x2d, [0x35, 0x37, 0x32, 0x64], 0x2d, [0x61, 0x33, 0x39, 0x63], 0x2d, [0x5c, 0x29, 0x9f, 0x34], 0x2d, [0x39f621fe9cc7ccaa, 0x94b17d7bdb419e1d, 0x35, 0x61, 0xf1, 0x36, 0x34, 0x36]}}}, {@seclabel='seclabel'}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user'}}, {@subj_type={'subj_type', 0x3d, 'em0'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) 11:11:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:11:58 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 472.749319][ T26] audit: type=1804 audit(1579345918.336:158): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/153/bus" dev="sda1" ino=17307 res=1 [ 472.753572][T10653] 9pnet: Could not find request transport: xen 11:11:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x6c80) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r11 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$TCGETA(r13, 0x5405, &(0x7f00000003c0)) fcntl$getownex(r12, 0x10, &(0x7f0000000180)) lseek(r10, 0x0, 0x2) sendfile(r10, r11, 0x0, 0x40d09) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000000100)={0xdb, 0x6, 0x4, 0x800, 0x4006, {0x77359400}, {0x4, 0x8, 0x0, 0x60, 0x0, 0xec, "633d17ad"}, 0x6e5fb923, 0xce1fd9d11ed467f1, @fd, 0x6, 0x0, r11}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5010405}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="080028bd7000fbdbdf250500000008000100000000000c00060001000000000000004400070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="78160100", @ANYRES32=r5, @ANYBLOB="d56c6f80", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="d69f0000", @ANYRES32=r1, @ANYBLOB="080004f4", @ANYRES32=r14, @ANYBLOB="e8ef984694749b00001a84d4e33f4ede09000000000000000100", @ANYRES32=r1, @ANYBLOB="0c00030003000000000000000c0002000100000000000000080001000000000008000100000000000c0002000700000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r15 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) ioctl$FIGETBSZ(r15, 0x2, &(0x7f0000000000)) lseek(r15, 0x20400000, 0x0) [ 472.813388][ T26] audit: type=1804 audit(1579345918.376:159): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/125/bus" dev="sda1" ino=17308 res=1 [ 472.837352][T10662] 9pnet: Could not find request transport: xen [ 472.858403][ T26] audit: type=1804 audit(1579345918.386:160): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/125/bus" dev="sda1" ino=17308 res=1 [ 472.921788][ T26] audit: type=1804 audit(1579345918.426:161): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/153/bus" dev="sda1" ino=17307 res=1 [ 472.958004][ T26] audit: type=1804 audit(1579345918.546:162): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/126/bus" dev="sda1" ino=17297 res=1 11:11:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:11:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:11:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x8e4b22, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280)) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x433, 0x20003) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) lseek(r5, 0x0, 0x2) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) sendfile(r7, r8, 0x0, 0x40d09) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendfile(r5, r6, 0x0, 0x40d09) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") fchmod(r9, 0x19) [ 473.002977][ T26] audit: type=1804 audit(1579345918.596:163): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/126/bus" dev="sda1" ino=17297 res=1 [ 473.032018][ T26] audit: type=1804 audit(1579345918.596:164): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/126/bus" dev="sda1" ino=17297 res=1 [ 473.074356][ T26] audit: type=1804 audit(1579345918.596:165): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/126/bus" dev="sda1" ino=17297 res=1 11:11:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:11:58 executing program 1: socket(0x10, 0x80002, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") ioctl(r0, 0x1000008b12, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:11:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002bbd7000fbdbdf250e00000023003400c6a34f948471835495af0d0f5fbbeb5476763503bc28bd764479f8d589254e0d0400e20004001601"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r11, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800c) lseek(r2, 0x20400000, 0x0) [ 474.319478][ C1] net_ratelimit: 22 callbacks suppressed [ 474.319485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 474.331244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.039474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 475.045530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.439480][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 475.445290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.519447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.525231][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.599479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.605369][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x87d, &(0x7f0000000040)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r1, 0x0, 0xe, &(0x7f0000000080)='%wlan1(cgroup\x00'}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/softnet_stat\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:12:01 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:01 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000000)=[0x9, 0x3, 0x1ff, 0x1fe, 0x101, 0x4, 0x0], 0x7, 0x3, 0x8001, 0x7, 0x0, 0x0, 0x8, {0x68d5ce91, 0x0, 0x1, 0x4, 0xc66, 0x7, 0x3, 0xf3a, 0x81, 0x7ff, 0x6, 0x9, 0x1f, 0x3, "c024eecf29fc157987af26446be754bcece5858b02443a3725062cc537a00a59"}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@mcast1, 0x19, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) 11:12:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:01 executing program 0: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:01 executing program 0: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x101) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:01 executing program 0: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) getpeername$netlink(r4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendfile(r2, r3, 0x0, 0x40d09) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) [ 476.545594][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 476.545761][ T26] audit: type=1804 audit(1579345922.136:173): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 [ 476.588052][ T26] audit: type=1804 audit(1579345922.136:174): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 [ 476.615059][ T26] audit: type=1804 audit(1579345922.136:175): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 [ 476.640275][ T26] audit: type=1804 audit(1579345922.156:176): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 [ 476.687982][ T26] audit: type=1804 audit(1579345922.156:177): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 [ 476.712695][ T26] audit: type=1804 audit(1579345922.156:178): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/131/bus" dev="sda1" ino=17307 res=1 11:12:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="66b8c4000f00d80fae0981720a00000000c4217c103966b8c0008ee0c442e1919c790000000064650f380830f30f0966baf80cb83cdfc680ef66bafc0c66b8000066ef43ab", 0x45}], 0x1, 0x0, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @cr0], 0x2) 11:12:04 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 478.953774][ T26] audit: type=1804 audit(1579345924.546:179): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/159/bus" dev="sda1" ino=16657 res=1 [ 479.005690][ T26] audit: type=1804 audit(1579345924.596:180): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/159/bus" dev="sda1" ino=16657 res=1 11:12:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:12:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) write$FUSE_DIRENT(r2, &(0x7f0000000080)={0xd0, 0x0, 0x3, [{0x2, 0x7, 0xe, 0xa0, 'timerslack_ns\x00'}, {0x6, 0x7, 0xe, 0x2, 'timerslack_ns\x00'}, {0x0, 0x2}, {0x2, 0x80000001, 0x0, 0x792c2e9}, {0x3, 0x6, 0x1, 0x52de, '&'}, {0x0, 0x1000, 0x5, 0x4bfa, 'ipvs\x00'}]}, 0xd0) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x20400000, 0x0) 11:12:04 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:04 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_hsr\x00', {'veth0_to_bridge\x00'}, 0xfff7}) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:04 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x12, 0xffffffffffffffff, 0x4000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000180)={0xc, 0x8}, 0x10) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="ff850600000000000500000001ff010000000000000000"]) fstat(0xffffffffffffffff, &(0x7f0000000040)) lseek(r5, 0x20400000, 0x0) 11:12:05 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 479.572865][ T26] audit: type=1804 audit(1579345925.166:181): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/133/bus" dev="sda1" ino=16594 res=1 [ 479.599462][ C0] net_ratelimit: 18 callbacks suppressed [ 479.599472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 479.611056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 479.632357][ T26] audit: type=1804 audit(1579345925.206:182): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/133/bus" dev="sda1" ino=16594 res=1 [ 479.679467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.685275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.759462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.765284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.919445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 479.925288][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.559473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.565388][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:07 executing program 1: r0 = socket(0x22, 0x4, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcff70e350491782cbf6d59cffffb8d227c9eb569fb3c792426fda754ac767ba8236836bc208fd99c740002967a3d1220ccae8ab4468401c0bfbcdfad0792c6cc5381e1ba165993cba605bd1b5"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x6}, 0x8) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = open(&(0x7f0000000480)='./bus\x00', 0x202c2, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) r8 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000100)={0x4010006, 0x20000000209, 0x0, 0xffffffffffffffff}) r11 = dup2(r9, r10) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000080)={0xa00000, 0x20000000209}) r12 = openat(r11, &(0x7f0000000040)='./file0\x00', 0x62a001, 0x4) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42020408}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r13, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xfffffff7, 0x2, 0x3ff, 0x3c, 0x80000001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r14 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r15 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r14, 0x0, 0x2) sendfile(r14, r15, 0x0, 0x40d09) sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81001008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r13, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x37c0}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYBLOB="1afeffff83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e40254aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a00"/136], &(0x7f0000000080)=0x8c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x8, 0x9}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r16 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r16, 0x800000010d, 0x85d, &(0x7f0000d14ffc)="02f9ffffff", 0xfffffffffffffdb4) 11:12:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @mcast1, 0x7ff}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x7ff}], 0x48) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r5, 0x0, 0x40d09) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000000)={0x892, 0x7fffffff, 0x8000}) [ 482.007302][ T26] audit: type=1804 audit(1579345927.596:183): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/134/bus" dev="sda1" ino=16881 res=1 [ 482.099291][ T26] audit: type=1804 audit(1579345927.686:184): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/134/bus" dev="sda1" ino=16881 res=1 11:12:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:12:07 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:07 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x2002) lseek(r0, 0x20400000, 0x0) 11:12:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) listen(r1, 0x80) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000180)={0x2, 0xffff}) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140)={0x1000}, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000000)) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:08 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 482.431546][ T26] audit: type=1804 audit(1579345928.026:185): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 11:12:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x33b902, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x2}, {0x2, 0x0, 0x1, 0x1}}], 0x18) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000200)='net/ip_tables_matches\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000080)) [ 482.468816][ T26] audit: type=1804 audit(1579345928.056:186): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/135/bus" dev="sda1" ino=17089 res=1 11:12:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) pwrite64(r1, &(0x7f0000000000)="6a78b1fa770e0b9832e6bb51077f474e3dff2eef4bbbdaee483e87a6f073510ced9106486e9035d643d0c689", 0x2c, 0xffffffffffffff79) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 482.555104][ T26] audit: type=1804 audit(1579345928.056:187): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 11:12:08 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 482.631016][ T26] audit: type=1804 audit(1579345928.056:188): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 [ 482.712645][ T26] audit: type=1804 audit(1579345928.056:189): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 [ 482.757762][ T26] audit: type=1804 audit(1579345928.056:190): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/135/bus" dev="sda1" ino=17089 res=1 [ 482.783301][ T26] audit: type=1804 audit(1579345928.106:191): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 [ 482.812126][ T26] audit: type=1804 audit(1579345928.106:192): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/163/bus" dev="sda1" ino=17074 res=1 [ 484.729479][ C1] net_ratelimit: 22 callbacks suppressed [ 484.729490][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 484.741204][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:10 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x9) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8c5) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) r5 = creat(&(0x7f0000000100)='./bus\x00', 0xa2) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r9, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x914218039641d4c1, 0x0, 0x800, r9}, 0x10) 11:12:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:12:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c821}, 0xc0010) 11:12:11 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:11 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") r1 = fcntl$dupfd(r0, 0x203, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) fcntl$setlease(r1, 0x400, 0x2) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @null, r5}) [ 485.439457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 485.445310][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:11 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') eventfd2(0x80, 0x80400) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x635d, 0x100) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='lo\x00', 0x0, r2) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x100, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:11 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 485.849481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 485.855304][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 485.919469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.925244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 485.999453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.005239][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000bfe000/0x400000)=nil, 0x400000}, &(0x7f0000000200)=0x10) r5 = syz_open_procfs(r2, &(0x7f0000000240)='net/sco\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r6 = request_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='net/sco\x00', 0x0) keyctl$read(0xb, r6, &(0x7f0000000100)=""/78, 0x4e) lseek(r5, 0x20400000, 0x0) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000180)) 11:12:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) write$ppp(r3, &(0x7f0000000240)="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", 0xfb) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xffffffff, 0x7fff, 0xf1ef688a, 0x4, 0x16, "d99b38dc85c15fa3adf0ba7b12f2183012768a"}) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) setsockopt(r4, 0xffffffff, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 488.231047][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 488.231125][ T26] audit: type=1804 audit(1579345933.826:208): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 [ 488.317770][ T26] audit: type=1804 audit(1579345933.846:209): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/140/bus" dev="sda1" ino=16488 res=1 [ 488.368785][ T26] audit: type=1804 audit(1579345933.866:210): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/140/bus" dev="sda1" ino=16488 res=1 [ 488.405205][ T26] audit: type=1804 audit(1579345933.866:211): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 [ 488.457447][ T26] audit: type=1804 audit(1579345933.876:212): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 [ 488.486416][ T26] audit: type=1804 audit(1579345933.886:213): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 