[ 36.256466][ T27] audit: type=1800 audit(1552209321.331:27): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.286074][ T27] audit: type=1800 audit(1552209321.331:28): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.015228][ T27] audit: type=1800 audit(1552209322.151:29): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.036128][ T27] audit: type=1800 audit(1552209322.151:30): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2019/03/10 09:15:33 fuzzer started 2019/03/10 09:15:35 dialing manager at 10.128.0.26:38453 2019/03/10 09:15:36 syscalls: 1 2019/03/10 09:15:36 code coverage: enabled 2019/03/10 09:15:36 comparison tracing: enabled 2019/03/10 09:15:36 extra coverage: extra coverage is not supported by the kernel 2019/03/10 09:15:36 setuid sandbox: enabled 2019/03/10 09:15:36 namespace sandbox: enabled 2019/03/10 09:15:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/10 09:15:36 fault injection: enabled 2019/03/10 09:15:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/10 09:15:36 net packet injection: enabled 2019/03/10 09:15:36 net device setup: enabled 09:18:55 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="53b531ede9bdf187b589dac457d7de23666a63c4c1b8c13b7e2cda9d5db9b87b43c44bdd225c7cac1b7e62f71bebd75ab7f55fa7fb6e67790ed99e5cfab8ba6516430ac96a2cb33418a3052e39eac0c4eb0fa836de9c6fba7668ea76d11e89d7ff400a78eed5beff0ed4282984862aaa6f0fd01eea63bf16012644561a95c4d61652e8388b795d96b322b6d9eb0920d5a3b1b0d08dd6559ef8a5ffc8", 0x9c, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xc948}, 0x1) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/212) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000002c0)=0xffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x0, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'lblc\x00', 0x8, 0x9, 0x6}, 0x2c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3, 0x6, [0x6, 0x7f, 0x3, 0x9, 0x7, 0xcec]}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x4, 0x4}, &(0x7f0000000400)=0x8) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000440)={0xfffffffffffffffe, "947f3e9f3bf8c451fd6e36430b2234e379533ff6cde79f173e0532886a836591", 0x2, 0x8, 0x1, 0xffffff, 0xe}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)={r1, 0xfffffffffffffff8}, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x80, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x80, 0x40, 0xffffffff, 0x10001, 0x3ff, 0x80000001}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x50, &(0x7f0000000580)}, 0x10) tee(r0, r2, 0x10000, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uinput\x00', 0x802, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r0, 0x47) r3 = getuid() getgroups(0x9, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00]) write$FUSE_ENTRY(r0, &(0x7f00000006c0)={0x90, 0x0, 0x7, {0x3, 0x3, 0x5, 0x0, 0x4, 0x32, {0x5, 0x148, 0x9, 0x10001, 0x100, 0x1, 0x400, 0x6, 0x1, 0x7, 0xffffffff, r3, r6, 0x4}}}, 0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={r1, 0x10000}, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000800)="a6be4127ee1d7208db83c96cd9b8f55a", 0x10) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000840)) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000008c0)) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000900)=0x8654) getgroups(0x3, &(0x7f0000000940)=[r4, r5, r5]) syz_open_dev$vivid(&(0x7f0000000980)='/dev/video#\x00', 0x3, 0x2) setfsuid(r3) getuid() syzkaller login: [ 250.063073][ T7692] IPVS: ftp: loaded support on port[0] = 21 09:18:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/188, 0xbc, 0xfffffffffffffc00, &(0x7f0000000100)={0x77359400}) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xd0f, 0x40, 0xf2, 0x6, 0x2, 0x2, 0x3e, 0x9, 0xd0, 0x38, 0x29f, 0x9, 0x800, 0x20, 0x1, 0x20, 0x0, 0x9c9}, [{0x0, 0x0, 0x1, 0x9, 0xfffffffffffffeff, 0x401, 0x8, 0x1f}, {0x3, 0x1000, 0x3, 0x1, 0x800, 0x4, 0x3f, 0x10000}], "619d3da62c210fbba9c1b7a535f9dee622da9a4c897defbf4acef607200bfe92b8228273851b70a8416fa430fca09ddeded9b44c7cd4cffdc84e979dd8cda14442535aa3b8ed204d031fc89f"}, 0xc4) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000280)={0x6, 0x820e}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x294, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x17c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x685}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @local, 0xdb}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffff, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @loopback, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x9}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x74}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ba04422}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000006c0)=0x9, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000700), 0x4) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000740)=0x1000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000780)=0x80000000, &(0x7f00000007c0)=0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000800)={0x0, 0xfffffffffffff2fe}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x100000000, 0x100, 0x8, 0x1}, 0x98) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000940), 0x4) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2c, 0x25dfdbfb, {0x80, 0x90, 0x14, 0x9, 0xfe, 0x0, 0xff, 0xb, 0x1d00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r4 = syz_open_dev$vbi(&(0x7f0000000a80)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_crypto(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)=@del={0x100, 0x11, 0x600, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_ctr_aes256\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xe43}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x80000001}]}, 0x100}, 0x1, 0x0, 0x0, 0xc050}, 0x20000040) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000c80)={0x3f, 0x7}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000cc0)) bind$rose(r4, &(0x7f0000000d00)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast]}, 0x40) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000d40)=0x10000, &(0x7f0000000d80)=0x2) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000dc0)=0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8400100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x9c, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1e75}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6e5a}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040881) [ 