11:12:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:14 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10f000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r9, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r9, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000140)={r9, 0x5, 0x4, 0x9, 0x808, 0x9}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r10, 0x1}, &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r11, 0x20400000, 0x0) 11:12:14 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) r7 = getpid() process_vm_readv(r7, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003d40)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r9, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) r11 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r12 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r11, 0x0, 0x2) sendfile(r11, r12, 0x0, 0x40d09) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000005540)={0x0, 0x0}, &(0x7f0000005580)=0xc) lstat(&(0x7f00000055c0)='./file0\x00', &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() process_vm_readv(r15, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r16, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES32=0xee01, @ANYRES32=r17, @ANYRES32=0x0], 0xc) r18 = getpid() process_vm_readv(r18, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) stat(&(0x7f0000005680)='./file0\x00', &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES32=0xee01, @ANYRES32=r20, @ANYRES32=0x0], 0xc) r21 = getpid() process_vm_readv(r21, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) getresuid(&(0x7f0000005740), &(0x7f0000005780), &(0x7f00000057c0)=0x0) r23 = getgid() sendmsg$netlink(r1, &(0x7f0000005880)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000108}, 0xc, &(0x7f00000054c0)=[{&(0x7f00000058c0)={0x12ec, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@generic="e1cf977a522ba38d30eb9d9065e5c511b03b0aed491c4ba883d8d252f46d96c2e127b8f49b6db94f287e9735657fd69a5298afe268c56938cccca1faf1752402b600e40b0f25572ee8325c4d2ac999f193afa97d472d1f5726389c6a659aa665257a937fe33a826bab95bf7d77462d72ed271b0467bec0dfa771e1d362c61737128baad7d28d611d4ef5", @generic="4361f4fabe840404e68aaf871919a680b435990a446e98e4ef04a7cfb2f377b3276283e0617ddb334a7fa9863607b3230552df05b23f5dd9c56e35c38fe0f0d8758e1ebbce54f832f4f6a248f2028f894b95cdf1129a815b03f8ea09", @nested={0x130, 0x71, 0x0, 0x1, [@typed={0x14, 0x37, 0x0, 0x0, @ipv6=@empty}, @typed={0xbd, 0x47, 0x0, 0x0, @binary="ac110ff8350d54f98072c040e63abfd40b1b9778ffe5c3ac2543fe3856addc31ecefc17fb355cfdb404ccebbc7e73b240331c12819a1e2a038e277e0120043dcc58b823a1184e58566b95a7a5119090ad7ecef30a26d6683c3c094a414598a943279b02a5d7ed395bc66cef99459d053c5c66858a30047019fce44d750cc12a6ba48c1e4a88e55cf183c618d3da3a6694310348aa7cac09f8b704aec4c19337dd968f848d641b451b517f2908efc5cfc5065f0b97ccc7e649d"}, @typed={0x8, 0x40, 0x0, 0x0, @fd}, @generic="05e6873c2218cf1b85f7cbcdeafccfeee56d2be78eba2c634e595d299d820ac5eb02f55b60da9d0b8b5d7feb7d3a56cf95611bed0902041233dc65cad133731d74cc47bb3e6af9798ef06654df7ad95a"]}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@rand_addr=0x4}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@empty}, @nested={0x1004, 0x35, 0x0, 0x1, [@generic="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"]}, @generic="5672a35e0bc54b6e5a7a1ad56311d47ab7b6262db6adef08bd95490a92b3e61f41d41b5c436b4b78b5eb32013423eef76d1b9186f1842ec036b3e021f2dd1cdb0a8975e619b2ecfa2b8350521defc6c8e395456ecab45b6c7edc61dc585be9c86124051ade625aef665d5e50a22f8e3d501b1c5f3f16a730ab8848bc5a2bcb06d06ef7320f", @generic="d57db8fa441ffb1dcb525205e9577c5c41fa4ccdde063901b91b9735b9dcadbc51"]}, 0x12ec}, {&(0x7f0000001580)={0x24c4, 0x3, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x14, 0x59, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x18}}, @nested={0x73, 0x57, 0x0, 0x1, [@generic="53dc336b8ee43dcadb749176a6bb8104e1011d31495930169353fcc8e28c1c7a70426ee9f25e59976d8834d9fbbfdfd26909feafc0ae08c65e3476afa3171866522c05a306c8b32bc7914c8302634d15d3350f942205873709a2d762f746f8ec65f7b7a0008459dcc100ef3369cd58"]}, @nested={0x121c, 0x53, 0x0, 0x1, [@typed={0x2e, 0x33, 0x0, 0x0, @binary="cbfa7ab3b1db2b8cbd85dde1997470d11916d0becbbbb6ed391fc20583cb883921ac3151bf13a87a6b50"}, @typed={0x42, 0x56, 0x0, 0x0, @binary="65f7c6f816526461d9e58f3c049fb992853ebb460bd0c73ce4b328f7a842b61e7a8ae4cc9ac205e2382ee447530d822def08ef3491170d79471a6e493590"}, @typed={0x8, 0x58, 0x0, 0x0, @uid=0xee00}, @generic="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", @generic="8df7af6144d328e4270a69b69fd2178baabdf251d4b9545bff0aea468a4754c374d7cc57203d8f30b589ad08e1f7444ea4058bc544923c3ff48ebe7cdedb7697008548647c764b4d8fd3ef0887fabea50c8aa02d3b680ea710520311778199b648644a94eaac0fe89ca2fc55555fff5a98eaccdd443f27f6801d25a59e29fbb79b741b1e2743f147836862a1b903a6017d6181b5be5368969d85527b", @typed={0x8, 0x35, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x92, 0x0, 0x0, @uid=r5}, @typed={0x17, 0x34, 0x0, 0x0, @binary="d1e616d5723f741f07c224bee1e865523de473"}, @generic="4874a46bc3633d74fc9597aa7613454d88291461a356baad26a6eafde08710d2fd8c56a012117278e9b98379d5dd063b1da1584624ab20f21532df85ced482cc88335b729a30536e267cfd247f28fccfd59e48b1b4b6d82488639f841eac53eba3bdf10e3780d12dd86c888d9899460ab729261fc71f3564f4b4e8d9d855363494261eff78499ffc111a0b3ef67c44d5e5bc0bea5dca75de88a92e7b9f759e1135b252a8c3d96b30d5c81f61458ef740fb4700d39470b5162e39e1eebb4e135fba72eced523435ee89280a333c1c3d341ad133d1cc13f6f7"]}, @typed={0x1004, 0x9, 0x0, 0x0, @binary="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"}, @nested={0x68, 0x0, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x38, 0x0, 0x0, @fd=r0}, @generic="6ca3f49ef35a6ade27f1daf3076abe64177827d6da48e1511ff99aa616ba9033f2fc764ee282be656678a82d744a629f856b99702af3c96555431e16ede1e7cb165cbdf308ddab16", @typed={0x4, 0x5b}, @typed={0x8, 0x50, 0x0, 0x0, @pid=r7}]}, @nested={0x96, 0x8e, 0x0, 0x1, [@generic="ea49fc0961198e39c8a439becc0bba35bb4480c635b1aed5525aa7dd31713bcbfcedb7c68ce5d0acef88d1932dd3d5b27c10ee2be76554adc66626deeb836ad225c9ed80c47d6d7bcd21c61c7a5ddd148e017e41617c", @typed={0x24, 0x3e, 0x0, 0x0, @str='bdevvmnet0trustedprocmime_type,\x00'}, @typed={0x8, 0x59, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0x1}, @typed={0x5, 0x4d, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x7a, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x10000}, @typed={0x1d, 0x21, 0x0, 0x0, @binary="8091668de8ffc5e940e64c75a03b867df7eebefa67cc3ac3e5"}, @generic="6ac9da3f0d19ceae4dbbad3f133c1efe71407ea68c81ab34a354d85d5c9d59321aefb2343840832af49c011971b59df694aedf959eda788292b1b58e112230863d29f52cad9e698616d1ce965fd3a512e8e069bb33826b15602a033e29fd495d40a66eee277ac8aa4f935026b0680da570850976ac167cfa0cd92e17730e1fa2211d6c3d7d0c084c2026b14882376356781e603ebc670d2be02529ff9aa06d9b24abeb190014ebd082e9be349e03ce457c9facbd2fbae72fc8fcc974d8709b39f59213339a2f5733d6123f978583a84f5d1618b6349639"]}, 0xfffffd55}, {&(0x7f0000003a80)={0xfc, 0x28, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0xde, 0x26, 0x0, 0x1, [@generic="14967857c533b5c4de94564847af4610f4f7b1bd3a95012d4994cecf53b289803dc67cfe63b184ac8bd14aba9e9ab3c28e4a63b7b6bd43e3022da2105502862f89ced578b8f1b9266dbf157257f84998d18d817e94ab9909a0c3be2966812e81393131debac419ebdaeb5f04b7154d3a325e63eb7a6e1228e646d465854f95a6779dbe5446d8641e8a48ed35d7d51bce399a0472ce0cf40e113adc22d2a3c137ae1fc8aa25e5c7649b529196b34af3ed1b65ea099f790cdf1d8f48ad9777c0b2e0654b0f9f7adb8fa9a3d9934e81b9ee44ec28108acca9239855"]}, @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x2f}]}, 0xfc}, {&(0x7f0000003e40)={0x14fc, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x5b, 0x35, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x48, 0x0, 0x0, @uid=r9}, @generic="fb0e0786524eaf26d9e8b62f1c5a0c780ab750b8261e6749f95646e7ed0d930159ac3410c32f94019d792a7409f9bc600d4e8dd73a6e9b50409d6659182b6befdd2af45d3b6e2d"]}, @nested={0xd2, 0x23, 0x0, 0x1, [@generic="5135bcb108476ad5a903e386d3165a0e130252090868243f31a0a2ff8827606ad45a32bb43201903681693596e99bf317ffe8605e4fbc419f9b43e775f67e29b681fc6c5fbfd112229de09c318648cacbbf20f919d6e759ed4dfd031605f88f221deeb878b3d9544d959f3c90221672d703261ade009389918d39b9cd22b02f263934ffa086e78dee54744bf13a604691ad38b71b7bfae13fe0fdaba663c82e95be046d8852bfac6305335e7d04f7540ac8f1f371c7a0cc999b13fcc58381426a727a972e465", @typed={0x6, 0x49, 0x0, 0x0, @str='(\x00'}]}, @generic="a2fa77560ddab0d281109b7805d600c6ad946605578a93607a2806a4efc405b68a9358ff2e3968091fc15ece47fe3411a382fa496fbfe54eb66be4708fa38d301812b3eebdc9b0b2d7ee025ff39d8ba451309c2b095b9e2ff0b38b19b4e84922c446d767c3d537f79d446911e3bb15181440ec9c5cd4b04270365b09bc0c2c7cbfe8e2be95470c8cccc2baefe05ebc", @generic="699a45b35e1adbe14c", @nested={0x12ba, 0x74, 0x0, 0x1, [@generic="0e237f90362128e73b1e61b554a40a51e80bd7175d792a436ec937ebc267802bd33cfe8f3f34e8230866d1b192402e27776a3e2e108d5385627a056cb807c25cf13d3fdf3b008c5a9b254216e2ce2b7c4a229ced1d4ad04c74d221fd53db1f9593499161c536d4b29fb70dc9311b8073049aad3f0f34fe8afaae7d707d554b250b7ce69cc2b1ebead20d3cdce1082608221e383b1c6a4752b685c9c9a1619269152b35a3797771e850c240db4247ef5b43db27e0e8bfbf00ec197c8b9e387b4af8048909def60992133e8000b40431823e5d2c0186a59ac83ebbaa", @generic="580eddf7ad46df5fed42e043d7cefbe4109f5075b00bf45a91e0e6e4ea9dddc3cd", @typed={0x4, 0x48}, @generic="c00ae7988aea5fa046a300fd1e736ad04ce61cfa413b82ee5cd256e3a6b57712c942b19d631f05198468eec4d3702bb6b2b4ff820869801c8883e232dceb68703cfb75d8f80f9c282cc6283479761e2585b99a7ad2648f8f5f1ad78b172667914d53f8a460d5118e18dc3af725126159f8309573706269e6", @generic="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", @typed={0x24, 0x1a, 0x0, 0x0, @str='$ppp0systemwlan0em0selfkeyring$\x00'}, @generic="4f8a33710fa03acc0832078678db5d242539964abc5abb7fda50e062437e379b65660075204de6bb8914825636d0f3e599dd35761a73c357b186a17af919ab549c92aafeebd42e8d352b494265ef339b5faeb0695c42d3aa5201bec7dd7dee5cfd27382b5707bd7f248ca6317f7d6a8bb472bfdbb858baaa9bbf8e659ba8aef8f3664f33dc3c3400c4462228c8fcc3680aa433e8be697922c58a082e2a27bcc244efb2f9f4110a9d3e454fbc6ffc044ffbdf1b0f6b10b7b4a35b5fd207fd3eb02b776303f7e5755b63692b244290d1a02de609c30022881845cd4e206173640f4b9f57ac417cc54216d0", @typed={0x14, 0x53, 0x0, 0x0, @str='\'vmnet1keyring-\x00'}, @generic="184113060c0b701f9308ebdffacb91d51a86af073f9aaf0b8d4b5a09"]}, @generic="f0a1db3c10d8a6ed4c5bdea924a8d6563007f1764fa29205222cd772f4ea47d848e3bac403ee15984398eaf53b08e93dbd9392b2bb7edf8abcdd715445ab4ebe939a7563ade4c8770ec99674bce2639bc2cbe76b3f7f6a9000c1a2c68d2c4acf744fa20658b91b10"]}, 0x14fc}, {&(0x7f0000006bc0)=ANY=[@ANYBLOB="300100004000000325bd7000fbdbdf250a90553bd86487b8404511f80256d0573039765fd834610678aa53afddec3a1dfe9626192fcf856f4d66c3c413744a52fa38de89f61d48564d5d5c99a200c298a7ef0300dfaa253a192c5697294b28b0e8abea00000000000000000000000000007200080000000000000000"], 0x130}, {&(0x7f0000000340)=ANY=[@ANYBLOB="280000002200000827bd7000fddbdf4ec0fd23002067a189e0b910c0ea8e895ff0e6026e6aef000008d672aeed18ae490cd43a3c344675c93f02b5e3dd404a4eee00f32defefbe20c9ff9855e3ac9a6680f7213e3114b8be1e3855f72412157ae48f3065d8b8dd486f42f7f0a08c3ae723a0bce1bd23b575fe27f47c8bbbf5fd4e24b97b7fc95824da3f7ab70c8dab66a069edbca5ee0047c0f8db14d1644d7127fd43a4a6c288a227a048"], 0x28}], 0x6, &(0x7f0000005800)=[@cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0x80, 0x2400c844}, 0x1) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 488.515275][ T26] audit: type=1804 audit(1579345933.886:214): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 [ 488.628107][ T26] audit: type=1804 audit(1579345933.896:215): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/167/bus" dev="sda1" ino=16609 res=1 11:12:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x81, 0x1000) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[&(0x7f0000000200)="64fb0c43d4dae14652143775cd1a1c31e96d6195648755d435ea32b5fdd15b21336fe33c34198285fe3fc014d528545836a7c8476ca40f2e1a35e99573777992a6221ed88c4b037c04ed12e394c9aee939aa58f069f9f0353f98d6a37565b3c95f4ef9c050e172d8f26b9d71867478a4c6c9cfa8c57248bc86aab7fac8a9e35374cb8960ddbfde10428fd23638033c6607f5622135060e7c74feb15a2a6d8d93bb94b9b214633975f989590e2c09915cf2b17311b4eff0b4c6b54f3626edf2bbf9ecbfa376380edf405946522c39cbfcdea14cd45ceb49bf3c05d235fb769a6add8a3647cc4fc9e185638ec15e52ff1fe7d2ef954a45b7466d30015e5879a351c4f1016590ef2e05ee7d0f02392f2d05a39becef259bff0252dc0683df9d54a9a84fc0932d1285fea3f0aa2bbad08bf3a06bc1dfe795b4dec2e4369fda2fa1879205b4ea14c34f54166d39d5e8ea74630b7a3447f6616f93e4da99189e4989ad0ed719a0ba287c6b424f94d50eb8c4e2bd587845e900c91ec26ea2eb9c8b8bf472f25b8d3fdf53e3c45c1d65e8e0582d604806c6952334a84f4444b62628c25c30078db704e2a074fd6b20f08c3e264bb1f3eab0d72778b35988b9bee6e5e7d9cc35a964b1402ad8d8667230f349a268ba21e03c2f312d0b2d6413c2d2f591f0d61d1cbe859040b3f6c6c17d3a80f6996b4b01c1250c9917d08656bb2e09f54bd7f3609bfcebaea503121e02a519727f6595554fd7b7ed71a9944097a460cf7637937fc83752c6be6c51ef941bfdf9ed4ca911593b1c1555298f57b1d10ff2964048b96f41e443e1d5392869babfb2c32be6dec95e86597d6dda8f1633cc9cd85e18bd0822d7a7c1a81c506632bb7b731b706d7e2710fdb255750491a66adaf852a194ac5f6b85c85d82837813f0e4c29c3a39c7314e0d6e19aef291dd6272ff4f7e209211989f38956227d97fd412fb0788f7f7b1f517e00dd30f96553f08869aabb43a914aff6b1ff7f940325f89aea39cdd6ed7f9fdb1828f613adad79c16344382bdfb0e416f9b009b4cc50e5c99e5393f51c5940db5b2a821ebebc713b12e24fe16255e8192a0299483c5bf66e7fd4a05158aec9f745b524845ef98d56c6b2439cb87e5962dcbefe76cd1705cad178468dbb3811202c33e86eb0ab568d67882f1dda904fe9bb9b751b604d12ed96930de04b4f92ab011d79781e35e1077b42d4b6eb98c8c48fa7ddcc84660d140744b08e3a321dafa9eae9f2f03866523c2dc039b91ad0fa0a200a0bf61325d7a6413807b42134a47ac94225da8b47876c751244e8a81a223dc5383db7b51c67e7984c616f4812c84132e7ac623098220d22129b21f2d605a2fa1a91d4f1a21c6de12f19d3b5b68c1d9c1e296cbbe54fba0ff291d4d2bddc10ea0f5491a3204fd5e3a0917e12fb691b4e0b6c174876b8da072f1443465090a21d298ad2a1213c5a518d5d53e9e12db1a5ae77b68ac99321ca7afb756b5c478dbcd833b8e9200908d4c6168fdb4f1c492deb2b961636033cb3343ed6bf43508c984bcc06b014fd422794416ea421ccf210f737fbff91d05cdc9cbdaef629f2dc230d93c9b56dd750d097c2225a7fe36dc3a15802915d709d4f3133f366adf464b8d42bb2dfc74b1cdd4353fb7a6033830fab272ce54c89ec31e82c26085f41f80d4fedc1c5a78a45da61b82d4e4fe10fd6b69b6a8182a2596368ce8ee9b43d4a16495ad819e7c9d9140a051c31ddfb6cf34324f882913736773bf5008c123c5445c39f686b081f036dac75a6c5b99f76f0031d2ac8d31547b7fcc1bb080684bf3dcba369686837315986aa2394c4616de3069eeec3298ae715953661f3d0931d2149a1adaf25a3dcefa1586b1536747073c075d132ba934d40f0a5c773f248cc42d2a77c8befc466c0a85088279a9e7b0ea70a8887fb37ef9209069746cd5bdf8b593393f26e01a50d3df56c78fd7fa800a75c9d470c2499a46d50308bcd4c925c3a6e6f085c3ee8e3ccec7c0486da385d1794d7096d3ec34beb1df43b642bcf082b0b643fc2e31cfa12236bb8a3506f61855e23a2cd22dd1a814d50f612cf98dda34af1779599e709e1a300ac896e18340939834e6c23e7994db31fed2be81b66ff39482e5a47787e7ee01645309cf5a66b9e1aaff2749425b2852dc0e7e754af2dcad24720caad84295c09cdc057b7a6ea2dd4018a756943f4b8ad099a676b7874eb8080df877c062f78ec287ffe2f3b5aa66d92feefb3cf71863b18f1475e8fd8622901728086edd27eb8c2dd1d86d7bef9eff344b9db95e4eba6e8b83caba49979bba9c455896cef5ce078747f018e030fce5d958fdc1ff8a350c8b07b2c70346045cd5015096fbafd3b7fa8166a7d77d084951b98f22d12a3abbf55136274292e44ec06bf56679d49c21608563cc630270af6102fcfb9a7c12995ab8f836d054f03818a2df374ecb3a7c0d970933a35a5dc5ef832d9284de509aea0fe16ec5fbc195a8988f12afd493d7010aef7b68e2c1e94b8468950aa94e8759728aa45942d63c23a484ef5ddefd36da1f7ce1b4a984c64e97a2e1652b835ce0b1a6df0f1c247cbcb5389635900ea7b04f75aaead7d6e21c8160ea80b3004fe54d433f2dab31165b2025d5035284be4b8684751acf32b0c26ca4873bf9d86cf479c4b427b1852582a7613623008806b4a162fa233783cd534ab6b2e935140c10b81a04b2fb0bef401626f8d7853b8973d30fefcf6159300509d560a0582613db874594d14f46c646972699a8daacb465dd022098ea1b64023e6415f6e24908f71d7e195f9c41968f7c52cfdbf143a270553802ab9a2961fa613d260c51d4f750d6bdcdda894be389de116a614b9f99078d95b3e7136c586995cd4dc48e18491abefa712c1e26be177d5309b84165d9bc5f69a2f93b7c030f50752d0332ed5e63d3ad561663c1fd20ec0841fb96354cf2c134e773a8500b3efb2fcd72668fe0653206e59e7e59bb86930947d981175358b4a7a9f90f56313da46280fd552e933dc1d17652c7f3a5bc6d45e71cfb96b47170f3335704f29dcdd93ca082add121ac2a58e948db4091c6ca0b19aa78f79b0bf3accfaf19d53add3b521d103b37ca9de8bb0c75f2f271580d78b3878be454e4b4f4c184704f7b11e45084e8624837372f974bb833a5b8a95bd5330bc5ead050e7355e4a5b821aee8d3d525a10fecfa9231d3c49b0f6fe624af739d5e009ce78b77d954be3d29c9d1800e2949c0795ea3eb5d846cc622dc35efb462261b078ce7d8a5e739ccd87c11378ee86cbdac091b5953af6ea7394a5ee87c3f83eaefaf56d0750b17329b0814d7f8c1f4c30205cd430fae3353ef9a4ce0edfa1053e90eb54ae6ec76067a43fef2913f1280871c6e25900eccf4c79d5c293bf5efa8c09b3baa28520d68e423d5f4eaa12a0587665174f024f7c81ae53057071309054817122d542c01fbd5c1326b58bccabc7dde94f32d97ae130305a0311567095fa8251215ed6dca8a3b4ddfd94b4ac5ff7d9cda9691b730a96d222721a73857068fcd9992abb833c01f802600dbf681fd1fb896aebe85a564ac331158515d8959971a2b912ec9ea2e0fb0837aa9891fcf4e555be4c4fe491a91934c3b2a9bc41506c72ed5f4ec26231646c2874f2296c69a7964c97e9fab4325d0314e254dfc96d4b15cab741d5204b6ef6e3149415cc35ffd0b23ae2dafc57b28e92b8e0d8bfe538aef288170d4f8da78e721cd36eb94f584ee5c5da8dee1f7f2193f9e2545701c5d03084523b68d25bc94bef97f14c59efdd6011b8e9e1d4ae2e45a04a4048ed4b379affc3aba088bfaa83d3e2d8bf71bab3770773c11adb44f01c6e8e0ce4fe209290f92be8d0126ed4bd840fab9e2838442298b19dd04e602122e4b1b043146949c0dcc12065a863ab5f139c205692152731837396c3cdc8c30d79b83760bbddee35399b022f9028ff843396501060375a5ec688df9113390981eb32237651d899497fd1bf340cbbfd84489a0b0579889c0a381781671adabf425b7fb7133db98eccabe1457dcf21eb41663c64dd98176f320700f1cb1eaeb9ee1cea751e9aaeb74d4785c5ad99f4ca8f754c7ce054d07763cacfe46f7d51068ab83f341f321ed5d94439765b75e0929a817fad2f17937a656a7b3daffd784a510ee7d5a0464e5ce5b1c22c129155fcadd2c09671684a1f6894e2f8e9992c8eb86374e816505c0e61e6cfd429be1b331a2f60b71555c502eb91e5fb354ae730677ce20a37a7dbf2e6a8b8872c128bbf70ccf65208ba7a8099c32b3da113fc691bd1432d75d80437fc744392541fe0ee78994563ff3da42c210fb37c3260eb2c10daa32b4b92b259b934a2318345f0369d3597921b4f1e810365f2db56062f2e17f8cd0b74015221c7c5bb5383601d3bcd01c49e890ec6237ab506379040013671563ed2fe4f3ad1811fa5a3d2c727e66386aee76904f06c039d2c176ec6ceb87c38328dcc4dc7bdd6b28c3115d3ea797a7de2ab9ec7c86a6dc23feea9b978f475ee60481a7b2d5d32a7409c891df35b5fe524b40b9f160197c78bbf83c520e7b48eaa807caa173ca880a1328591289faa8cd12e376e9f42d43b74bdf3a8e0ae2dfc84b7b8da25f5873dcd4ecd9014321fff6e2f6327853c039f91995cda40d060ba0d3f3f53f214805c6fcbc561be7f3cfea9039e2f8c7c3f6f365e6d9810fc5d07a6296220cf35264df8848fa134a8b01f85415383d7d4f16ad2727fe367131b4fe5dba78498df5dc4855784b9b28f41b419249e8a2984a53b5c7f204b232ab48539245a66fdfc5d16b736c8b93f856907a74e3336aa99970aff36b60bd0a8d196aa2438419e39ebd55d61242ac353001744370654ead1f6ed34f44bf0932cd4fa35f6e8575595164e08bcbdcba4ba5bb2533ee032ea606533990cba37d6e2784a5a434fba5764481d8c3859788faf5d010a8bd44c217b06776411afd798b358e9c0f161554478860db2d033d43b7a2faca9b4cf4c558b60037a7c4b46db654107d50e75b1846aedc6cba42bb1d7eea321517fa88a735aa962545965f2f077e2b1e6bf54fb3eed630f44601c88cc2a2cbdbebb7e2722bac60b482dcf77d19c25922abde92f75bd7caaf2fe840ba2d7e012a1ee95210532a28902276b8023ce6085e28efda2c125f9e9cdb09f013a9bc4fae83962ff931e0b1193ea96b4e5505f0d32f3e1e58f64ce393c827ca7426ede6929c57457c3a19edeb1b3675458db4bce23b9395976b197b241b754682b602e9999be04ae7bd04a1d8699fdbf0115119985528e1b036c7f0ad66bd3e21e3a682631c3473f265a027535fbfe27300ce88f8fd7d89b0af82d93a87ae5995012303a955eb82ac0b13bc5fb5c89abc8b16990f4c42ffcaa8732a09f03993fa13a4a66bce0ae8cb31c3178854f694b998b7d4da1ce29bfc61bda4b94daea8d919b03b4e01e2df33d1329d7cc3709fc37f926b0757796a41daaf8935a16bee3aaf19b93c18de56f6b795c0e434ed9c5dc0392ed51e1428736858e1255c8892a005fcc098980be891e01952f473b49affe97a26a234b593234b96c0395228bcb5d9570e54f8676b8ba81cfa0acbc66e3bb5dbdc344d0490d3621652435356d1ae39a9065f3c14362dd1becf43162037793e0e568bdf32402abd8e701534f523d446b1db9e8b88839b59a767f418d76a48af0d1134b6a05e57912305fd65a25c27a31242cc7962cc26d00e66188f46a78c6250d66307db60ebfd7ff4482b9272e662363bc", &(0x7f0000000040)="195d0fbbccac5a3b70211984a5a90b9a05f1fb39beb0dec7f9fbf68d87d8751a4b3acc923e5c44b28240e984c4a54174726cc421dca7000b457766a6d06544c3eb2f7dad730fa55d9948ecf970a2373f6ad9583f28b26fffb0b47f24e46df96bb5e1dfe7e36bbaba79a1e210b3c9dd7cfc778110d99064c416da2a556125a2727cecfac4b53165995d6782289aa339b5eb76372bc19f30c708bb9b6f5fb2daf14e3fd9aa684ca1b690e9441f72f4f0630587d605baa5d1633d1357dacea120f2b721b7ea7aebea03378da4794facca9e179d83d4b302bd35b9136859fad8c0c1c88718f0e1123eae7e9dc60047e500efa27305b32718"], 