250.167361][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 250.224522][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.234901][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.243713][ T7692] device bridge_slave_0 entered promiscuous mode [ 250.253924][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.261532][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.270853][ T7692] device bridge_slave_1 entered promiscuous mode [ 250.297523][ T7692] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 250.320239][ T7692] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 250.344818][ T7692] team0: Port device team_slave_0 added [ 250.359896][ T7692] team0: Port device team_slave_1 added [ 250.380471][ T7696] IPVS: ftp: loaded support on port[0] = 21 09:18:55 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x84040, 0x0) getsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x9) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x7fff}, 0x28, 0x3) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000001c0), 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x5c0f, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000280)="85f7a4a885f961ef5b3a73ed47d8dec92bead1efe06e318a4da1d0510ec1176ab363a700a59043653adbdcac266958fb3c05972c1985c73c813cb37cc801283d1a2790d3169588c52235dbbe474c387e033c12daf697a1a4c8365bfecdf3c6eefebdee7f524e0519e0dd836ea7bf1b", 0x6f, 0x10000}, {&(0x7f0000000300)="14c3203135a2daec67f0b876b8625d2bb5f007f6a865e048ab37b8be89ae494ea2c40f8cae5929b1be1824ca8f73e35c4ba3be56839824d399f18dcfc470f966cc3acf3a0d280c85e5bc5207a05636a704646ae1a83e3c89c9edf920baf348940df25386010224802533ccbc72b1c7ccaff00cdef319e46749c3104b1a8b54bfcbe5770d59670ea6795ea90e71a1ec84808a3efd21716531c0d19ad66c0d1f0c5a35bd7c588e9a8b599e2b7bb8cfe96ba441ce200a118705d5562af59e77ab8b28dd0954a2d911e92ac2be8a2369d4cd251b42d5828aa522b2eae67039dd17a3455decb343e6", 0xe6, 0xc2a3}, {&(0x7f0000000400)="1e2d20fb8413dfc64139a77dd435b6dad008d06c3c3b5e0cbd892ca4898f32ded191d18f11977487d2be13dc8c10c4c8605c068200eb5595efc486a217c9d38fd305f4228ff570f0b390647dd9aedf4ce93f17e5ea192ab4c98d5909c176be351a6deaa5446d4ba2ec914d6009b601558d2eefab0409e822f0a5319682e24140c68f00613861122538c6b4e08ce0324a76366239e816699dd201d8bea39a5fae5a85324c1ed21b66170d49d1e96027de066771d4ea0e1bb5dababc966f11ebe165810601f777032eaa22389100d1c911099d34a7861f922365", 0xd9, 0x7f}, {&(0x7f0000000500)="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", 0xfe, 0x8}, {&(0x7f0000000600)="5533b108fd7ca51080d37c58184ae933a59a9d2278ea07a453b3a5c180d22fbafdb42cff7889a727a89c35a4c226ad092f91d423bbfb063c3446ca7a4d6a19c41d6d63e056e34b624d9c0b1f074cae623a222f0d0c8638ec2cb068cfe478da019c8288deb2c0089790", 0x69, 0x9472}, {&(0x7f0000000680)="c7c31a94b0370bcd57fbc845356787b0b6e83acd5fc5a1c422125f45c4d0cf72b0e945875c1327dbb524f3b9a7fa6e3fd6bf82", 0x33, 0x2}], 0x80000, &(0x7f0000000800)={[{@lazytime='lazytime'}, {@inode64='inode64'}], [{@fsmagic={'fsmagic'}}, {@hash='hash'}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor'}}, {@euid_lt={'euid<', r2}}, {@subj_type={'subj_type', 0x3d, 'GPL{%('}}]}) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000008c0)=0x8, &(0x7f0000000900)=0x4) r4 = semget$private(0x0, 0x0, 0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000940)={{0x9, r2, r3, r2, r3, 0x4, 0x9}, 0x3f, 0x0, 0x81}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000009c0)={0x0, @aes128, 0x2, "7b71006cfc3c2a0b"}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000a00)=""/98) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000a80)="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", 0x1000) bind$llc(r0, &(0x7f0000001a80)={0x1a, 0x332, 0x1f, 0xffffffff, 0xffff, 0x0, @remote}, 0x10) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/vfio/vfio\x00', 0x200800, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001b00)=@sack_info={0x0, 0x40, 0xefb}, &(0x7f0000001b40)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001b80)={r6, 0x80000000, 0xfb7b, 0x8, 0x47a6, 0x100}, 0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r5, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f0000001bc0)) syz_genetlink_get_family_id$team(&(0x7f0000001c80)='team\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001cc0)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x8, 0x0, "58975ac5eb986e74852b112ebfb8c35881798f8573e8e42cca878d0ea2291fbe00a8ecdebe979f0c5db5ae4a0f904ecca53b077fb36b8f6d904428ade9d3fdb83eb9035ebe64e1d8208f2673d0b262d6"}, 0xd8) ioctl$TIOCNXCL(r0, 0x540d) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/null\x00', 0x200, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) fchownat(r0, &(0x7f0000001e00)='./file0\x00', r2, r3, 0x400) accept$inet(r7, 0x0, &(0x7f0000001e40)) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001e80)="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") ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000001f80)={0x7fffffff, 0x3f, 0xd09d, 0x2, 0x100000001, 0x400}) [ 250.472671][ T7692] device hsr_slave_0 entered promiscuous mode [ 250.549880][ T7692] device hsr_slave_1 entered promiscuous mode 09:18:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x40b7, 0x102) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xbb, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x8, 0x1}, 0xc) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000240)=0x1094) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r2, 0xc77, 0xfafd, 0x6}, 0x10) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x16, 0x100000000, 0xb, 0x10, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x100000000, @dev={0xfe, 0x80, [], 0x13}, 0x5}, @in={0x2, 0x4e23, @local}}, @sadb_x_sec_ctx={0x7, 0x18, 0x9, 0x3f, 0x2a, "d2148cb81281db666a88c1259fe58cd37820a4384dc807452cb382691c1a675ea296f1d65eb25fce2f5b"}]}, 0x80}}, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x7fff, 0x9889, 0x1, 0xa1, 0x0, 0xff, 0x80020, 0x0, 0x4, 0x6, 0x5, 0x8, 0x2, 0x100000000, 0x7fffffff, 0x7, 0x7, 0x4, 0xb468, 0x78a, 0x2, 0x8, 0x80, 0x2, 0x0, 0x4, 0x6, 0x5e48, 0x5, 0x1, 0x325, 0x5, 0xaa75, 0x67a, 0xff, 0x401, 0x0, 0x1c9, 0x5, @perf_bp={&(0x7f00000003c0), 0x8}, 0x400, 0x2, 0x401, 0x6, 0x862e, 0x7fffffff, 0x7f}, r4, 0x8, r0, 0x8) ioctl$TIOCCBRK(r1, 0x5428) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r8 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$chown(0x4, r8, r5, r6) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e21, 0x9, @mcast2, 0x1dd}}, 0x0, 0x5, 0x0, "74e9cc7cb54eed07de55aca557c9234038bc1b6ef88ccba702129fbb6a6a849a464776bd4d3618303a6657bd1be1e59ac766f660503a4f1717bb9478c7e5fc1a5f0d07768690cda249b5dd5d3a79476e"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000007c0)) accept4(r0, &(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000880)=0x80, 0x80800) setrlimit(0x0, &(0x7f00000008c0)={0x7fffffff, 0x2}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000900)='tls\x00', 0x4) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000940)={0x1, 0x62, "73b15c2b6830a68505d876f99517932c3d3070043190223190e3429b1b8ea10eecb0257daeca6d2e688faa19630f251541d8bba0d482fce130103427a14c8451835a1746fe559690161d4d86b617d14fc9489464b1854ce9882cb389576ceba8ddba"}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000a00)={0x0, 0x692, 0x0, [], &(0x7f00000009c0)=0x100000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000a40)={0x3000, 0x105000}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/self/net/pfkey\x00', 0x301000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/syz0\x00', 0x1ff) ptrace$poke(0x5, r4, &(0x7f0000000b00), 0x7) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000b40)={@initdev, 0x0}, &(0x7f0000000b80)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000bc0)={@mcast1, 0x27, r10}) 09:18:55 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) io_setup(0x1, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, {0xa, 0x4e20, 0x80, @empty, 0xfffffffffffffffd}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000240)=0xfffffffffffffffc) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000300)={0x807f, 0x2}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x9, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff86}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000480)=0x0) ptrace$setsig(0x4203, r4, 0xc, &(0x7f00000004c0)={0x31, 0x0, 0x7fff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mq_timedreceive(r1, &(0x7f0000000540)=""/4096, 0x1000, 0x401, &(0x7f0000001540)={0x0, 0x989680}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000001580)={0xf262, 0x5}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000015c0)={0xe, {{0xa, 0x4e22, 0x3, @local, 0x3}}, {{0xa, 0x4e21, 0x2, @loopback, 0x4}}}, 0x108) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) syz_open_dev$loop(&(0x7f0000001700)='/dev/loop#\x00', 0x1, 0x40) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000001740)={0x7e489d1b}, 0x4) r5 = add_key$user(&(0x7f0000001780)='user\x00', &(0x7f00000017c0)={'syz', 0x2}, &(0x7f0000001800)="a9775a336b2259a5e5874b9e5de50ce338152d7e794d52c260436184c1bf0a78d96148b19289aad244a2f600d246294e59a47b346e915452a82fbb990f74da65baff6ef3d96d8ac771417f6e0852615bc346c3564bb8af5d8d12aae64b623c23f23741b35e3fd9d45ddab667f1ce13fd362e455810d953026e794367ee92e0b43aa8f62af39fbd8e5e1d666e4aa755e9d0c6d8eb5eb3083062bc1aa110220e9992ae1fd8a32c482f9b96256b9212a85f8898044d4db1fc116e7685d0c3520331241aa2c8e9ed42e088741c88bae05d70dc84c91dcd416b0dac02745a2d57f66127", 0xe1, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r5) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000001900)={0x0, 0x3, 0x80000000000000, 0x200}) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x1f, &(0x7f0000001940), &(0x7f0000001980)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RWSTAT(r1, &(0x7f00000019c0)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001a00)={r1}) [ 250.768468][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.775761][ T7692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.783647][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.790756][ T7692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.815360][ T7700] IPVS: ftp: loaded support on port[0] = 21 [ 250.840432][ T7698] IPVS: ftp: loaded support on port[0] = 21 [ 250.992874][ T7703] IPVS: ftp: loaded support on port[0] = 21 [ 251.001014][ T7692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.107047][ T7692] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.125953][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.140649][ T22] bridge0: port 1(bridge_slave_0) entered disabled state 09:18:56 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa800, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1, r3}) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x82) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r3, r2, 0x2}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000180)={0x5, 0x9, 0x8}) pread64(r4, &(0x7f00000001c0)=""/4096, 0x1000, 0x9) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) syz_mount_image$ceph(&(0x7f00000011c0)='ceph\x00', &(0x7f0000001200)='./file0\x00', 0x1, 0x1, &(0x7f0000001300)=[{&(0x7f0000001240)="09b11dcbd20b258bb2abe4550bcfb9ae2ee90fadb2cf4f1b75c32f4017f0acdee8b749fdab0f3b35530710c4e0e9c5cb72ac7c98bbaa0925ab5f3dab24dd56c63d13f324e8aa41f3fddb02435f696d4c31b226d77929396dc77a857e497e722a979521cb9c0867526fa2ad5807ee0205b18c6fb5c3088f695319da86949562597857ade6749bef7c6772151f492f7595519502cbf21f1b7d64fc3b6d4fecc830cc96a1", 0xa3, 0x60a}], 0x80005, &(0x7f0000001340)='trustedmime_typevmnet0\x00') ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000001380)={0x20, 0x94, 0x3}) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f00000013c0)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) unlink(&(0x7f0000001c80)='./file0\x00') r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$nfc_llcp(r0, &(0x7f0000001cc0)={0x27, 0x1, 0x2, 0x7, 0x8, 0x200, "22d96a57b5b6ef66cd7c4ac7d2e3fa4d81b4dcb8c66746bdcf02d984dc2b210dcaf3fb686693bdfd37ee19982bdf103476a63d80bda17b8963ca1fbbf76d16", 0x14}, 0x60) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001d80)=[@text64={0x40, &(0x7f0000001d40)="45d9f4410f01f867d9e50fc76b60262e67400f01c90f08430f06c403216d43080f0f01cb48b8ea4a57733f6219260f23d00f21f8353000000e0f23f8", 