0x4}) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 488.676023][ T26] audit: type=1804 audit(1579345934.176:216): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/168/bus" dev="sda1" ino=16817 res=1 11:12:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x9, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0xffffffff}, 0x40, 0x1, 0x172d, 0x2, 0x1a, 'syz0\x00', "98f0ae3153815b42639808ce4ff9d6c4310f09a365c156f6c62b135efa2ffbdc", "b54a7474260190b7ee1524f3fba10c53a1193ed351e7e12301d351a284d4e200", [{0x5, 0x3, {0x0, 0x4}}, {0x3, 0x9, {0x3, 0x5}}, {0x8000, 0x7, {0x0, 0x5a84be2e}}, {0x5, 0x1000, {0x2, 0xe24f}}, {0x9, 0x2, {0x0, 0xf}}, {0xb0, 0x8, {0x2, 0x7}}, {0x7, 0x3, {0x2, 0x9}}, {0x81, 0xc5, {0x0, 0x10000}}, {0x7ff, 0xfb5c, {0xb73e692f6934b215, 0x1}}, {0x0, 0x0, {0x5, 0x7}}, {0x7, 0x5, {0x3, 0x6}}, {0x0, 0x1, {0x3, 0x7}}, {0x9, 0x1, {0x1, 0x7fffffff}}, {0x0, 0x3670, {0x0, 0xfffffffd}}, {0x7fff, 0x67, {0x3, 0x7}}, {0x6, 0x800, {0x0, 0x40}}, {0x4, 0x1000, {0x3, 0x2}}, {0x9b7, 0x8, {0x1, 0x9}}, {0x7, 0x6, {0x2, 0x1}}, {0x8d3d, 0x3ff, {0x3, 0xff}}, {0xfc, 0x0, {0x1, 0x8}}, {0xfffd, 0x2, {0x0, 0x5}}, {0xfffa, 0xff20, {0x5, 0x2}}, {0x5, 0x2, {0x1, 0xe3}}, {0x8, 0xffff, {0x3, 0x1}}, {0x3ff, 0x7, {0x1, 0x3}}, {0x443, 0x1, {0x0, 0x9}}, {0x3ff, 0x1ff, {0x0, 0x9}}, {0x2a, 0x0, {0x2, 0xa295}}, {0x21, 0x9, {0x1, 0x6}}, {0xff7f, 0x0, {0x0, 0x9}}, {0x4, 0x7, {0x1, 0x200}}, {0x7, 0x7fff, {0x2, 0x7fffffff}}, {0x3, 0x6, {0x2, 0x7}}, {0xdd5, 0x6, {0x3, 0x7fffffff}}, {0x7ff, 0x9, {0x0, 0xfffffffd}}, {0x9, 0x7, {0x0, 0x7}}, {0x3, 0x7f, {0x1, 0xfffffff8}}, {0x3, 0x3, {0x1, 0xdc}}, {0x3, 0x1f, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffbff}, 0x20, 0x6b, 0x9, 0x3, 0x10, 'syz0\x00', "3f086a52b865713843426e8c7284edd8418acb4eb627cce2da106b65f5db3720", "7577d395713de37eba4e9ace3664b4a45100d32a028f703c91531fa59562227b", [{0x6, 0x800, {0x0, 0x1}}, {0x7, 0x3f, {0x1, 0xffff}}, {0x8, 0x4, {0x2, 0x3ff}}, {0x5, 0x70, {0x0, 0x6}}, {0x7, 0x2, {0x2, 0x1}}, {0xc47, 0x4, {0x0, 0x8}}, {0x0, 0x6, {0x0, 0x7f}}, {0xfffe, 0x100, {0x1, 0x8}}, {0x1, 0x7ff, {0x3, 0x400}}, {0xaace, 0x4, {0x36d8f59ffe71e259, 0x959}}, {0x8, 0x7, {0x1}}, {0x7f, 0x9, {0x2, 0x4}}, {0x56f, 0xe6d8, {0x17865501ec18ff2d, 0x101}}, {0x2, 0xd3, {0x2, 0x10000}}, {0x3ff, 0x7f, {0x0, 0x20}}, {0x1f, 0x0, {0x3, 0x8}}, {0x7ff, 0x3f, {0x3, 0x1}}, {0x1, 0x8001, {0x0, 0x8}}, {0x0, 0x2, {0x1, 0x7}}, {0x2, 0x81, {0x3, 0x4}}, {0x7, 0xffca, {0x3, 0x4}}, {0x2, 0x120, {0x1}}, {0x8001, 0x1000, {0x1, 0xe67a}}, {0xfff, 0x7, {0x0, 0x3}}, {0x81, 0x8001, {0x1, 0x7ff}}, {0x8001, 0x400, {0x2, 0x4}}, {0x2, 0xff0c, {0x2, 0x2}}, {0x0, 0x7f, {0x10879911dbfaaf16, 0x7fffffff}}, {0x6, 0x7fff, {0x3, 0xc9a}}, {0x800, 0x2, {0x1, 0xffff}}, {0x7, 0x8, {0x1, 0x3}}, {0xb5e, 0xf46f, {0xf67898c6abfd2c6b, 0x6}}, {0xba0c, 0x4, {0x3, 0xb2}}, {0x540, 0xfff7, {0x0, 0x40}}, {0x7, 0x7, {0x1, 0x758}}, {0x4b0, 0xfffd, {0x1, 0x9}}, {0x9, 0x7, {0x1, 0x8}}, {0xff, 0xf0b1, {0x0, 0x1}}, {0x20, 0x4, {0x0, 0xc8c}}, {0x3, 0x0, {0x1, 0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x49}]}, 0x48}, 0x1, 0x0, 0x0, 0x24001800}, 0x24000080) process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r1, 0x0, 0xe, &(0x7f0000000080)='timerslack_ns\x00', 0xffffffffffffffff}, 0x30) r7 = syz_open_procfs(r6, &(0x7f0000000040)='projid_map\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28}, {0x6}]}, 0x10) sendmmsg(r8, &(0x7f0000001e00), 0x1, 0x0) lseek(r7, 0x20400000, 0x0) [ 488.739215][ T26] audit: type=1804 audit(1579345934.176:217): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/168/bus" dev="sda1" ino=16817 res=1 [ 489.999520][ C0] net_ratelimit: 18 callbacks suppressed [ 489.999530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.011219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.079451][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.085256][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.159448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.165222][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.319469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.325346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.959470][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.965563][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:16 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x98242, 0x40) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) fanotify_mark(r4, 0x1, 0x1, r1, &(0x7f0000000040)='./file0\x00') 11:12:16 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) 11:12:16 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002021}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x84011) lseek(0xffffffffffffffff, 0x20400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0xb5, 0x0, 0x3}) lseek(r2, 0x20400000, 0x0) 11:12:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x3ad4, 0x8, [{0x8, 0x1}, {0xb}, {0x6, 0x1}, {0x9, 0x1}, {0xb}, {0xb}, {0x3}, {0x5, 0x1}]}) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) accept$nfc_llcp(r5, 0x0, &(0x7f0000000040)) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) fcntl$getflags(r5, 0x3) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x9, @win={{0xffffd689, 0x1, 0x8, 0x8000}, 0x9, 0x5, &(0x7f0000000040)={{0x4, 0x10001, 0x7ff, 0x7}}, 0x2, &(0x7f0000000080)="75488d9707fce142170ea005f8f5559a98a7d035f15e6a0e91e689b0dcc78b8700a3449eea52eebb4d2bb7ae374e3b8d6f32375dca734243a496c607e283f6ab0fb00ab230795f2b0471f0fa47aa2254a59db705b1018150efdef8709f349e2c5623a758bb9b425e6e2d7915807555ee5b87a87481b8cb5140b6b6a43acded2216a90c6cb6c79b56482ce970ca7e6e7278a50416dd2845df3ceeb03478cc18d8a65dc1a463e0758c93f3b8f395e64329984e05622747eeaa3c", 0xf8}}) lseek(r3, 0x20400000, 0x0) 11:12:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:20 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000004c0)="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") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, r3, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3329, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl(r5, 0x3, &(0x7f0000000080)="7b77e63c9e3ebd3c9db1edbb642b0e6db0552f62c0b253c4d694f3071a319f48ba658f552940dc3172b1de317af1488790b20d6630fae0bb157a48a2c96b4e7ef3") r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, 0x0, 0x40d09) accept$ax25(r3, 0x0, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:20 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 494.575934][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 494.576076][ T26] audit: type=1804 audit(1579345940.166:247): pid=10964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/172/bus" dev="sda1" ino=17340 res=1 11:12:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10802082}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x280018c0) lseek(r2, 0x20400000, 0x0) 11:12:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000d7b000/0x2000)=nil, 0x2000, 0xc, 0x50, 0xffffffffffffffff, 0x2a1b7000) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000000)=""/136) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 494.690671][ T26] audit: type=1804 audit(1579345940.216:248): pid=10964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/172/bus" dev="sda1" ino=17340 res=1 11:12:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 494.845997][ T26] audit: type=1804 audit(1579345940.436:249): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/173/bus" dev="sda1" ino=17343 res=1 11:12:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 494.887577][ T26] audit: type=1804 audit(1579345940.466:250): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/173/bus" dev="sda1" ino=17343 res=1 11:12:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x101, &(0x7f0000000000)=""/11) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 495.119461][ C1] net_ratelimit: 22 callbacks suppressed [ 495.119471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 495.131091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 495.173792][T10996] ptrace attach of "/root/syz-executor.5"[10995] was attempted by "/root/syz-executor.5"[10996] [ 495.839492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.845293][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.239491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.245416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.319462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.325240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.399485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.405356][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:23 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) lseek(r2, 0x20400000, 0x0) 11:12:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:23 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 497.710776][T11012] ptrace attach of "/root/syz-executor.5"[11011] was attempted by "/root/syz-executor.5"[11012] 11:12:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 497.737924][ T26] audit: type=1804 audit(1579345943.326:251): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/148/bus" dev="sda1" ino=17356 res=1 11:12:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x3) 11:12:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x5, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = getpid() process_vm_readv(r3, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@empty, @rand_addr="005a9140340a17392b6ecb113abffacb", @mcast1, 0x5, 0xb781, 0xfff8, 0x300, 0xdca, 0x80000000, r5}) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 497.893441][ T26] audit: type=1804 audit(1579345943.326:252): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/148/bus" dev="sda1" ino=17356 res=1 11:12:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 497.935306][T11024] ptrace attach of "/root/syz-executor.5"[11023] was attempted by "/root/syz-executor.5"[11024] 11:12:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) fstat(r2, &(0x7f0000000280)) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x8, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) [ 498.041111][ T26] audit: type=1804 audit(1579345943.636:253): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/176/bus" dev="sda1" ino=17355 res=1 [ 498.116963][ T26] audit: type=1804 audit(1579345943.646:254): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/176/bus" dev="sda1" ino=17355 res=1 [ 498.187819][ T26] audit: type=1804 audit(1579345943.776:255): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/150/bus" dev="sda1" ino=17121 res=1 [ 498.236660][ T26] audit: type=1804 audit(1579345943.816:256): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/150/bus" dev="sda1" ino=17121 res=1 [ 500.399511][ C0] net_ratelimit: 18 callbacks suppressed [ 500.399520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.411268][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 500.479496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.485437][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.569483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.575596][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="1386f6a50c074c576f0e000000000000f05de00d015b4fa236be7e1af25e15fc1e7739b0cda3c389061b673b43d7568140d0b4201f36ef4da3f5260fffb8a9d28c4fee50900ac1e0913bb6683af2dd9d4e8813afca550474f9c134db0105c8891c29214a7755b0d0ac362c09559a997ca202d67fccccdacbad85b1b0fd1234c6cecdb672c0b25871400b") ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6834010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x20008010) 11:12:26 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) [ 500.729446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.735249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 500.857656][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 500.857677][ T26] audit: type=1804 audit(1579345946.446:261): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/151/bus" dev="sda1" ino=17373 res=1 11:12:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x45a200, 0x20) rt_sigsuspend(&(0x7f0000000080)={0x40}, 0x8) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x1000, 0x2, 0x4, 0x10, 0x3, {0x0, 0x2710}, {0x2, 0xc, 0x7, 0x1, 0x7, 0x2, "a64b4ece"}, 0x1ff, 0x0, @offset=0x9, 0xff}) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$nfc_llcp(r1, &(0x7f0000000280), &(0x7f00000001c0)=0x60) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3, 0x6, 0x8, 0x3}, {0x3, 0x7f, 0x7f, 0x2705}, {0x3f, 0x8, 0x7f, 0xffff}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000140)={{0x0, 0x0, @descriptor="3bee7bc9543b1684"}}) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:12:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 500.899328][ T26] audit: type=1804 audit(1579345946.466:262): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/151/bus" dev="sda1" ino=17373 res=1 11:12:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) keyctl$session_to_parent(0x12) 11:12:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="09733e8c4c970767d50a8f7f4a511f3f48889753f15cda83a17694abf8dccbe41285a771ac7db742cc4f1061de7d266a8301679b20eca0081704da1eb18af6c71e245474395ac3a4f8996267ae10a66fb3708fd9cd20e911fe3351d5bafb0f2904e8c8012a46ac3dc118760f1a4905f330fe98fe72c321505598b02d1ba3ecc5e8e6c2ef8fb3410ca36f98ccb09d92af40617b0898159fc80bd7c8c2a819a3eb9721413142909f06f176") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="95000000d5fabf595efe23c06d26c6d5ea04763aa125e0cbeef6cb8076ad8c40dd81571005dfec70c03b21bb3b2757e76d372a2b800006d39556e3e524d4231d1c6b93eb69479839042fb2efac989630c64ca8c3472491b0882b739ba8cf3bbe0460e9bbacce373dc4198037116c20400ee82bb1ff2732e29b918184db964df511f30998d65b53453b10cc4c7c898b07dc48d7f38f58339a8c826b53f7ae929baedb6e49bfeee1cceb949024ba01466044939260384c332627"], &(0x7f00000000c0)=0xbd) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 501.359452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.365513][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:29 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x5, 0x2, &(0x7f0000d14ffc)="13f97fffff", 0xfffffffffffffe1e) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x4, {0x7f, 0x8, 0x9, 0x6, 0x1, 0x1}, 0x7, 0xff}, @ipx={0x4, 0xf26, 0x100, "1cdde236a4d3", 0x6}, @l2tp={0x2, 0x0, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x401}) 11:12:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:29 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x2, 0x7, 0x3, 0x3}, {0x0, 0x3, 0x5, 0x80000001}, {0x1f, 0x1f, 0xa5, 0x5}, {0xc6af, 0x40, 0x4, 0x100}, {0x7, 0x3, 0x1f, 0x8}, {0x2c, 0x0, 0x0, 0x20}, {0xef5, 0x80, 0x1, 0x3ff}]}) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) [ 503.926580][ T26] audit: type=1804 audit(1579345949.516:263): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 [ 503.967655][ T26] audit: type=1804 audit(1579345949.546:264): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/153/bus" dev="sda1" ino=17383 res=1 11:12:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 504.003888][ T26] audit: type=1804 audit(1579345949.546:265): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 11:12:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x3) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 504.107383][ T26] audit: type=1804 audit(1579345949.556:266): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 [ 504.178330][ T26] audit: type=1804 audit(1579345949.566:267): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/153/bus" dev="sda1" ino=17383 