0x3c}], 0x1, 0x2, &(0x7f0000001dc0)=[@dstype0={0x6, 0x4}, @vmwrite={0x8, 0x0, 0x100000001, 0x0, 0x4, 0x0, 0x5}], 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001e00)={0x0, 0x4, 0x10}, &(0x7f0000001e40)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001e80)={r6, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x6}}, [0x7, 0xc5, 0x6, 0x0, 0x7, 0x10000, 0x54, 0x5, 0x1fffffffe, 0x8, 0x1, 0x3, 0x7, 0x1, 0x6]}, &(0x7f0000001f80)=0x100) socketpair(0x2, 0x80800, 0x0, &(0x7f0000001fc0)) syz_open_dev$evdev(&(0x7f0000002000)='/dev/input/event#\x00', 0x423, 0x60c401) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000002040)={&(0x7f0000ff2000/0x2000)=nil, 0xffffffff, 0x1, 0x1c, &(0x7f0000ff3000/0x1000)=nil, 0x9}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000002080)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000002140)={0x3, "cefd4fda7f761b39e2e902fc77bfa38a4caeeb1e0f649a8ea487b9e96fe56078", 0x2, 0x9, 0x0, 0x19, 0x3}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) getresgid(&(0x7f0000002240), &(0x7f0000002280)=0x0, &(0x7f00000022c0)) r9 = getgid() getresgid(&(0x7f0000002300), &(0x7f0000002340)=0x0, &(0x7f0000002380)) getgroups(0x4, &(0x7f00000023c0)=[r7, r8, r9, r10]) [ 251.160784][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.175346][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 251.277544][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.287136][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.294228][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.302135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.310609][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.317644][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.325760][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.336804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.353021][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 251.369812][ T7710] IPVS: ftp: loaded support on port[0] = 21 [ 251.397061][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 251.412925][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.422975][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.431467][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.439814][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.448125][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.456462][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.471425][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.495623][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 251.578082][ T7692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.621677][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.629952][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.638030][ T7696] device bridge_slave_0 entered promiscuous mode [ 251.677511][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.686270][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.694086][ T7698] device bridge_slave_0 entered promiscuous mode [ 251.701794][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.709085][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.716620][ T7698] device bridge_slave_1 entered promiscuous mode [ 251.723904][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.731135][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.738898][ T7696] device bridge_slave_1 entered promiscuous mode [ 251.753156][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.760298][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.767825][ T7700] device bridge_slave_0 entered promiscuous mode [ 251.775441][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.782637][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.790886][ T7700] device bridge_slave_1 entered promiscuous mode 09:18:57 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 251.842168][ T7698] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.880836][ T7700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.903038][ T7698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.939345][ T7696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.953324][ T7703] chnl_net:caif_netlink_parms(): no params data found [ 251.962934][ T7700] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.983473][ T7696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.993771][ T7698] team0: Port device team_slave_0 added [ 252.001171][ T7698] team0: Port device team_slave_1 added [ 252.035246][ T7700] team0: Port device team_slave_0 added [ 252.048107][ T7700] team0: Port device team_slave_1 added [ 252.094944][ T7696] team0: Port device team_slave_0 added [ 252.170465][ T7698] device hsr_slave_0 entered promiscuous mode [ 252.209024][ T7698] device hsr_slave_1 entered promiscuous mode [ 252.248952][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.256072][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.265844][ T7703] device bridge_slave_0 entered promiscuous mode [ 252.277370][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 252.292486][ T7696] team0: Port device team_slave_1 added [ 252.331870][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.339011][ T7698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.346386][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.353525][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.362400][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.371271][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.380832][ T7703] device bridge_slave_1 entered promiscuous mode [ 252.392399][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.399996][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.439258][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.446358][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.454919][ T7710] device bridge_slave_0 entered promiscuous mode [ 252.463369][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.470896][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.479480][ T7710] device bridge_slave_1 entered promiscuous mode [ 252.542355][ T7700] device hsr_slave_0 entered promiscuous mode [ 252.579091][ T7700] device hsr_slave_1 entered promiscuous mode 