res=1 11:12:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 504.239273][ T26] audit: type=1804 audit(1579345949.576:268): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 11:12:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = dup(r1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0xc52931ccae10cef4, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10040000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) [ 504.301614][ T26] audit: type=1804 audit(1579345949.576:269): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 [ 504.426379][ T26] audit: type=1804 audit(1579345949.586:270): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/180/bus" dev="sda1" ino=17381 res=1 [ 505.519463][ C1] net_ratelimit: 22 callbacks suppressed [ 505.519473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.531120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.239449][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 506.245329][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 506.639469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 506.645360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 506.719447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.725358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.799453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.805286][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:32 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x81) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000040)=0xa1) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @descriptor="1dd863766322a894"}}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 507.105515][ T26] audit: type=1804 audit(1579345952.696:271): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 11:12:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 507.193553][ T26] audit: type=1804 audit(1579345952.726:272): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 11:12:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000140)=0x4d) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf2d1400000008003b0b565016e6af4e03000110e6c144a21df6ae6a515ab2c74c703d5290d7ae5753d62f649d1346f234e388e9e61219da6fe5f245dcf12f07727af5d797ca323ac433b9c3d71011c534a60413ab4c99afda71bfa74aab670b10ca72d8f3af62a90346dd9066c4907a1f2f1edd0bb57a064aed79a85ce9e36f75f5ad9df4f6d7f3b0055d21f3fabbee16cdcb0640c564262fa6c2937774", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2004044}, 0x20000000) lseek(r2, 0x20400000, 0x0) [ 507.268248][ T26] audit: type=1804 audit(1579345952.736:273): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 [ 507.361691][ T26] audit: type=1804 audit(1579345952.756:274): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 [ 507.419514][ T26] audit: type=1804 audit(1579345952.756:275): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 11:12:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:33 executing program 1: socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) sendfile(r1, r2, 0x0, 0x40d09) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 507.501720][ T26] audit: type=1804 audit(1579345952.786:276): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 [ 507.616482][ T26] audit: type=1804 audit(1579345952.786:277): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 11:12:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 507.649632][ T26] audit: type=1804 audit(1579345952.796:278): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 [ 507.680610][ T26] audit: type=1804 audit(1579345952.806:279): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 [ 507.710259][ T26] audit: type=1804 audit(1579345952.806:280): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/156/bus" dev="sda1" ino=17405 res=1 11:12:35 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x11, 0xffffffffffffffff, 0xe9d34000) prctl$PR_SVE_SET_VL(0x32, 0xa6a4) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:35 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:35 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) sendto$rose(r1, &(0x7f0000000000)="c3a2bac80ac2274a10a910a659a5a9e19666fae2062b73bef3ef63b64a0110d2162e2e199eadf82075bd3a598dd81891a87a6aae65734e30abe6c4e142d2c4a8f4f430197799666c3646ad7c8e7dde188fb959ffc7acfbef24d7384def58ebe525d2b1d2f31c95d5999e24c201486233fddf78c3386c45d5a2cc43262a06cd6930a2c3", 0x83, 0x8080, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) 11:12:35 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:35 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a56e2a8837778b28c31c1e73f23570eb35ac940bfc625db2a2c0c5c682a4ee89a78caf7f87de429f5c1c87f84fac0e8788810f312bd5a7", 0x37}, {&(0x7f0000000040)="fa6f501ebf8f081bb3c4e2c2", 0xc}], 0x2, &(0x7f00000000c0)="c8d0451197d272ad800e37a497ce678efa98d5716ce4f69915dd28371d", 0x1d, 0x4000000}, 0x100410d5) 11:12:36 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x151, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xb, 0x40}, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7c}, [@map_val={0x18, 0xac8f5541992bc7eb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @generic={0xff, 0x5, 0x2, 0x101, 0x8}]}, &(0x7f0000000640)='syzkaller\x00', 0x56, 0x89, &(0x7f0000000680)=""/137, 0x0, 0x3, [], 0x0, 0xa, r4, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x0, 0x1f}, 0x10, r5}, 0x78) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xd3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRESOCT=r6, @ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="0d392d9cb63eb08edc682a38f0ffffff788e6e13636bedb69c00000000000000180000000000000000000000060000003a3cc45a6908b0995d9cf35acd146e40d2a2ed49af451bbdaf1417d3266aea4e375321309061ea1381de6dbea26fb60c8d7ab0618ba6825ecd2cd78ff9bdf5b9793aa269b97fdeb3c55b29113517bb68cc2d29880876b77334a6467745d9b276d3b0a467876eae18e47cdc08"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xbf, &(0x7f0000000480)=""/191, 0x0, 0x10, [], 0x0, 0x14, r3, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x3}, 0x10, r5, r7}, 0x78) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0xd3945162bfe18f7, 0x0) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f00000009c0)=0x7, 0x4) write$apparmor_exec(r9, &(0x7f00000007c0)={'stack ', '\x00'}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="8d10e23603000020ee3aaf3fd2a4ae6c9692ebdc3ec19ff8f1697fea818ffd7360593e678aaacdd3ede4df174aaa5794310c1e88e435762185592bedd651677c51911a8f2cdd72d27444f297eff90746bb8178c4a04fd3214b82c40af6a26a1ee154f58e0fc3aa91799cd85dba68ef358fa08c2504798f2fbdda9cd6c72fab3288abd9"], &(0x7f0000000040)='GPL\x00', 0x7000000, 0x7d, &(0x7f0000000080)=""/125, 0xbfd0566d83e45b8, 0x2, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x800, 0x8}, 0x10, r5, r8}, 0x78) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000880)=0xff, &(0x7f00000008c0)=0x4) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 510.799451][ C0] net_ratelimit: 18 callbacks suppressed [ 510.799461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 510.811145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 510.879462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.885404][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 510.959456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.965296][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.119487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.125262][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.759470][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.765408][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:38 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='net/netstat\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) 11:12:38 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:38 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:38 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:38 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 513.322397][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 513.322472][ T26] audit: type=1804 audit(1579345958.916:296): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/161/bus" dev="sda1" ino=17445 res=1 11:12:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100c0040}, 0x4000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 513.442788][ T26] audit: type=1804 audit(1579345958.976:297): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/161/bus" dev="sda1" ino=17445 res=1 11:12:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='timerslack_ns\x00', 0x0, r5) sendfile(r2, r3, 0x0, 0x40d09) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x1, 0x20, 0x93, 0x81, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x961, 0xfcca61e395890026, @perf_bp, 0x10000, 0x2, 0x1f, 0xbd24137a321bd425, 0x3f, 0x8, 0x67}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) [ 513.632942][ T26] audit: type=1804 audit(1579345959.226:298): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 [ 513.706234][ T26] audit: type=1804 audit(1579345959.226:299): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 [ 513.752247][ T26] audit: type=1804 audit(1579345959.236:300): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 [ 513.791480][ T26] audit: type=1804 audit(1579345959.256:301): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 11:12:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) bind$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r7, 0x0, 0x40d09) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}) sendfile(r2, r3, 0x0, 0x40d09) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) fstat(r8, &(0x7f0000000280)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000040)) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0xcc, 0x1, "5ca22c3f7d663d1ee3b3cc28a4ff6d0889a3a1b1f65e635e6b97b83fecf8c6afb57d6b9f9046633314bbe4d5c06c3f841d4571e4ad0f2adc7efca9278ad9d3694efd62bebd6504a69af27872e5fc4c1142d82832ae35fb9d8c1ef07cc84147f2b892eb53d4cac19bc9931b8ece74e1d9b0711eb5906a987b0d987064eaa57a6993aad5f45fa941b83ab2715236e1cd491a6aed8e801ef2f9258a72e69a36f6462de7ba8e2bd16a24f43f64ec2a57259ebc03939514605ef5d27648728425e427c9ab6191"}, 0x101000) [ 513.852908][ T26] audit: type=1804 audit(1579345959.256:302): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 [ 513.922470][ T26] audit: type=1804 audit(1579345959.266:303): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/162/bus" dev="sda1" ino=17449 res=1 11:12:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) [ 514.019574][ T26] audit: type=1804 audit(1579345959.556:304): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/190/bus" dev="sda1" ino=17440 res=1 11:12:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r0, 0x20400000, 0x0) [ 514.066469][ T26] audit: type=1804 audit(1579345959.556:305): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/190/bus" dev="sda1" ino=17440 res=1 11:12:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ae9000/0x1000)=nil, 0x1000, 0x8, 0x6778d139ab3583f6, r2, 0x3) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e9000/0x1000)=nil, 0x1000}, 0x3}) [ 515.919453][ C1] net_ratelimit: 22 callbacks suppressed [ 515.919461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 515.931180][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e688a91e368942e47d23c4fad8797b28ae954ab703b50df07481d62514fb4e0a1ede84b24022306fa10a98318e2eed41382a4ce0bd758716bccb21917ec2b7fbc1d053445bd9b2b135ed78893be38b08dfaf680274948abc82d1fa88132ee2cdf9cbe4a2e39a64a00086ea8b3e9bdd88118c3b808d8", 0x41) 11:12:41 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x2008c040) lseek(r2, 0x20400000, 0x0) 11:12:41 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:41 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000000)=0x1f) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 516.639440][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 516.645240][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) 11:12:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r2}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'tunl0\x00', 0x200}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x280044, 0x0) recvfrom$rxrpc(r7, &(0x7f00000000c0)=""/5, 0x5, 0x42, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x401, 0x0, @ipv4={[], [], @rand_addr=0x400}, 0x80}}, 0x24) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) r10 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r11 = open(&(0x7f0000000480)='./bus\x00', 0x10000, 0x4) lseek(r10, 0x0, 0x2) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000280)) sendfile(r10, r11, 0x0, 0x40d09) ioctl$DRM_IOCTL_ADD_BUFS(r11, 0xc0206416, &(0x7f0000000180)={0xcb2, 0x6, 0x7, 0x8000, 0xd, 0x4}) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f00000001c0), 0x4) setsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000140)=0x4, 0x4) 11:12:42 executing program 1: r0 = socket(0x22, 0x80002, 0x0) ioctl(r0, 0x3, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x8010, 0xffffffffffffffff, 0xe8150000) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) r6 = dup2(r4, 0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffffffffffffffff}, 0x6) sendfile(r2, r3, 0x0, 0x40d09) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) r9 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r10 = open(&(0x7f0000000480)='./bus\x00', 0x2b0e42, 0xe7) lseek(r9, 0x0, 0x2) sendfile(r9, r10, 0x0, 0x40d09) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r11, 0x4008ae48, &(0x7f0000000300)=0xd000) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x4) sendfile(r7, r8, 0x0, 0x40d09) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc9f3d43", @ANYRES16=r12, @ANYBLOB="200a2abd7000fedbdf25150000000a000600aaaaaaaaaabb00000c00990002000000ffffff0600ffffffffffff00000a001a00aaaa0800aaaa00000a000600aaaaaaaaaaaa0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x22048890}, 0x80) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) [ 517.039469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.045305][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) [ 517.119442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 517.125239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 517.199440][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 517.205420][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:42 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000040)) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10e, 0x0, &(0x7f0000d14ffc)="02f9ffffff", 0xffffffffffffff8b) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getpeername(r4, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 11:12:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x0, {0x7f, 0x7, 0xff, 0x5}, {0x0, 0x0, 0x4, 0x5}, {0x35, 0x9}}) lseek(r0, 0x20400000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x38b001) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000000c0)={0x3, 0x200, 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x11, &(0x7f0000000040)=""/17, 0x3e, &(0x7f0000000140)=""/62}) 11:12:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, 0x0, 0x0) 11:12:43 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:43 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) mmap(&(0x7f0000aeb000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0x604ae000) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000000)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x6a0900, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000005c0)) lseek(r2, 0x20400000, 0x2) [ 519.517752][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 519.517773][ T26] audit: type=1804 audit(1579345965.106:346): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/168/bus" dev="sda1" ino=16625 res=1 [ 519.555515][ T26] audit: type=1804 audit(1579345965.146:347): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/168/bus" dev="sda1" ino=16625 res=1 11:12:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) write$vhost_msg_v2(r2, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/61, 0x3d, &(0x7f0000000040)=""/122, 0x0, 0x4}}, 0x48) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:45 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:45 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf2ba638662d21bf0}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, [{0x5}, {0x5, 0x3, 0xe07c93cfcc32ef69}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, [{0x54, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54560a4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d4af387}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dfa2829}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63d235b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x2c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a07949}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x6, 0x6, 0x91}]}, {0x2c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x103acb5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x508525b0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe05bac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dd6ee94}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262ca8c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x18, 0x5, 0x23db04a}]}, {0x3c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x413b769b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b4b442}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3569e52f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x2c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc07a23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2112f864}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, [{0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2f8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 11:12:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3d) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 520.164600][ T26] audit: type=1804 audit(1579345965.756:348): pid=11341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/196/bus" dev="sda1" ino=16801 res=1 11:12:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 520.248317][ T26] audit: type=1804 audit(1579345965.806:349): pid=11341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/196/bus" dev="sda1" ino=16801 res=1 11:12:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000634000/0x1000)=nil, 0x1000, 0xac177a08a4e895db, 0x30, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11a1d66ab775170f80165317848953150acbd9d66d164d0ced964a55acf363374190af6003c73eafd8c9ce9e5754b68e463b1c2cfae0119ce87e68", 0x74) 11:12:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40201d4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x20, 0x20, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:12:46 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 520.481105][ T26] audit: type=1804 audit(1579345966.076:350): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/171/bus" dev="sda1" ino=16962 res=1 [ 520.547041][ T26] audit: type=1804 audit(1579345966.116:351): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/171/bus" dev="sda1" ino=16962 res=1 [ 521.199466][ C0] net_ratelimit: 18 callbacks suppressed [ 521.199475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 521.211010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 521.279452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.285422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.359468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.365251][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.529486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 521.535395][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 522.159448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 522.165296][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 11:12:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1000001, 0x4010, r1, 0xffffd000) mmap(&(0x7f0000188000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:48 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2802) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x1, 0x101900) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2becfc1c66aa568f}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) inotify_init() 11:12:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:48 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:12:48 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 523.299156][ T26] audit: type=1804 audit(1579345968.886:352): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/198/bus" dev="sda1" ino=17105 res=1 11:12:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000140)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)="eba6dcb2ff4769d49c8d13ec6b915bb04a66890e88bfe15e49876e2b354fec165e7000ed44d50e0b52f912ecf3821dece2974264292ee54cbe788aadc9a80f9ed5555b057e17051d7f9b4ace890b109a1e1875e33d441df9dfe78946f79e0669b469d5f9b91dd35dd5c5429c4c6f60c91762f92f9bf44f08515d4004", 0x7c, r6}, 0x68) lseek(r4, 0x20400000, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) 11:12:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x13e) [ 523.375124][ T26] audit: type=1804 audit(1579345968.926:353): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/198/bus" dev="sda1" ino=17105 res=1 11:12:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a486262bf597ce48fb82d8ee94645c18f402dcc16906d9d14646d3dbfc11", 0x3a) [ 523.509482][ T26] audit: type=1804 audit(1579345969.096:354): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/173/bus" dev="sda1" ino=17105 res=1 11:12:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/nf_conntrack\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) [ 523.589483][ T26] audit: type=1804 audit(1579345969.106:355): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/173/bus" dev="sda1" ino=17105 res=1 11:12:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="3adbb94226735bd76970718dafb572e5d57ca1d02075331aba0033826b08c4297c8aba2500f4be85ced6ed774b72d39b0037867e6f5e364bcf33b5a2f0690a673250d3d05111db7aeefd22d9334fa762e588a248c963c3207451e0c84cd5a3fe3b6c0f484b1d2ecda95ea2d3f1b6b802079e4dc6829192e7f3e05289a5a28ba2bc989d9fb3aeeed87478b31991d64913322b834dab888f1ac721ab83fcb3485d553901a3d753c42e4492d8dd2831bd511da7b829cfabdd3b47f0e248fa7b35c3") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @identifier="5a8bfb7688cf25c59e902f6ea4379249"}}) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x141000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x4814, 0x5, 0xfffff736, 0x9, 0x5, 0x45}) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) recvmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000440)=""/11, 0xb}, 0x40000001) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, 0x0, 0x40d09) bind(r3, &(0x7f0000000140)=@isdn={0x22, 0x0, 0x1f, 0xff, 0x3}, 0x80) 11:12:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8840002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@timestamp], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) lseek(0xffffffffffffffff, 0x20400000, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) ioctl$VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000180)={0x18, 0xeb006e97686fc631, 0x7f, 0x1eb}) lseek(r6, 0x20400000, 0x0) 11:12:51 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:12:51 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 526.319464][ C1] net_ratelimit: 22 callbacks suppressed [ 526.319474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 526.331119][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 526.414089][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 526.414112][ T26] audit: type=1804 audit(1579345972.006:359): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/201/bus" dev="sda1" ino=17137 res=1 [ 526.495882][ T26] audit: type=1804 audit(1579345972.036:360): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/201/bus" dev="sda1" ino=17137 res=1 [ 526.521721][ T26] audit: type=1804 audit(1579345972.076:361): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/201/bus" dev="sda1" ino=17137 res=1 [ 526.547184][ T26] audit: type=1804 audit(1579345972.076:363): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 [ 526.574557][ T26] audit: type=1804 audit(1579345972.076:362): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/201/bus" dev="sda1" ino=17137 res=1 [ 526.627719][ T26] audit: type=1804 audit(1579345972.086:364): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 [ 526.685716][ T26] audit: type=1804 audit(1579345972.086:365): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 11:12:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 526.714507][ T26] audit: type=1804 audit(1579345972.116:366): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 [ 526.742597][ T26] audit: type=1804 audit(1579345972.116:367): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 [ 526.817250][ T26] audit: type=1804 audit(1579345972.116:368): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/175/bus" dev="sda1" ino=17468 res=1 11:12:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a4b491bad9b74a4", 0x1d) 11:12:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = fcntl$dupfd(r0, 0x0, r4) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r8, 0x20400000, 0x0) 11:12:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 527.039448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 527.045276][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) [ 527.439476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 527.445299][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 527.519464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.525278][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.599447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.605707][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:12:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:55 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:12:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280), 0x0) 11:12:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) r9 = creat(&(0x7f0000000200)='./bus\x00', 0x0) lseek(r9, 0x0, 0x2) sendfile(r9, 0xffffffffffffffff, 0x0, 0x40d09) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f00000004c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r13 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r14 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r13, 0x0, 0x2) sendfile(r13, r14, 0x0, 0x40d09) r15 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r16 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r15, 0x0, 0x2) sendfile(r15, r16, 0x0, 0x40d09) r17 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r17, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r17, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") r18 = socket$inet_udplite(0x2, 0x2, 0x88) r19 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/urandom\x00', 0x800, 0x0) r20 = syz_open_dev$ptys(0xc, 0x3, 0x1) r21 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r22 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r21, 0x0, 0x2) sendfile(r21, r22, 0x0, 0x40d09) r23 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./bus\x00'}, 0x10) r24 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r24, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r24, 0x41009432, &(0x7f00000004c0)="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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r24, 0x0, 0xe, &(0x7f0000000680)='timerslack_ns\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r26, 0x0) statx(r2, &(0x7f0000000700)='./bus\x00', 0x400, 0x1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r5, &(0x7f0000000900)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="13cb3835b6539aea04a5b6da39669f246f66180ebd90f7db889d6ace112974b952599cb8bbb40dcf0518a6d0cedba780e7949219076bb6f7d3df260a655908dddb338b4189fde820acca1b5b4d9f4d835776079574b92f6a494b616ee2d035d2a1b48bf0ed4fdf47b9664f271fa1083c2da4a9ed3c2d451074a8346aa27a61a56e7f9939aec8cd171ef3b9fac6e99553266cc7cdfd1b0bbff4", 0x99}, {&(0x7f0000000280)="97138500bdc00331e7a2ccc4cdc8e79b4ce2b4bcefd4a9e2bdaa0700c536e1d9cc93b3e2b1dd176868b60ec39b25495a5d698344810453b8f83cb7375b568542d2f7f88ca603d01a5f5d35949789d38912e2d32e649d9bda14babacda449e1c5cfeae5b41b682e0298fcd30ef14a1bbb5a68c5fac79b39cce34b8c8305973fcc00f2fc125fb600a6ce1de2cfdc2a70dc54b3169dec46f75fcc8e36a86ac968c5de1fa0c6a384da164fda181717a63d6a9b6ff836f291ef4dc3e3a220f6e73ba5fc3145baaa513bd5", 0xc8}, {&(0x7f0000000140)="0525bade79a50aa1946d123769ca470cd3199f751728d8713d733e6eb577c23cd2c332ce939b8603b63fabbd5bc402f9f05ea74fd71df2626caeef7fc8c259ec15187bc7b53cfe3b4b4052d2", 0x4c}], 0x3, &(0x7f0000000840)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r14, r4, r15, r4, r17, 0xffffffffffffffff, r18]}}, @rights={{0x28, 0x1, 0x1, [r19, r20, r2, r21, r23, r2]}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}], 0xa8, 0x8040804}, 0x40000) lseek(r3, 0x7501, 0x0) 11:12:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x1000, 0x1f, {0x77359400}, {0x2, 0xc, 0x3f, 0x6, 0x1, 0x3, "7031d818"}, 0x7, 0x2, @offset=0xf7e, 0x8, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r5, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffff7) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:55 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:12:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:12:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) accept4$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x140800) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x0, 0x33de4feb43c98d31) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x1) 11:12:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:12:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0xfffffffffffff, 0x2) 11:12:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)="02fa065aa402d5f21bca2bf29b5cd157d75ba1aedb21722ea220e18037b282308d495371c8235f86ddef437a9bb667918e429f52a49727e829f572f08435d64a0b2ffe69d64e5af174532bccea9b27e73193b9b71af11e6e4296935b64a364b182bca0b810108ae7672a92ecf1e772e603a9a54b750f599c9adb4162c2b14c62a8fbf78397a9105013958800", 0x8c}, {&(0x7f0000000240)="a756a454e5cb0903b71f39209214dc5ec8b2d853db91863e7b13eb098b5165f40fd871a03da5bb6d2e58a804e24df8789b3076596c93a1a118c4bddc3ec293e07fa80f61039c265861504f5c59bb976babfc28847bda7832d75dab70babbdf0c665463b44f63f5e8aa7e02fcf69bed89f42d5db8aacde672541ce1b3f592ec8c49e073b2e60194918185667aa7f9dd85546309a5b04cfedab1c633e0de665bf2", 0xa0}, {&(0x7f0000000300)="8fb9da7caac2f1b6e4015e0d599c89ce25ae4e624b6290cc9a3ca177065550b6465ba252ced6bc7b9c7aa276964852a535c9058386e3907b4ff5cdeca6979e736817a91c2489d16fcceefb98ff50a55d2e3b961c7a5f0e32f80eb1fa02dbc7b45b3e8252619e653c83201024f6f0361b149ee53d479aa6f0535142075bea79e15a1140251f9c44403861c7fa5cfdfa1b17bb50aefcc550cb0d90beb543981038da75dcbde8538c271938d2", 0xab}, {&(0x7f00000004c0)="e193dfb0bfd4a8fb3290e35e76ab57093d9ad7bd7abb2377877bd867e29142505b8e7a5e05d452971ebf2ea97595fbd23e2689c8f22c17271cf331d791b59ef79a2b473c717d79fbbf4c7c9418f668d18251cd7e2ba19c9f339ab8c833dd437ab4b0f0b341c9dd1b4f1e89f9c07f2b336b2a093c3c841b07dc8ca980ad0e04094f5611eb5d7744eaa1e86e37d774cd6da3f45410ea77b2280371fc87a84f1c34e1f2e4303b09a3027915ea68a4622a8e9245b0d3d3bd05a45581237c4387450e0bc61d328cdd44d6f291096ebb370c2884f0d22e8f04ab8a303a4bb7", 0xdc}, {&(0x7f00000003c0)="dda719996a22cb0c86c6d62d29483ae15fa69f668ccaa94a96a0912ecf410b18ec9407bc711fec0efce814272fb3728829813678abb9c28bc8355223f73bd4730ae190756844b836376291072accd7a11bc1fccc20197203ab4023a17ba1ee302c4998931d6a9445dce5f832f36a72344607fb2fe362cadeca4a1ba6382b83a265f907cda8f75d78f94aa45474a7404398dd680054a929745b1d4c1425e64a73599024d5d622aed938e98f823b6c3a57e47c013d137feef9c9", 0xb9}], 0x5) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x1, [0xfff]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r5, 0x2, 0x6, [0x5, 0x9, 0xffff, 0x1, 0x6000, 0x9]}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 531.599463][ C0] net_ratelimit: 18 callbacks suppressed [ 531.599470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.610885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 531.679444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 531.685291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 531.759461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 531.765370][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 531.919454][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.925235][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:12:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:12:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:12:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000004c0)="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") r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:12:58 executing program 1: r0 = socket(0x3, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010000ffff0800000004000000010000850200000004000000020000000000000000000000da003ed9aed616aa94f92417f9e857d1d45b54da920bfbed77cff360afa7996df6a13094d40d00007cebdc661626027c1bb39852ffbb5b1884c519723d12af3f69bd71e7843fd69f3d293ebe17c03afe0fb7e6e277cb86c2ee1fcaf0275a719af80922d8e781837cd0463af0f2a00b66ae73fcb21fdb9bd5d417736d254ab5d0886c652bc5770f7817c1ee7ad7dc3aadeb"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x6) setsockopt(r2, 0x11c, 0x0, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000000)) 11:12:58 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:12:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 532.559463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.565297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 532.705585][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 532.705605][ T26] audit: type=1804 audit(1579345978.296:411): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 [ 532.757705][ T26] audit: type=1804 audit(1579345978.296:412): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 11:12:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000, 0x0, 0x8, 0x101, 0x11, "c91433f3250b8b2e1bdba13de70561ff3ff080"}) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c04918a", 0x16) 11:12:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') lseek(r6, 0xfffffffffffffffa, 0x0) sendfile(r6, r5, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000000)) lseek(r2, 0x20400000, 0x0) [ 532.785866][ T26] audit: type=1804 audit(1579345978.306:413): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 [ 532.820880][ T26] audit: type=1804 audit(1579345978.336:414): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 [ 532.919368][ T26] audit: type=1804 audit(1579345978.346:415): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 [ 532.932128][T11526] QAT: Invalid ioctl [ 532.968024][ T26] audit: type=1804 audit(1579345978.346:416): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/205/bus" dev="sda1" ino=17488 res=1 [ 532.997663][T11529] QAT: Invalid ioctl 11:12:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="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"/535], 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0xa5ec678c2824334e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:12:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:12:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) [ 533.008062][ T26] audit: type=1804 audit(1579345978.556:417): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/181/bus" dev="sda1" ino=17494 res=1 [ 533.037435][ T26] audit: type=1804 audit(1579345978.596:418): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/181/bus" dev="sda1" ino=17494 res=1 11:13:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xe4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:13:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0xa740, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) mmap(&(0x7f000035b000/0x3000)=nil, 0x3000, 0x7, 0x32, r4, 0xfffe7000) r5 = socket$inet_dccp(0x2, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) lseek(r5, 