09:18:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200400, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vfio/vfio\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/sequencer\x00', 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 252.690336][ T7703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.716938][ T7724] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 252.741551][ T7696] device hsr_slave_0 entered promiscuous mode [ 252.768943][ T7696] device hsr_slave_1 entered promiscuous mode [ 252.832163][ T7703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.850748][ T7710] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.863727][ T7710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.889441][ C0] hrtimer: interrupt took 26013 ns [ 252.924212][ T7724] kvm: emulating exchange as write [ 252.925027][ T7710] team0: Port device team_slave_0 added [ 252.943585][ T7710] team0: Port device team_slave_1 added [ 252.976142][ T7703] team0: Port device team_slave_0 added [ 253.071551][ T7710] device hsr_slave_0 entered promiscuous mode [ 253.109048][ T7710] device hsr_slave_1 entered promiscuous mode 09:18:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200400, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vfio/vfio\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/sequencer\x00', 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 253.155643][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.162756][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.170167][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.177265][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.223517][ T7703] team0: Port device team_slave_1 added [ 253.243489][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.306116][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.327658][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.345453][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.367283][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.393664][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.401536][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.451654][ T7703] device hsr_slave_0 entered promiscuous mode 09:18:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200400, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vfio/vfio\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/sequencer\x00', 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 253.493938][ T7703] device hsr_slave_1 entered promiscuous mode [ 253.590385][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.606589][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.615300][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.622432][ T7702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.647094][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.694990][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.707231][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.721916][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.733813][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.745750][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.757846][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.764969][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.780271][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.794802][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.810465][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.829309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.838071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.853532][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.860673][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.874677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.883741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.899211][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.906272][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.920448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.934969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.968144][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.982200][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.999140][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.007283][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 09:18:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'L\x91\xf8\xe0L\xa2\x9d\xe0aU\n\xa2\xc1\xff\xbb\x84\xf4 \xd4\x84=\x19\xf8\x0f\x0es\xf3\xb3\x81\x1d\xd1kO\x96\xcc\x1cco\xa3\xc6\xd5>\x0e1\x8c\x8bZ\xb0\x99\x93\xe6\xdd\x05\x1a\x8d<\xccU$\xd6\xc1\x93\x18\xe7\xdc\xd8[\r\x17\xa5\x8ct\xe6\x81\xfb\xb7\xa8\x00@\xf1.K\xa1\xde\x13\x18[;\x91\xb6\xcb\a\'\x02\xe1\xd9\x06Y\xc4\x060\x87g\xb8)\x02\xb3s\n\x87N6\xf2\xe1\xb5\xecr\xa1\xc3Z\xde\xfa\xf5\x01\t\xd5\xc4\xe4\xc0k\xb0\xfc\xc7\xf4\xbfh\xd5\xf1F\xaa\xa9\xdeH\x92\xdf\xb3W\x15\xf7~\xda\x95\xfa\xc4cM\xa6\b\xf2u.\xd3p\x849 \x98:JA\xbb\x8b\x1d\xb6?\x8bk\x89|\x8f\x93\x85%\xb4a\x0e\xf63\xad\x93\r\x9e\x94Z\xf2\xbe: \xde&\xa0\x9a\xd6\x94K\x96I\xd3\f\xdd)\x8d\xb8\xe5lT\xa4!\x97\xa5\xe2\x94\x99\xd0e?\xbbr\x8f\x93\x96kG\xc7\xa7\x1bwP') r1 = syz_open_procfs(0x0, &(0x7f0000000400)='cgroup\x00') sendfile(r0, r1, 0x0, 0x1) [ 254.021833][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.031725][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.050067][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.058424][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.067597][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.075908][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.083780][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.091694][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.100210][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.108263][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.115968][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.123512][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.132121][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.140473][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.147495][ T7702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.155115][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.163537][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 