0x1, 0x273f721b4484603b) setsockopt(r5, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:01 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:13:01 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 535.833743][ T26] audit: type=1804 audit(1579345981.426:419): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/208/bus" dev="sda1" ino=17505 res=1 11:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:13:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x2) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) mmap(&(0x7f00003e4000/0x1000)=nil, 0x1000, 0x8, 0x8010, r1, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 535.917774][ T26] audit: type=1804 audit(1579345981.476:420): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/183/bus" dev="sda1" ino=17508 res=1 11:13:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x2f2e000000000000, 0x4) lseek(r2, 0x20400000, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) 11:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2dd3f32c", 0x13) 11:13:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = accept4(r0, &(0x7f0000000900)=@nl, &(0x7f0000000980)=0x80, 0x81800) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c74a5c3aa64d6bdc51c9be9b299820", 0xf, 0x8820, &(0x7f0000000180)={0x11, 0x10, r1, 0x1, 0x3f, 0x6, @dev={[], 0x2e}}, 0x14) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe2d", 0x10) 11:13:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000004c0)="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") r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r7 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x40d09) epoll_wait(r6, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x6) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r5, 0x20400000, 0x0) 11:13:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed", 0xd) 11:13:02 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) [ 536.729462][ C1] net_ratelimit: 22 callbacks suppressed [ 536.729471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 536.740946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 537.439462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.445441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.849484][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.855441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.919468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.925266][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 538.009488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 538.015446][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x24000, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:04 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r3, 0x20400000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) 11:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed", 0xd) 11:13:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:04 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 11:13:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed", 0xd) 11:13:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825", 0x1d}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1000006, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:13:07 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x802, 0x0) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfd, 0x10ae09bd6518effa}, 0xc) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002bbd7000fbdbdf250e00000023003400c6a34f948471835495af0d0f5fbbeb5476763503bc28bd764479f8d589254e0d0400e20004001601"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001800)={0x0, @xdp={0x2c, 0x9, 0x0, 0x22}, @isdn={0x22, 0x3, 0x4, 0x8, 0xfb}, @nfc={0x27, 0x1, 0x0, 0x1}, 0xf4ae, 0x0, 0x0, 0x0, 0xa16d, &(0x7f00000017c0)='bridge_slave_1\x00', 0x6, 0x7, 0x7ff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001880)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000001980)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r12 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r13 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r12, 0x0, 0x2) sendfile(r12, r13, 0x0, 0x40d09) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r15, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000001a80)={'team0\x00', r16}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x68, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x52, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2000080) r18 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r18, 0x20400000, 0x0) 11:13:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x0, &(0x7f0000000000)=""/58, 0x3a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:13:07 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 541.999488][ C0] net_ratelimit: 18 callbacks suppressed [ 541.999497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 542.011213][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 542.079444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.085305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 542.119293][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 542.119314][ T26] audit: type=1804 audit(1579345987.706:434): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 [ 542.159475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.165272][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000280)="0000000040f69b4849c3490eed1cfe", 0xf) 11:13:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x1) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:13:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40382, 0x0) [ 542.240604][ T26] audit: type=1804 audit(1579345987.716:435): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 [ 542.311232][ T26] audit: type=1804 audit(1579345987.716:436): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 [ 542.336070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 542.336100][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:13:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 542.439562][ T26] audit: type=1804 audit(1579345987.736:437): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 11:13:08 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:13:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x20, 0xfffffc00) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40102, 0x0) [ 542.477028][ T26] audit: type=1804 audit(1579345987.746:438): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 [ 542.518676][ T26] audit: type=1804 audit(1579345987.746:439): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/187/bus" dev="sda1" ino=17541 res=1 [ 542.624913][ T26] audit: type=1804 audit(1579345988.026:440): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/188/bus" dev="sda1" ino=17546 res=1 11:13:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) setsockopt$inet6_dccp_int(r1, 0x21, 0x1e, &(0x7f0000000000)=0x4, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = semget$private(0x0, 0x6, 0x604) semop(r4, &(0x7f0000000340)=[{0x4, 0x3481, 0x1000}], 0x1) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000002c0)={0x9f0000, 0xffff8000, 0x5, r5, 0x0, &(0x7f0000000280)={0x990905, 0x3, [], @value64=0x2}}) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000300)) semctl$IPC_RMID(r4, 0x0, 0x0) lseek(r2, 0x30800000, 0x4) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'ipvlan0\x00', {0x3}, 0x73a}) lseek(r5, 0x7, 0x1) creat(&(0x7f0000000180)='./bus\x00', 0x1) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r10 = open(&(0x7f0000000480)='./bus\x00', 0x101001, 0x0) lseek(r9, 0x0, 0x1) sendfile(r9, r10, 0x0, 0x40d09) ioctl$CAPI_NCCI_OPENCOUNT(r9, 0x80044326, &(0x7f00000001c0)) r11 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000000c0)) sendfile(r8, r11, 0x0, 0x40d09) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x4887, 0x9, 0x7ff, 0xffffffff}, 0x14) [ 542.751575][ T26] audit: type=1804 audit(1579345988.046:441): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/188/bus" dev="sda1" ino=17546 res=1 [ 542.800758][ T26] audit: type=1804 audit(1579345988.296:442): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/215/bus" dev="sda1" ino=17538 res=1 [ 542.887364][ T26] audit: type=1804 audit(1579345988.326:443): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/215/bus" dev="sda1" ino=17538 res=1 [ 542.959477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.965337][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:10 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x3, {0x40}}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d0d) sendmmsg$sock(r0, &(0x7f0000002740)=[{{&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="bbd9e971ee602b310e58f81e35625b", 0xf}, {&(0x7f0000000100)="573a72172f", 0x5}, {&(0x7f0000000140)="650848e5a73044dc70bae8f968352279e9a2a685534543bdd792a34b29e985c4a3b7f13da1449150581432db1affda1ca9e7ec9e5ec98487957b5d736dbe54fbaf3bdcca572353cfa93626a46ad4d698d7ce03322df9c9", 0x57}, {&(0x7f0000000240)="6599f4d6615b4d07bd106c27dd2bdf14532d205a68700eee7a77b61757f7ae5f287346ada4404013cf5d8f02371519cf63a32c5c884486fd0eece50850a7eafedff08248dd46548b93b5abcdc0c129bcefe280d7bea1e149a92db60075d81b72af635272d5b17c06060c311d1103c131b339200b66b3434898ff775500fe5ee29a4a5ff02c61ad85935d15bce248a7a00fd50c1697679b04231ecf5c334d5d390c71", 0xa2}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000300)="2920321ec8d2eca6695f28b9c5881ec443d4f96bb276eb62e85f4701eae7ce8a8df0b4d06e7a2ed38e9f2579f39fd55e4494daa755570f013568ef17d1c15e17270c0716ba06a3554835d92abba856e721e32ad4b25cb3f497ac85611b7ac45afcbb4297980dd480", 0x68}, {&(0x7f0000000380)="01bf1e6e34b6ebddf82659603ce6de7c28abe17d8308b6a1b619ea536867dff245d60d2aae7d905ff22f24d538f10e136abd7426c89d5f9e78aefbba30b92cf524bdb8144f9104d1de61e3b63c8f0e47d0d06ffcd610d4d40e26d10f4e352f7559b0f2aec7129494f1150e3e29cf2eb7f900df234d64d13c05562bd6be", 0x7d}], 0x7}}, {{&(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @local}, 0x3, 0x3, 0x4, 0x3}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001540)="3343aa3d15f7f11570023c47bbea85ff0f629a97651bdafcac0a6ec4eab38fb084577b3b1b0933347015f998c7930ecfce7ad0eef32285", 0x37}, {&(0x7f0000001580)="9f8f58bda65916feb421debaa984b6132f40c88269a9d62384f83a5043d5aa65d09139dd534192db4b23fd1d75c1a0680d05dce7032216ece33eb62ab25d1d1778697092636031e2dc8b0c8b9c6280959b3eae7ec758b48c59e17634ffebc8e0b71c6e55c56bc988c29adc5c3d7976724a1309e38c7c35c88f966e6d60efff5d493a7396a6f7d161", 0x88}, {&(0x7f0000001640)="e7c37df1be09560454d2ae900a497b3833008eb9d280aab9835b226fc5dd9075a70d9017f71bf87261dd1b89f6504de617356827de3e3b5e22c27b8979893b76edc8ea1fc5081b44aff5bcbf356189539d4cbca174a2d0a5a3f8e3bf4ebf46175f6a245ca6b306b71c607b7a9f22db77a0a887c47403ce37613926d086382732e743da4d5892317ba3dcb882ed99643cadee83f01bf5704397fea7216672b90ee68530eebb10b3b49bb6c7be84", 0xad}], 0x3, &(0x7f0000001740)=[@timestamping={{0x14, 0x1, 0x25, 0xfb}}, @timestamping={{0x14, 0x1, 0x25, 0xfb}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x9a}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9945}}, @txtime={{0x18}}], 0xa8}}, {{&(0x7f0000001800)=@caif, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)="ad46d14703eaaeac6d7d21e3a5bf078130229706aaac7df30e00f2cefb7499f268e319d3368704c9c2f0f784240f7aeb8b9eeaadebb4d5d1311f890ac93fdfaaa22f174318ea2a9b0520d5e3ebf038e15d2e84a52386334f4186cfc43c3afa", 0x5f}, {&(0x7f0000001900)="d75b8ef66f16b138c137c8cba276db566e92ccb54ea0a0090fa8ed15c07ba9dec51bb6692fec46c2bdab130f3cbfa306b56e264244e9254e2c5e084bf0ca6f5ffb1b639576b5fe5bd55e610706b0", 0x4e}, {&(0x7f0000001980)="fb2d2baf5b2ec35f852c62b05bc896", 0xf}], 0x3, &(0x7f0000001a00)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x48}}, {{&(0x7f0000001a80)=@nfc={0x27, 0x1, 0x0, 0xdfef074bcf8d3be3}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001b00)="6b7525088a7c47960414b390dcb355f693c7e64ed1d8242634ceb2efd9ad9326e8cc212f1d89f0ab9bee84523883e9e963a7a66b1d0a4665e52c55c915fcb0", 0x3f}], 0x1, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x83}}], 0x78}}, {{&(0x7f0000001c00)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x7f, 0x8, "4ea456da2f2980411fcff7488ae778db47ee82a12ec3e12998cf44d7cc4e8bf847dfd7f9d6d9b5c70b819d9cbf8fabbe73295b1e8d750b9c44aa128cebe975", 0x2f}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c80)="b6a6aa9a445db77f4ca8ea64d328fd085353ab565dc90215373e0d40d8ee623817c8bfc6d94115367b840f008f7e4b770977d23fcda2ff09ce089da5bcaaff236b282aad3821c57b1964a9", 0x4b}, {&(0x7f0000001d00)="b8d99b135ab142250e057a4d173c8de9d8dbd0857aad5d6d667bee7786b2c56a99473b67745920778b2702ab349a3679d531b761de7533896b3e1763cf3dc7c9b0aca5ff42b450d07e71a33143707d64b2455b7b4255fc8ab55f3504fa613c0735802a3e04e10ef9b1ad03a1a2ff81a1a7", 0x71}, {&(0x7f0000001d80)="685956c1c3186647d1b34e8fbb0b5a953337d32cb1181fa12a398c2008437173ee10667523e2e4f7ceb9c5a5ffecdecb2164b332f2c36be2ee52b14596ed38606446786c14b5bd9d3f2043660af2270c153d66faac571f56b79252e9e979b23219c70cc6f8ee5cf9fcb853e72a22dc1e7d2dec", 0x73}, {&(0x7f0000001e00)="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", 0xfe}], 0x4, &(0x7f0000001f40)=[@mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}, {{&(0x7f0000001f80)=@l2tp6={0xa, 0x0, 0x8000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001, 0x4}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)="419757231175674d887e2d6f563422fb9d573ffc47fc08dee399dbfc53c4c71429227e7a7c1b4ec6e87c8130012d588700cbf66701ac49cd8fe5869bed0f440d1893bd3e3669d8bae81e1b184cde926f2e90056d7f6a0672f8b35d4f9e61f80716e7eeec2fde8b7ad697ff561e5f048809f5251b173d369d54bbee75566cb54eca8028845ef3b401f3397bbd11f9ed2dac07f9", 0x93}], 0x1, &(0x7f0000002100)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000002140)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)="595e9a3e684a1b2935159ceabc0791099aa517d65ec8de76b161a0154e1d6e90976ee9c7bacac708d02387a6b9c42d2aa13f8fe71ae3368ac8b6ec98567e4a4893e0ff615bde24b2c30b3bf001a23bbde20618ca54a7f52c1b7111e9de6e7637736bf847772fea037380269380409cc3a780149545265db22e1eb3f03f6a1e231a850bd0b661fbaf8d798232fded906384c1b48bdf9ae4095836840790a71713f381f36a4956bc97ec083c3e9bdf51d89bf91e555f19fb3b3b12c0c79eeaad9e87c50bdfd0a692a28a", 0xc9}, {&(0x7f00000022c0)="ecffc323883958078f5ea709ba13d471d3663cbb1fe3032b2ee455ba8ca39a50def649be298ff7fc80df0369ebf04941ab932eb0740ee7be8b8c4df9d6cf3916b2c1404946", 0x45}, {&(0x7f0000002340)="36c5a36f98f4c2e2d042dc50e8230921eeb31a5d036bc074c69cd32ccf801928671187b1445ab882198802e1aa0dcea601578cf2ec56cdd35cf69aa401c34e98cf8271974e2b269b18f4c9777b62a31e9164118518e230734c1470b1e867f912f6605ee351", 0x65}], 0x3}}, {{&(0x7f0000002400)=@un=@abs={0x2, 0x0, 0x4e22}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002480)="a947cb4d1817fbfeafe78b9f0e6dced4fe77fd2d74862b2da09362ad55b92524774bc5b54d1d36d96a00c4e5e7b57c6b5fe7dc236a59b6b4ae86bf681b11e971b6da37918cff91bbdfcbd8d5138588afc889c61cf39ac7a536588e145f217811ae1314cdbd96d919804fae2afd35226cc1450d29ee4501ecb72702e19fcbc31c68e6bb5525a7f7a1eae8fde88013ee3ddff8964520d0abcdebe8f8248f872ec2b995e6790b74def061b130d1b2bbd88076e7727ac93aa8b121ebf0a1c0f3029b02b7e2eaaca6adeb15e2a3aafe641c923902e66fdbc3", 0xd6}, {&(0x7f0000002580)="7f91baa50820d12eb3ddbd692e07d933d3a7ab630e2cd30f3fb72074befbd19926b19af1c4bebd2a0ad555af0624d3bd3730bb4051384fa1feeec17a34890ce88d5601d781d9c71b76a7e730e70751c121d4fe70fd393ab9bd7123687c3ce9caa96ae308023b883c1548d8d2f8d239e7ac7450cc9fd29dfc95751c9be53615c36f73f0e806077c1a12e083b3dfa304e4d238e0ecfb1a96670d2c1008f8a899e11e3a5cc985fb2e4c91eb9fcc79d10932a327c60427051c24f845635fdfbbcc13be4e39a39ff6f1680ddcecffad73461dc9de42e3b91726bf3a74eae3f66527310c455f8127cabf3e0174c074a00ae1c8d3ad30ea06c4e9", 0xf7}], 0x2, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0x10b7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}], 0x8, 0x50) 11:13:10 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:13:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0x203ffffd, 0x1) 11:13:10 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:13:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000000c0)=""/191) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:11 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x40, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus1280-avx2)\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) iopl(0xc0) 11:13:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000000)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000140)=0x9) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") ioctl(r0, 0x80000000000000, &(0x7f0000000080)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000004c0)="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") fcntl$setflags(r6, 0x2, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) 11:13:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r6, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r6, 0x5}, &(0x7f0000000080)=0x8) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:13:11 executing program 1: r0 = socket(0x15, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) 11:13:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) sendfile(r5, r7, 0x0, 0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x51000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xc}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1008) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) [ 547.119515][ C1] net_ratelimit: 22 callbacks suppressed [ 547.119525][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 547.131949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 547.839498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 547.845489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 548.239499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 548.246440][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:13:13 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:13 executing program 1: socket(0x10, 0x80002, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000140)={0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'wrr\x00', 