09:18:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc25c4110, &(0x7f00000001c0)="9a67dfa30000000000000001") [ 254.172782][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.180014][ T7702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.187614][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.196974][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.204887][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.214371][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:18:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2401}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$smack_current(r0, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', 0x19a) [ 254.259692][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.268295][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.285230][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.294385][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.309088][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.316149][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.325167][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.337769][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.346306][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.354812][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.363207][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.370307][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.378297][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.387307][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.395666][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.404659][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.413709][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.435622][ T7745] device nr0 entered promiscuous mode [ 254.457927][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.467448][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.476444][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.485375][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.493730][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.502927][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.514591][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.599674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.608288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.630017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.638533][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.662497][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.695222][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.707175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.719305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.727690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.744429][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.763799][ T7710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.804898][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.829876][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.843093][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.852120][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.860916][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.869194][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.877401][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.885746][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.894651][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.903472][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.912910][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.937575][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.971466][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.001540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.021295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.044264][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.053460][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.068318][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.075434][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.092947][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.101935][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.110340][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.117379][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.126079][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.158920][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.176438][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.185901][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.195539][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.204341][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.213043][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.221669][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.230086][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.239178][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.253475][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.297623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.311056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.325873][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.375336][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 09:19:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8) 09:19:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xdffffffa) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) close(r0) 09:19:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, 0x0) 09:19:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f6275730a0b0c89c97f8bc1c3b65e8b59760174e989c9499b1ae6c0ceda263c3824f31d69f5a5b23c6e4c0c938bba79236bbb8371f9427550beb3b2cae204ace618a9e927a4a47f3fc50e909867235beec451981f8b243d33a5dd697cb5e60c91e1bf9363d2d31929cd7beb152fab4ad63f1bd65475d2e46db0c5562691023ce3f2d70311163f4afce3f42086324649a0822ae0e0d411b8cf3153a955f4f3801693c2ddebb1a2ed04bd"], 0xae) open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) pwrite64(r1, &(0x7f0000000000)="55fc3851dcccaedfeb82d7fdb9bae1036cd7c30aea4367ff64377a1e6ed45722d04816b595", 0x25, 0x54) sendfile(r1, r0, 0x0, 0x8000ffffdffe) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 09:19:00 