0x2, 0x8000, 0x64}, 0x2c) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000100)={0x8, 'rose0\x00', {'netpci0\x00'}, 0x9}) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) ioctl(r0, 0x1000008912, &(0x7f0000000040)="cf0007d1159a77daf73fb43a22cdade6a14dced72fcfb76f109bfcb072fe142f84eb6ef88a518bcde83811c977dad73bd993c734cfe2205d9b7f1d54445d7ce1355c954d7286396f2e60c66f5eaa1509a14e12860a57c9610f898a03ef573a9d33cffe54175497ed8a46abaceb7b3bca9340f75b04bb799a4eb337589c56bc2d31f72fb117411a") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x40000000) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) 11:13:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x1) lseek(r2, 0x20400000, 0x0) 11:13:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:13:13 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 548.319551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.326147][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 548.399457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.405630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 548.455305][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 548.455326][ T26] audit: type=1804 audit(1579345994.046:489): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 11:13:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x19c4, &(0x7f0000000100)="180db5055e0bcfe8697071fb22ebb15419acb26cab7e9e") socketpair(0x7, 0x805, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="8400000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da8505000000daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea09afff789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"], &(0x7f0000000080)=0x8c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r4, 0x8001}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0xffffffff, &(0x7f0000d14ffc)="0100", 0x3c9) 11:13:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfb, 0xc082) write$snddsp(r5, &(0x7f0000000040)="dce5b1b715ca7dcef8d38fcb83ad3b18697c2942c4640688345ffc9d1d565a289a48d62f88c64de603391c3d7ffb855a5cd0280eff0cb0feb59cd8ab490037dc4999b80f233fefe059db25db8fc9dc47955f62b99a75662f50b7d1b89ba22185d51324217ccf7a83ae926df071104ea226f1e01cf18d2d2c7289e8a4b268e230aa05cf8b7cac9b3c2bd8ba22a401854ad9911474b2756aba538a4b16f9da6e5f684a53a138658f1ab195a18976adb0e5f8bb46ad05f089c190b4f6f1821c6888b8e3259e9be23335c0a1a9d5d1ec8fcb55eaa4ab8e", 0xd5) [ 548.597533][ T26] audit: type=1804 audit(1579345994.046:490): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 11:13:14 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 548.718573][ T26] audit: type=1804 audit(1579345994.056:491): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 548.836225][ T26] audit: type=1804 audit(1579345994.056:492): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 11:13:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000000c0)={{0x80, 0x8, 0x2, 0xda, 0x3, 0xfb}, 0x7, 0x3, 0x7fff}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e21, @local}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000080)=0x1) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) sendfile(r3, r4, 0x0, 0x40d09) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x10000, 0x0, [0x5, 0x7af, 0x1, 0x872e, 0x5, 0x80000001, 0x5, 0x7]}) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 548.970686][ T26] audit: type=1804 audit(1579345994.066:493): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 549.075353][ T26] audit: type=1804 audit(1579345994.076:494): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 549.138237][ T26] audit: type=1804 audit(1579345994.076:495): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 549.139933][T11793] input: syz1 as /devices/virtual/input/input7 11:13:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x3f, 0xfffffffe, &(0x7f00000000c0)="c5b0d282d8abf7aa6a4e5cb69a0bf5f9ffffff7e4cc28d812f147039bb9348582854cf1f6aaaee38684d7749303e5b81304cdb3d06e828fa3006da4d1e889ebf819ae3cb544633f06434720827f4314a6141bfd819", 0xffffffffffffff73) 11:13:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)}}], 0x1, 0x0) [ 549.247148][ T26] audit: type=1804 audit(1579345994.076:496): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 549.309962][T11793] input: syz0 as /devices/virtual/input/input8 [ 549.374558][ T26] audit: type=1804 audit(1579345994.086:497): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 [ 549.412711][ T26] audit: type=1804 audit(1579345994.086:498): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/220/bus" dev="sda1" ino=17577 res=1 11:13:15 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x5, "f39f44", 0xff, 0x4}) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r3, 0x20400000, 0x0) 11:13:15 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:13:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa, 0xfffffffffffffffa, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null]}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xd) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="12217e5512ff7a67fe72c3d6cd7609ab4386b8b46d5a90ba252fc0513239273df1ddf968f708a60cbb3a69ee962abb0eef99846c19df45942d16ba1a64131f4cf693f0b2cd1f49812c7be2ae319688db5fee8bb74a880f66703515fe038fda1d52c8212dc09f34df9fe3b127d2e8b4098454a85f11b7e72c04353a06ed9a07254093cb183c30ce5699821969"], 0x3) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r5 = socket$caif_stream(0x25, 0x1, 0x2) ftruncate(r5, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @descriptor="44895e8bf560ee5d"}}) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:13:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) ftruncate(r2, 0x10000) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007bb000/0x4000)=nil, 0x4000, 0x2) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000200)) 11:13:17 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r1, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d756e69782c6e6f657874742c616669643d3078303030303030303030303030303030352c616669643d3078666666666666666666666666666666612c6d73697a653d3078303030303030303030303031303030302c666f776e65723cbea6fe5a79d4f16e8f917e8947b1f497cee3345d5721c5d8abda51be76b031d95f3f50b65b409358055df3b11723f49b990c52330c61114f1a8345dafea595e8d0a31f8049c8e5db90f9ebd18ab410bd202a5ecd37669d3c0dffadbb0601f7dbb1af029a6b7b8008f9872310b883f230d8a312365bd865aefbe91d2e0064e63ce9bc62d0b9f913d4e512b01b7d44", @ANYRESDEC=r1, @ANYBLOB=',mask=MAY_WRITE,\x00']) pipe(&(0x7f0000000000)) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:17 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)}}], 0x1, 0x0) 11:13:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r3, 0x20400000, 0x0) 11:13:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:17 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:13:17 executing program 1: socket(0x10, 0x80002, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x84) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl(r3, 0x1000000912, &(0x7f0000000040)="ed7d1d0a30ab0e5418d237a96278fa63a2eb06be77f3bbe154281992218eef708dd6858039c835f3eab685dc0a2e468353987c332b9433ccb0a65f5fd2c59b0fa853c5e99ebae27e457c33bf2fe21307853c2f00691c07924975dba72a600976f4a23c034647d77db2642db8e1c095efb727690183026bb39bef0edeb725149c8f6f216b3f456414566ac557") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f00000004c0)=""/4096, &(0x7f0000000100)=0x1000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, 0x8) pipe2$9p(&(0x7f0000000100), 0x104800) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) 11:13:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(0xffffffffffffffff, 0xffffffff9162c982, 0x0) 11:13:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), 0x4) 11:13:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000008c0)=[{}, {}], &(0x7f0000000900)=0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x510901}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="3d0000000002050000000000000000000c000005100001000c0002000500010088000000080008000000000208000500ffff00010800080000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000940)={@hyper}) sendfile(r3, r4, 0x0, 0x40d09) recvmsg$can_raw(r4, &(0x7f0000000700)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000200)=""/22, 0x16}], 0x8, &(0x7f0000000680)=""/85, 0x55}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740)='/dev/nvram\x00', 0x82, 0x0) bind$x25(r7, &(0x7f0000000780)={0x9, @remote={[], 0x1}}, 0x12) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x4) lseek(r8, 0x20400000, 0x0) 11:13:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000004c0)="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") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x9a0, [0x0, 0x200005c0, 0x200009bc, 0x200009ec], 0x0, &(0x7f0000000100), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x5, 0xc, 'vlan0\x00', 'syz_tun\x00', 'gre0\x00', 'ip6gretap0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0x1fe], @local, [0xff, 0x0, 0x8bd291c85e979ac7, 0x7f, 0x0, 0x48bf313348cc6ab0], 0x9e, 0xfe, 0x14e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x3, {0x4}}}}}, {0x5, 0x13, 0x101c, 'xfrm0\x00', 'bridge_slave_0\x00', 'syzkaller0\x00', 'bond_slave_0\x00', @broadcast, [0x101, 0xff, 0xff, 0x0, 0x1fe], @dev={[], 0x28}, [0xff, 0x0, 0x31f6ea933b8ba8f7, 0x7f, 0x0, 0xff], 0xd6, 0x236, 0x27e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x8001, 0x0, 0x1}}}, @state={{'state\x00', 0x0, 0x8}, {{0x5daa42c9}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:dmesg_exec_t:s0\x00'}}}], @common=@ERROR={'ERROR\x00', 0x20, {"6906127e1b7d7312f023048c2bfc65375e55fab73d4789ef4fb64e3bd92b"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x4, 0x1a, 'nr0\x00', 'veth0_virt_wifi\x00', 'erspan0\x00', 'team0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x1fe], @empty, [0x80, 0x0, 0xff, 0x0, 0xff, 0xff], 0x106, 0x136, 0x186, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0x5d, 0x1}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0xf, 0xf8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff, @local, 0xffffff00, @dev={[], 0x10}, [0x80, 0x80, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x7f, 0x0, 0xc635962b8adfc703], 0x2, 0x9a03ca17dec20dfb}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @common=@log={'log\x00', 0x28, {{0x81, "39f1a61900545b55c84939d2629973c43f1db921686c24fb9e450d919721", 0x15}}}}, {0x22, 0x40, 0xf5, 'ip6gretap0\x00', 'veth1_vlan\x00', 'ipvlan0\x00', 'bond_slave_0\x00', @empty, [0x80, 0x0, 0xff, 0x80], @random="fc84ff154caf", [], 0x2de, 0x386, 0x3be, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x18, [{0x2, 0x5, 0x4, 0xfffffff8}, {0x45e8, 0x1, 0xa6, 0x2}, {0x2, 0x3, 0x3, 0x8b08}, {0x4882, 0x3f, 0x6, 0x7}, {0x401, 0xb7, 0x3, 0x3}, {0xffff, 0x80, 0x43, 0x8}, {0x7ff, 0x8, 0x4, 0x65fb}, {0x401, 0x99, 0xe6, 0x7fff}, {0x3, 0x2, 0x6, 0x2}, {0xf001, 0x80, 0xbc, 0x8}, {0x5, 0x40, 0x7, 0x7}, {0x800, 0x1, 0x6, 0x7}, {0x3, 0x8, 0x3f, 0x101}, {0x3, 0x5, 0x4, 0x1}, {0x8, 0x2, 0x81, 0x8000}, {0xc5, 0x69, 0xff, 0x9}, {0x58, 0x8, 0x8, 0xffff}, {0x5ab, 0x31, 0x3}, {0xcf8, 0x7, 0x2, 0x1}, {0x7, 0xfd, 0x0, 0x4cf9}, {0xbf51, 0xc, 0x84, 0x4}, {0x4, 0x1, 0x1, 0x8}, {0x1, 0x1f, 0x1, 0x5}, {0x401, 0x3f, 0x7f, 0xf5}, {0x5, 0x0, 0x80, 0xfab}, {0x8000, 0x1, 0x7f, 0x6a78}, {0x1000, 0x1f, 0x0, 0x400}, {0x7, 0x7, 0x1, 0x5}, {0x6, 0x9, 0x80, 0x800}, {0x8b, 0x8, 0x0, 0x1ff}, {0x5, 0x4, 0x99, 0x2}, {0x5, 0xfb, 0x3, 0x5}, {0x0, 0xff, 0x7f, 0x8001}, {0x1, 0x6a, 0x7, 0x18}, {0xfff, 0x40, 0x20, 0x4}, {0x1, 0xff, 0x40, 0x400}, {0xd754, 0x1, 0x7, 0x7fffffff}, {0x1, 0x3f, 0x40, 0x20}, {0x2, 0x89, 0x61, 0x8}, {0x3, 0x20, 0x0, 0x3}, {0x8, 0xce, 0x0, 0x9}, {0xff, 0x1, 0x7, 0x80000001}, {0x4534, 0x5, 0x40, 0x401}, {0xff, 0x0, 0x1f, 0x3}, {0xa0da, 0x1, 0x3f, 0x6}, {0x0, 0x6, 0xff, 0x8}, {0x1000, 0x1, 0x1, 0x9}, {0x0, 0x86, 0x81, 0x1}, {0x8001, 0x1, 0x81}, {0x8001, 0x81, 0x40, 0x9ae}, {0xff, 0x3, 0x4, 0x8}, {0x6648, 0x2, 0x3, 0xffff}, {0x38f, 0xfe, 0x2, 0x2}, {0x825, 0x6, 0xfc, 0x9}, {0x7f, 0x0, 0x20, 0x4}, {0x7, 0x81, 0x4, 0x2}, {0x0, 0x7, 0x2, 0x3}, {0xa10, 0x5, 0x1, 0x1000}, {0x1, 0xcb, 0x6, 0x1000}, {0x130, 0x60, 0x1, 0x8000}, {0x1, 0x8, 0x5, 0x101}, {0x6, 0x5e, 0x7, 0xfff}, {0x6, 0x6, 0xff, 0x20}, {0x5d19, 0x7, 0x40, 0xff}], {0x2}}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x81, 0x10000, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x0, 0x1, 0x0, 0x0, "4ea8c8530bfa02b7a34e120e92535ea6e5e437a68229734a45206b18eb3b656d686c7fb8472fa455163a054437b035c4b7953884f7ec3a45835072086392b151"}}}], @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x16}, 0xa8b79752fea8ab9}}}}]}]}, 0xa18) close(r1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x100, 0xa, 0x4, 0x10, 0x93, {}, {0x4, 0x1a6252ce266e9982, 0x2, 0x4, 0x81, 0xf4, "b7b83a17"}, 0xfffffc00, 0x4, @planes=&(0x7f0000000040)={0x7, 0x1, @mem_offset=0xfff, 0x5}, 0x7, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f1f71d00", 0x1b7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="68000000667f6305d85adf6e17153197908487bb0541da61208ce12b6e3fb5af70029d66ab988f520da0a2b08ccfdca3f862cd25e2cbb3470714d5ac5fbb71aa3fa6b46420cc8cd726b2501e9a5f44d8e40745e594b6f727506bc49c7b6b61e359f351653965f993cffda9c51d18cf29eac7d8b97f3b0a4853f56b1b8c7012e6115b079d818d6ac947b2241ad30637e7cbbdc07bc33d2038fbb9f6475b091d69f5ab61a9609cb71127e0548cc54cc428027f509cb7", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25010000000000000009410000004c0018000014b2696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x40008000}, 0x2000000) [ 552.399456][ C0] net_ratelimit: 18 callbacks suppressed [ 552.399467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 552.411437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 552.479434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 552.485262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 552.559436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 552.565772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 552.719450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 552.725889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.359534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 553.366166][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:20 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8a) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000004c0)="371b94fa92f1b0757fcf10abddc64f43d5470f3c2e5bf1b96a1164d9c9c3478254af597011436a3dc5a172c9c145b9335dd9194039d4387f2897d62f1f54174973fa67aecb09fe14ef549e6fb6e086e95452ec0f99cae1ad5280c6ee690f253c102241a2b02eadd82d3e2f5a2aff60cfe0860cceaa5ceccbc58ab521efde4834809754af44d10361816d982de6c1386209fc1af04f0e502da50e4e72af3f9509673f1cf8f0bcd6416d6d1c9b6ebf6a05ceebe2fabf7cd8019bdc82cbae1f63d41bf01e21983d319d53dc943c00db1b3c58053cecbd24a49939be58035c410750c2415a0b19fb1f6f2a6816aedcee5dd7c2eaf14a8a970eea8a5db46177b6dc12") ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0x1e80000, 0x30000, 0x0, r3, 0x0, &(0x7f0000000040)={0xeda1120724ed1f8f, 0x10001, [], @string=&(0x7f0000000000)=0x7}}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000004c0)="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") r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000004c0)="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") lseek(r5, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r6, 0x20400000, 0x0) 11:13:20 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)}}], 0x1, 0x0) [ 554.988490][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 554.988536][ T26] audit: type=1804 audit(1579346000.576:527): pid=11898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/231/bus" dev="sda1" ino=17281 res=1 [ 555.048821][ T26] audit: type=1804 audit(1579346000.596:528): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/203/bus" dev="sda1" ino=17297 res=1 [ 555.076848][ T26] audit: type=1804 audit(1579346000.616:529): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/203/bus" dev="sda1" ino=17297 res=1 [ 555.105744][ T26] audit: type=1804 audit(1579346000.616:530): pid=11898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/231/bus" dev="sda1" ino=17281 res=1 11:13:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 11:13:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)="b5cd1d56bb6750257c40351d427e9b986ecb9f7a7a749ce72d4b07393cb5cf956d2c58164384b587", 0x28}], 0x1}}], 0x1, 0x0) 11:13:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285fcffffffb8d227c9eb569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r3, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r3, 0x7e, "bd0382caffb1d7f9bcba2efdc11d19a5974095333087a699eccf34438be08b3b27b1131c765bf4154692fc1481e3ec4f27ab8b31b63e681ce092ab786082185e454d7ea8b93fca3f4f34f8693fa263c012108c12800efa26eca8abeb404bea8f342bfebcdce44d19ec148d5b7f62dbd3aef803f8adb1c8c58da7886ccbcb"}, &(0x7f00000000c0)=0x86) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @remote}, 0x1c) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, 0x0, 0x40d09) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x111000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x1ff, 0xf45, 0x20, @remote, 'veth1_to_bond\x00'}) 11:13:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000000)=""/136, &(0x7f00000000c0)=0x88) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) [ 555.332762][ T26] audit: type=1804 audit(1579346000.926:531): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/204/bus" dev="sda1" ino=17297 res=1 [ 555.402906][ T26] audit: type=1804 audit(1579346000.956:532): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/204/bus" dev="sda1" ino=17297 res=1 11:13:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0xfffffffffffffc52}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 555.477202][ T26] audit: type=1804 audit(1579346000.976:533): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/204/bus" dev="sda1" ino=17297 res=1 11:13:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x81, @empty}, {0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8f33, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, {0xa, 0x4e24, 0xb9e, @empty, 0x4}, r4}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r6, 0x7, 0x7, [0x6, 0xfff, 0x7, 0x2, 0xf7, 0x3, 0x0]}, &(0x7f00000000c0)=0x16) lseek(r5, 0x20400000, 0x0) [ 555.569461][ T26] audit: type=1804 audit(1579346000.976:534): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir780611130/syzkaller.9Tl5rl/204/bus" dev="sda1" ino=17297 res=1 11:13:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, r0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1c2) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x40d09) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f000090d000/0x3000)=nil, 0x3000}) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x2, &(0x7f0000000080)="660b945a18e1950277cbf9ffffbf0000", 0xffffffffffffff6b) [ 555.761628][ T26] audit: type=1804 audit(1579346001.356:535): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/234/bus" dev="sda1" ino=17377 res=1 [ 555.842789][ T26] audit: type=1804 audit(1579346001.356:536): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir283621286/syzkaller.YHxeJZ/234/bus" dev="sda1" ino=17377 res=1 [ 557.519471][ C1] net_ratelimit: 22 callbacks suppressed [ 557.519480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.531139][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:13:23 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x81, 0x1, 0x3, 0x20, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7b5, 0x8000}, 0x3a27a7d4d18a763a, 0x71, 0x7f, 0x0, 0x6d0b, 0xc5428a25, 0x1}, r2, 0xf, r1, 0x11) r3 = getpid() process_vm_readv(r3, &(0x7f0000000780)=[{&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/6, 0x6}], 0x7a, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/raw6\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r4, 0x20400000, 0x0) 11:13:23 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000002440)=[{0x0}], 0x1}}], 0x1, 0x0) 11:13:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) lseek(r2, 0x0, 0x2) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x40d09) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) sendfile(r2, r3, 0x0, 0x40d09) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40c080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000100)={0x10001, 0x67, 0x2e, 0x3, 0x1, 0x3}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) 11:13:23 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:13:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) getsockopt$nfc_llcp(r4, 0x118, 0x1, &(0x7f0000000000)=""/150, 0x96) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r6}) lseek(r2, 0x20400000, 0x0) [ 558.192453][T11956] ================================================================== [ 558.200625][T11956] BUG: KCSAN: data-race in __splice_from_pipe / do_splice [ 558.207941][T11956] [ 558.210277][T11956] write to 0xffff88812a5e103c of 4 bytes by task 11957 on cpu 1: [ 558.218023][T11956] __splice_from_pipe+0x3e4/0x4a0 [ 558.223074][T11956] do_vmsplice.part.0+0x1c5/0x210 [ 558.228120][T11956] __do_sys_vmsplice+0x15f/0x1c0 [ 558.233077][T11956] __x64_sys_vmsplice+0x5e/0x80 [ 558.237949][T11956] do_syscall_64+0xcc/0x3a0 [ 558.242469][T11956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.248482][T11956] [ 558.250827][T11956] read to 0xffff88812a5e103c of 4 bytes by task 11956 on cpu 0: [ 558.258591][T11956] do_splice+0x1b2/0xc40 [ 558.262869][T11956] __x64_sys_splice+0x20a/0x220 [ 558.267744][T11956] do_syscall_64+0xcc/0x3a0 [ 558.272359][T11956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.278246][T11956] [ 558.280702][T11956] Reported by Kernel Concurrency Sanitizer on: 11:13:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = creat(&(0x7f0000001bc0)='./bus\x00', 0xb77669a79171cd5d) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x40d09) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x40d09) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x16}, 0xb07}}, 0x2, 0x2047, 0xffffffff, 0x8001, 0x40, 0x3, 0x80}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r7, 0x400}, &(0x7f0000000140)=0x8) r8 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x40d09) sendmsg(r9, &(0x7f0000001b80)={&(0x7f0000000180)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="06ce8205c7360f18b31184a18cf822b224cd898fbe1eec852167e00ff8", 0x1d}, {&(0x7f00000002c0)="c2accb343bbcdca90515b6d9c28b3f4adabb118f7253f5e8e029377740f9595e46a7de6dca6e5032a42df836e9df4e20b19183f098e1d4df825ce1107bd120f52eb6ca646bde743b3c1329d0507d1110e4340915d492987269c01d36c2f54a280cc940438152704449c1dff83a50d1f6a5fbc4a23da1cc4f6a1e30466ba0f64b16a552851025b776fe2f3ad2b3dadcbdc59d1b5c11958804985e439650862642c3de03f0afac894ba6dc0eb7c75b6cbf52af38ae0eda75aea301f7732e4c75701c39c2fc17836cd8abcf32bcb67b451c1087ab6c380e6f49bbb9e8fc34e43d3d9974f79a00eac2bd403422c35cc2b52816c70469eed4", 0xf6}, {&(0x7f00000004c0)="8336664429d5d92ddfc40555cd8210fbceeb4d1355cd4a2b63929f6de06e1429b79f1c8667fc8c134577f0ef0ecef83d2ac26c37a462475132bfe35c0f5281c31cdd73ed54960ff02cf4f5e108bb1d0fb74b55b24c035bd09eadd8b584e8bc47d05ada97357e3e4cb9e1fbe00723457659a43db883297f36d5eea65e4210c7364469e5f353a283087cdde4377edcb33bfb24f8acf17344f4548a024ee07bcbb7c84db7220572ac7fd05f9264cb48ba05c8573c37dd2dbfaf348e8701100783250885593ad9e1b4f323be0ded1bd712f8c99c64bbbc910aa2b2816147a78afa607354d331d3b2a477e0f212d8f5e021b9d2", 0xf1}, {&(0x7f00000005c0)="5bb0bd1ca718470f9208197911976159a3a13a586cbf4edfedd31053df4c1ca695c54c1cb391a2fbcc251e0623b48cea34a86ded8e4ebc084c2a6ff4812f35b654540e540edcf0d0613ee3977afc5418c4c16816d337861a6c28059248bd696c1006bbdd7abbb314ce8ddc85efc643916b42c5089bd2e995912eeed1fda91d65d68058f95e48544fd6ef046eaed0e53712e170271542b914af74b4f52f7a52c5417454158b6c76c60c5d5e101d0c9fcacce6a2fabeb8f5e1c31bb7dee1989d35341557e188e53425fc3db17b22fe193182053a89f0780f", 0xd7}, {&(0x7f00000003c0)="50450501bfa90bcf86b0b7c6fcaeb96a413028100704b107a7aff4389287ff1d89299b4608ae0e907741933d04a760fa7980fd68f753fd9e749c1f98c8f499deaef688c85ebdc562f4e9901bcd29549c77124b537a", 0x55}, {&(0x7f0000000440)="e185dfafa8", 0x5}, {&(0x7f00000006c0)="d1ee38df6a073051b9f498fa86cb7896e529dc7e6419f491ee834ba9dcda921e7e18b93d5817cdedd8301a3d265bcaec1988c9ae029341e9349aa180118197de89ab703dda985fb56d289a3a3fc903a558a5701930856263949e714e37621ece2c2e311a0889995933a2e6f89ec9663138d0d3a367a75b5065800a814e7e81296d165b72beeccd27b740a8976d7ac97f628739bc30d3b3726210c284c63b4942b40b2060", 0xa4}, {&(0x7f0000000780)="023c0f7796d751ea3a8c94aeebf4134c8ed7038e9cfd7a8a6da63d5521bcf878f6fcfb3af6877202cad5517753680d20ba1048a125a1cfef1bff41d739a0d481bc4da92aa799d9fb1c04b67be103379f7a5517a89d09e800679441", 0x5b}, {&(0x7f0000000800)="36fa26a8940741f650b061054443", 0xe}, {&(0x7f0000000840)="b9d4c899e7abd27cac9a4fb7cfa955bfcab1ae969c93b86fe2ac9790af1a97fbb9084545ef691d132fda3ff9d5e65597598e06e82b447bdda7b5e4ac5ffc", 0x3e}], 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="10000000000000000401000000fcffff10100000000000001201000000000000a00266a62a8532cc4b016f07da6c120af26bc4818e3c0f78ae162ee03cbd951c0c5eae5ddd9e03292e922f5312912cfea9b8515f31572206530c6bc15816d49d2a4db062db0597c97ecc29515131aa86c69e2fbb0e01b13587a0a4636f04620ad8e97dc349f5eb88df1af1bbb330d84a8db9a9b7ea14889c23789b992dd54a9e0ca1962140f16b22dabc453e213a810b2f4c620ab73b8b0e06262b0cdda44cc3534298bd52b5b3c03ea1d69ccc99c8f56d3a8ba18a4bba1ecf31155bd6eb523376251a4c20c7fd535e3e4ece2e6487514e91a320590dd85c5eadf1d660bc9372b0a7ed8b4c504f719d3a13e597d36ae38278a41c8bca04585ffac13bf7fd22bc22d99c76583abfc416c9f4034b573bb1b61f1a1fe4839d00b923318a4401c8dcf70bf48d3090d05162e2b0cf604d3f2dfa950a1f9ab73762df9cbbca8e525b30a3015ec27962dd8469e8aadc108f79f26c577be17de38e3023b16f0f49f0fa11b7ff6f025f76a90c86ed21aee5bd83e4344500d93508e1b8b0965b995221aaa1caef41e3731ae83c0f86885e1ef41094e0c1acb781f88dc72416cbbdd4f88c6b45bbe111f6ab4ed79dde29b9a9db1ed730f980edde0ead2cb63a9d1093540bcac0438b02f5f359dbd9df79b68178bb424f7566f186c09c7f0face77976c73d836e53471e015c4578d7b3c59a736aa594d944e89b3a5b87499845cf1b268e231b4588bce7289b08be2c2894a9e6ca79ce5671916c1faef98976c55f909604c71e5e4eafc93a7b7f5708fe6821f46115f7b73705c973852829df68cadc13dc2be6e3de416a1cc3c6782f81993222d1de4fa43ddb346849e6b8f5218a253d2f281af4d2fea667b0b0d93293b84a7c5bfbec7d7b81fe3f6fef5723b4cd5d6b7bda8f43e3a2dd773832104be0e96d2b7e1f545a1b4f733a96203c497a47e075f2913ae1912388bc19c20c934e681dee7f7f530a7577f012a7e1d678414299be0be5f7c1aebccae2ca978c46a7f551406b9e998469fb76177d907d537479a78ccc17c8e4e697a7e3f1e2773b55ea08b3f7d36cd0d05eff5a8d6a4c9e02c0a23ec02df8d771023b50ee1bc5eb6ee29cb4ef849155d0294733e3bad8ef42836a9538fdeff470beb1341d0158c7c4938ef41e56ccb6ea4b5ea9acd3dd05fad5c9dd88d4c59ea4c2521ac2f7c564f34e62af7dc0ae5e87fbcd34211b2673f1bc902f448e002941b3346e270efd81e924d67d79e0de390ef1e22905b069fd641efd4b4438f3f87209b18e10c0513ad4842eabaaa8d4244d033d95ae9b11ac06ab77c087afc356b9ddc8d5181a8a24f457576feee4fd915d72a06c4b49e5be025db10de99036527a78d666bbb468c399ef275741f0193cc187f1d2c3834823a1414872eb0d6889c64d6e90ffba9f03dbd3979c9c60f889919d189f71b8078e0713be013f631828b1e154aba965072ac8bb697e5d975ef1575ee149fe1ad100887e75f0c0b944d5e1d31f3b8cbe93b768f905e3507b4d655b624472d09c1104af3d095532a2c569f71f70651c8baf91ca944833831cad0a873ffdada10c8f0a330e75f1d39806361a6f24693ddf484e079ba25aa913e472baadd3e268b185c2e079bbdb45973e2de8d82b5ea95cb9686585125f613bf02afe3c7c36b63aa0b904b0970ad6908bb365b71f005c27cb924538cd499ed7530131ed4612bcd010acaf1a94869808d9cf8f03da501c257c79774cda0d09d60eb2d378b8455513d71c91f65ba331d033fddf9fff2a04d3ce280d0f6cc792406883d8398805b13b031a4bbb48892dd74189ac1a5a32617d4c55f624023e80926d8da0a1f4fc8c7fdd496d617a756354580dae2141abe18b6078f6d9bfe18e593eaed057ea9dcb091208301085d1fa186033fc0245365547d866eeb8f100289f7295c7f67afecf6829b1516dd309607bf31e0cc290ebc967f7fdedcfc3647565eed66062a2072315ce8bd27230db58990755306ce2f0e3c07949566f6ed9315b463f9cf1af3e368661b43d2e639a3326da95ed50563f2e7c9f9408675f15cb84ef13ae33ec411c829abc4fd66812d79e0094b4665b6d20b951fad086970d677642e8c1722ddf018622e09774981e46fcce80bb8507c806a74daba0bfa1064b05f481001c35aec51680d4d485cff47656962161a10ea01f3c60f871a22b376e2b689efc4d87a57c473c4eb3a832ecceb7e5e8057708b0b0f443773895b9bb657d911a949ff4052f29af02b93e4cabeff6e204fb3fe8ea576b0deddcc8ac2232f2a1f1d015a2b6ef5dd5df7aadb9306341c723771ca12363d793f26dbbeb31a1bf6d4b7ded0c8f069a67807c63bf841eba3acfaa7f9d2fc6b7cd3784d7558157a5fe63b875deb28df4c528875fc4a17cf6c43d5f0d56cbc9e5172c488661e6b7e03061d5eafef74bbe87d3a37d5833add1bb0a82d39c2a2065d1a157f2301125bc10ba428748c41fa67c32738c61dda4a6a42bc0edd0d63cbaee8865aad4f9593627ccbc38bcbe03a760525b38ca7897d7b95a39201d91d591a9c60da1ce6dcbca57c70ea8b3ca7030e80f120629c34048fbf8a2d69da3cbf8c0b39b8db53bc2dd69b960bdbc5ec38811d46e9438ea8b997a70b994caf9d9fd52bc112605deeb577abb3d83449a265b8658a92452daf9747c4e0c2a4703343bb2cc037deb3ac3d1cf68c56c182ea241200053e7304f85f9cc1b6dbf98ed1a67135d593c444ede5c690b27941c6939d8c0fe470aa95099b7d8fa65feab34fa665bb3e07960ed40ee8c8c34d90b2634f39669991c8fc262abff3d2465d6c75f43bc74a267e2ce989ba81b6c25dabf40eff1a41388cd89aa2d11402724782c8498f0d3a1e2659338ebe6411c702b065d9d6e2cb6c944071f33cb151d1378ea3aa23b69b9bb4d95fd86ea678d26613a14704df89c75b4a60ccb5e0b2e6a15d484c22ab995aa13913a8230bc6bd0b69f2aedd9582733acfc38905e253f6886c3051034b293109a83f0801b7b8dee42900f59d22641e11b7c348178dc5c4c2464d68653f7fbd55cc1056212789b93d0c34b708a66743669baf1a9b9d4dfcd1cc923e6b858950da296cd171461bb62c4c716c969cd9ca5e73444c161654a0f7f74d546c69cc6f32cdb423ba9a91007b59b91d045d6619aaac42f081204a8d5fd6ffdc7e50425854d3081d0f67d2a30f5dc62c6c338d762eb0089d36b529b0a54a1770d26757c6909252fa890cab505d7062149c077326683e28afd28454e733bf5ec75cab7b218affbe85095a0001c0bc4a8c175dfe712effb67b8916c3b295181a0e612a5ebcd87d9621c86a193762e357a01f59e45f787b837dfadf1a93ba6f25918753f02fc2c0533605d1a5efb268a6b666290ea5e88325aa9da559bab801721b820dfc8104ee6468c49878410179594bf9666fd25999c09015bb54f39379bbc0b2325f42a722b975b631a929c2bdf5234ba26edcdf72e304887cdf5855b9dc569867bf3a284d28bbf7c9fe98fa9a5d05b9f6fc019cd254fbf8ab5d3580be9d6449c49534cd46e96fe70d870c004a0b01dc739eb56d5d32a4eeb643cc31d0f4375241d751cb0c95df3df92e7b8738d7a370c6d7f25b9a3dc08a3f6c86139d26c7cfda1f19354c4d116895d1f5a996fe983df63d442db12a7e88db906d6e46a0764361846c9e088970fd4fd9216e99170918a262db8573107745dadc60ca3b3cd6ad49680ab8bbfa31d20ca61d5420490c8452c0847034c39ff757b2ed7e5612da6cf1c4c37f485b84511687cfce695876fb1bd557cb65bb2a59877f19ae59c57be782c1011b6d41f3abdc68505d8618995644b59a026abbbf581a282195f31f086e64e378751e8ae4cc315bc37156bf79790c75c0f1eb953039cd9eb0df3802b23529a451ddad38762372548a41c565a61aa117fbc06c6184fd34fa68c8a278669765d468eeca2eb3eafa7c6008b34d9ad42c1c35c50f58bbe5829a2662c49d340d3d361ac01fcde85b1b4fd7dfccba3b1535e3b9b5883cce31b31321dca9737ce8704e922735de29d65b8eafbb34631cb9d0d7b32c96a5b02626f08e6b7609f9707e207fd048d15bdcc636f3d9dcb2e795a80f844b842ec9dcfa07597399b8e23a286b62e3b325b3e49b14c92cd7e867c9a159c8adc56197838462bed20cf5f9d4c5cbd2398c9edb4cd2b67022cf7327afed4664786a6590b1910e09da9a4ca975317d1adbfb9ac9289a25ec03d4e3724177758d7abf564459d8b20e902a2883fc28a50bfdebae4d4e218875f8040d8627d879f3bf2e79e227b6a66ebd16cdc5b4190642b3ebc1deb720ca42c219d509e60293663472fdbb5075d41b94c0cfca472b094ec2fd151bb693b850c0966d30f40fba6ab1009ee813dbc8bf237bd7bb5ff08725abef69eabce01a27b080bf7bc56e9132a2bfc265d3b944a287c743197ab05872c49daba8e7e8d0675ed707e41fa2fd49b51c85e2c462982cad70cb4b158be543a20caead42b89a64c7ba3a3f359bbcc800fc3ca6b124744627b5eef1806c04355e20d5d8dd6e50c3891d39dca72e3dd68ae586d0bd5978d3d443087fabf2bddad4bd3e05880943eb7830ad171666f6309a14572f1a3f11e5ba6d2d6a6d5d4ccd58e07a809dd147cbbce9efa46b7ee9b6176b3d91e92a99d8c37e1c96ec6c9e040619da394a31eed7f4b035c634290c7eb7d276a6aae88c8dc428c94e82e278645810183df51e1484fadcc3720f70df5b1c70259b4f38f84292860c034ba517b63b2d6213e558d62177c5e43e42b5c4f014761e1dd5b75c8a3063ce5a5fe17ac6f7a2187e5b66437b054c547726a7f66332e45b94040328b8371b8143094596b6ff4d5954247775c9f946e4483395da777ae7dac873ae373a200c2d46f916736ff4a791fccce824f2a1adbfe861f0d507a3369e8f5cce999ab4a55d12bad7ae0e1f5c4153a6e44d52a0973a9e27bb76f95f03870aff9f62c7853122d73f71d9d9e3cfc84bca3f083ebd92d4e71bc725fa82ba77fe05009029d8b2e3c46a37412332a6367a64afaabca84695bc8432d1167e6bba8bda584bc9623169aaf7a133d87a529b9f30c0d48062b7ab0ac5f87ff323be647206a72ca4bf2350cfaaa47cdd46babd73ccd7aee046901c23ebb598c6d4b51f99da8bb79348358b985758f888dbd654c54e900a2e94057db45ce357bf49f56d78e42f71e83bd5169ba22ff6b96048001227bc53f95ea45c7542c3b057b78e257d3fed26a935d0f23438bacb7656d4c287a89dd5f7baef77e2b58a49162fb71d75a6118aacb9e4c73a98ba63a9954eef86682d25f861bc996cc5b811532aa53f05b64f10fac37bd2502a0d0f2905fda0c9c39a043a81bf605872fc49ead6106689704e753ff4ac8455531ffc842b6893555c65d41937028f9af2a80ddc18b986e3c3ed738f0fa0c641af320da5d3ac7142951e43c40a1f487011edd1cdecd181a5ce52a69efd8022186812b5c8e39e3f02434e72d99eaec7cc4e846a8438845c969e56b0725e5337089089c99ee0aefe59dbb963bc437e0bcfc153d7b05b428cffadcb2dce576d53f096d547bfdf52236286f8b47cb50f57160c818b033995e35f5b100ef68f5ab7981a6a79eb7529a21ac6060eae6f2a0f44fa0daadfec74e2984f0518066b8949c7d4204140b8482568dbf98c9ff91e6bede29f2d969de0e2e38980e56d03e30f92b25c7f10907409537d3c091a31a7b405e5f4747a00d0c624780ac43436af06596ee65c3e82780d236195310010000000000002900000002000000ab9e7e013f5f088ce84154a7290b62d285a0d2dd8113024164a4eee0d263b6ca95ab770d207e5c8f52cf687f1ebc7b58db51d4bd4d6916431d2773ddf9e0d48835b8c4402e3784b8c827331f39fa79d3a6efec136490358b8f41fbb3b61a0380a9b3ac8b21782c5fdbd190361053c4212e6e1cdb0824b8075f27829e906d86b7e33c43a19a3ad739005cef1ca895ed1cde709a02709f045969b8e935db3315e9084c37ca67da946e3fac2669df28686a6313a21384923bc0bd93da6bb3bdf9b3625b109885dd1c8650fba1e1dd9588deeae030aafed7a34116068525662b4369ec5f14940a3d54eeb33dbecc0a17adb4ed3687ec24df27f13ae91b000000000060000000000000000000000002000000c41fb1b94ef2da0b9e1aceeaa30401d49ee524557f0eb0283e3d0d2676fc37ce90bf39fe89a68fb0c4f316a5a247b0ad6326788658569744bd69dd5e43e8d9a5a069610b627da4dcc1228b116b0e000098000000000000000a010000090000002f98f45beed491773d47beddfe6f5db8cd5462d2ae132c32923949cb01067114910980ad03caedfbc09ad3617889c8d4c1257c21d76250d87561a8da7f6d77c5ea8cda41f2d1752120d9eee9f360a39fcb4efba83ba65a2d1d92330e7ec56077b296fc9d47c02ebbefd698838024cca86c7bc25b69f98ec8223c1fd5e1aaed3f9800000000000000"], 0x1228}, 0x7b5672cd5810713c) lseek(0xffffffffffffffff, 0x20400000, 0x0) lseek(r2, 0x20400000, 0x0) [ 558.286976][T11956] CPU: 0 PID: 11956 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 558.295807][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.305907][T11956] ================================================================== [ 558.313969][T11956] Kernel panic - not syncing: panic_on_warn set ... [ 558.320561][T11956] CPU: 0 PID: 11956 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 558.329326][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.339716][T11956] Call Trace: [ 558.343065][T11956] dump_stack+0x11d/0x181 [ 558.347421][T11956] panic+0x210/0x640 [ 558.351430][T11956] ? vprintk_func+0x8d/0x140 [ 558.356047][T11956] kcsan_report.cold+0xc/0xd [ 558.360660][T11956] kcsan_setup_watchpoint+0x3fe/0x460 [ 558.366054][T11956] __tsan_read4+0xc6/0x100 [ 558.370497][T11956] do_splice+0x1b2/0xc40 [ 558.374864][T11956] __x64_sys_splice+0x20a/0x220 [ 558.379775][T11956] do_syscall_64+0xcc/0x3a0 [ 558.384317][T11956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.390224][T11956] RIP: 0033:0x45aff9 [ 558.394142][T11956] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 558.414039][T11956] RSP: 002b:00007faae4923c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 558.422468][T11956] RAX: ffffffffffffffda RBX: 00007faae49246d4 RCX: 000000000045aff9 [ 558.430458][T11956] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 558.438438][T11956] RBP: 000000000075bfc8 R08: 000000000000fffd R09: 0000000000000000 [ 558.446663][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 558.454646][T11956] R13: 0000000000000b28 R14: 00000000004cc76c R15: 000000000075bfd4 [ 558.464442][T11956] Kernel Offset: disabled [ 558.468852][T11956] Rebooting in 86400 seconds..