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00\x10\xb6\xb2\xba\xc0\xfbK\xaa&\xb7\x03\xde\x9b\x97F\xe3\x12\xcb\x97Y3\xd6b\xa1S\x97\xc1\f6UJ\x81\xb9\xc1\xd0\xf0r\xfb\xc6BR\t\xb9\x06\xc83\xf5U\x02\xee\xc1\x1e\xff\xeaJ\x1fwwp~z7\x95\\\x19E\xb5\xba4\x108\x97\x13\x96\xb5\x8f\xd3\x18\x1a\xf7\xc6T\x94\xf5A)p\al\x00\x00\x00\x00\x00\x00\x00\avm\x1b\x19e\xd4M\x9bS}HU\xe3d1\xb8Gx\x1f\xd1-\xfd\xf8D\xca\x15\x0f\xd1j}@f\nW\xaam\x02\xb9\xb4\xe8Z\xdd\xa9\xfcLYE\x1a\x94A\x93\x1br\xd5\xbb\"\x98\xcdHL\x86\x0f\x11\xf4\x89\xc1\xf5\xf3f\x8b\x8e\xdfl\x9a\xb3\x99\xa2\xc2\xaf\xc1\f\xb2\x82\x8d\xb1a\x87\xad\x96\x06i\xef\x05\xe8T\xd9\x8c\xff\xf3\xb9s\xab\xe9\xeb\xc6\xc2\xf2u\x93\xc8-') syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') 09:19:00 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) poll(&(0x7f0000000c40)=[{r0}], 0x1, 0x0) 09:19:00 executing program 5: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x2, 0x138, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'syzkaller1\x00', 'gretap0\x00', 'vlan0\x00', 'dummy0\x00', @link_local, [], @remote, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10}}]}]}, 0x1b0) 09:19:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'L\x91\xf8\xe0L\xa2\x9d\xe0aU\n\xa2\xc1\xff\xbb\x84\xf4 \xd4\x84=\x19\xf8\x0f\x0es\xf3\xb3\x81\x1d\xd1kO\x96\xcc\x1cco\xa3\xc6\xd5>\x0e1\x8c\x8bZ\xb0\x99\x93\xe6\xdd\x05\x1a\x8d<\xccU$\xd6\xc1\x93\x18\xe7\xdc\xd8[\r\x17\xa5\x8ct\xe6\x81\xfb\xb7\xa8\x00@\xf1.K\xa1\xde\x13\x18[;\x91\xb6\xcb\a\'\x02\xe1\xd9\x06Y\xc4\x060\x87g\xb8)\x02\xb3s\n\x87N6\xf2\xe1\xb5\xecr\xa1\xc3Z\xde\xfa\xf5\x01\t\xd5\xc4\xe4\xc0k\xb0\xfc\xc7\xf4\xbfh\xd5\xf1F\xaa\xa9\xdeH\x92\xdf\xb3W\x15\xf7~\xda\x95\xfa\xc4cM\xa6\b\xf2u.\xd3p\x849 \x98:JA\xbb\x8b\x1d\xb6?\x8bk\x89|\x8f\x93\x85%\xb4a\x0e\xf63\xad\x93\r\x9e\x94Z\xf2\xbe: \xde&\xa0\x9a\xd6\x94K\x96I\xd3\f\xdd)\x8d\xb8\xe5lT\xa4!\x97\xa5\xe2\x94\x99\xd0e?\xbbr\x8f\x93\x96kG\xc7\xa7\x1bwP') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) 09:19:00 executing program 0: 09:19:00 executing program 5: 09:19:00 executing program 2: 09:19:01 executing program 1: 09:19:01 executing program 5: 09:19:01 executing program 0: 09:19:01 executing program 3: 09:19:01 executing program 2: 09:19:01 executing program 5: 09:19:01 executing program 1: 09:19:01 executing program 4: 09:19:01 executing program 0: 09:19:01 executing program 5: 09:19:01 executing program 2: 09:19:01 executing program 4: 09:19:01 executing program 0: 09:19:01 executing program 1: 09:19:01 executing program 3: 09:19:01 executing program 5: 09:19:01 executing program 4: 09:19:01 executing program 0: 09:19:01 executing program 2: 09:19:01 executing program 3: 09:19:01 executing program 1: 09:19:01 executing program 5: 09:19:01 executing program 3: 09:19:01 executing program 0: 09:19:01 executing program 4: 09:19:01 executing program 2: 09:19:01 executing program 1: 09:19:01 executing program 5: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x842, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x8) getgroups(0x0, &(0x7f00000005c0)) getgid() ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000440)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 09:19:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 09:19:01 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 09:19:01 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 09:19:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:19:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fstatfs(r0, &(0x7f0000000080)=""/233) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r1, 0x89f3, 0x70a000) [ 256.781410][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.789393][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state 09:19:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) r3 = socket(0xd, 0x2, 0x7) accept4$x25(r3, 0x0, &(0x7f0000000000), 0x80000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 09:19:02 executing program 1: r0 = socket$kcm(0x10, 0x7, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3ff, 0x44ec6915f1d4400b) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0xa, 0x3, 0xffffffff7fffffff, 0x2, 0xcccb, 0x10000, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @multicast1}}, 0x80000000, 0x3f, 0x1, 0x1, 0x8}, &(0x7f00000002c0)=0x98) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001a008100a00f80ecdb060000800000000000000002000000120001000800da1b40d8e36ec226b619a9ff", 0x2e}], 0x1}, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x8) [ 257.279606][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.286793][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.294264][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.301383][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state 09:19:02 executing program 3: mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x48, 0x0) fanotify_mark(r1, 0x1, 0x18, r0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x40000010, r0, 0x0) 09:19:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x752, 0x4) listen(r0, 0x11000000000b) listen(r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffeffffffff, 0x4) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x8, 0x840200, "bd663d29f2f96bdabdccb8cac1e79403621c30832c8b9b43", {0x2, 0x200}, 0x5}) [ 257.402146][ T7899] device bridge0 entered promiscuous mode 09:19:02 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) write$FUSE_WRITE(r4, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0x3, {0x7f}}, 0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd34e5463ba3daa1799bbfd175136b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d3a48b03817799416f0ccacfe9bb25ce"], 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000380)=0xb) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 09:19:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x29, 0x0, 0x0) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x20000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xf46, 0x1000000, 0x3, 0x7, 0x80, 0x6}}, 0xa) mmap(&(0x7f000079e000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x3d, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x5, 0x0, 0x7, 0xe2, 0x10, 0x1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000300), 0x10) [ 257.855566][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.862830][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.883723][ T7884] device bridge0 left promiscuous mode 09:19:03 executing program 5: timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {r0}}, 0x0) clock_gettime(0x7, &(0x7f0000000340)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {r1}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x3ff, "9183edc87f473b655733017a33f1971c8dcd690850e980784fd0f0cb2fe4b318", 0x1200, 0x5, 0x0, 0x8, 0x3}) 09:19:03 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0xfffffffe) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)=0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e21, @broadcast}}) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r2 = syz_open_dev$radio(0x0, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x9}, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000180)={0x6, 0xfff, 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000000300)) prctl$PR_SET_PTRACER(0x59616d61, r1) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) 09:19:03 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='\xe90\x05\x056q\x14\xfc') ioctl$VT_RELDISP(r1, 0xb701) 09:19:03 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x2, 0x20, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x6558}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) write$capi20_data(r0, &(0x7f00000000c0)={{0x10, 0x9, 0x86, 0x83, 0x3, 0x7fffffff}, 0xe4, "250c46ac64702c9900fb7bcde8e8314d42dd82b7a54f0672af514c1aa1bba94a39d6829551b1d5060f0e9c96dbed67eb5e0277abc178a5167438a02cffd6c58d67f517c466adc7403bf149d6abe0c2f3b890010c0efaa7475dba0f6996adb4ae54654a9a446c11014a0876dedf0eea89b2942b309ede3a9b2e5e22674fb44d752623ab7fb61c1b6a3cd75d41422a588e10c73cf45332627c46f9b9019e6c835bf565c83e223e3cd9e736d29fa51e1c02aebc2febbbbec5cdb6e28791c3b56eff3fa910833e5ff6f35e86244090f4d159cf14b9258f37e2685330dba8905dcefda2151eb0"}, 0xf6) 09:19:03 executing program 0: mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x10000, 0x3, &(0x7f0000fed000/0x10000)=nil) 09:19:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000180)=""/114}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x200000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:03 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x40800, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x3ff, 0x101200) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)="46f651f1867e2adf6ef7a8c9cc73af51", 0x10}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x28, 0x1}, 0x8000) r7 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2002) read$alg(r5, &(0x7f0000000380)=""/115, 0x73) fcntl$setstatus(r7, 0x4, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000280)="7d00833e7dea9fb6837bc79b9acacefa4e", 0x11) 09:19:03 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d) listen(0xffffffffffffffff, 0x25) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4002}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000), 0x8) 09:19:03 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x181080, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) close(r0) [ 258.335643][ T7977] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 09:19:03 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) sendmsg$xdp(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x2c, 0x7, r2, 0x24}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="d6922031f7ef6c0fa762ce2ef36aed9e7ff3c1f3a6ead54826349ed37e16c880327fcf032535c152fd534f9f161608d6be0e2c90037cd3207af007989c7ce4157be1e89fcd2729b91507c15e233a", 0x4e}, {&(0x7f00000003c0)="70d694d0627b4d9ce4b7e671dfb74c03aaf7dcee5e50bdf861ab253a1a151110bbb376a7d965372b5caa0b3f1cfaac2f2d5b315d9ce01246e1e9ecf2c5b82c02af14c206fce2bf1f190522b80c829a3655d2d85042dacfc1d08130046ab0ba7758149d709031e6e74ac91b4022f279e5b8727af7aa8a61bf44adb95a255bd336670f01c1cea52360f037d246c7e924de223317e5b253ad87bc2f9b445760061893f2db71e3d7f2026b8d45e14db3b17c077f2d0926f2ada4d89197979b62", 0xbe}], 0x2, 0x0, 0x0, 0x10}, 0x40) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="24000000100007031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e"}]}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0xffffffff, 0x8001, 0x9, 0xa4, r1}, 0x10) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000140)) 09:19:03 executing program 4: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x58, 0x800, 0x100000000, 0x1, 0xc4, 0x4ad}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000140)=[{{}, 0x1f, 0xfffffffeffffffff, 0x1000}, {{r3, r4/1000+30000}, 0x17, 0x4, 0x15}], 0x30) 09:19:04 executing program 0: r0 = socket(0x1e, 0x804, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x303}, 0x10) 09:19:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x100000000804, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup3(r1, r3, 0x0) 09:19:04 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xfffffffffffffff9, 0x2) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '?'}, 0x119) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xac5}], 0x1) write$P9_RLOCK(r2, &(0x7f0000000280)={0xfffffffffffffe61}, 0x26d) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[], 0xfffffffffffffffa) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 09:19:04 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0xf, {0xfffffffffffffffc, 0x2000000}}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x8) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r1) 09:19:04 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0xcd55) lseek(r0, 0x0, 0x3) 09:19:04 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @initdev, @local}, @igmp}}}}, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x5, 0x6, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x2, 0x7, 0xfff, 0x80000000, 0x80000000, 0xffffffff7fffffff, 0x101, 0x19bc, 0x1, 0x1f, 0x44, 0x4, 0x776, 0x6, 0xfffffffffffffffb, 0x3d, 0x8000, 0x2, 0x100, 0xce7, 0x1, 0x1, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x3, 0x9, 0x0, 0x400, 0x0, @perf_bp, 0x200, 0x8, 0x5, 0x7, 0x9, 0x3, 0x7ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/83, 0x53}], 0x3) 09:19:04 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 09:19:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x6, 0x0, 'client0\x00', 0x4, "a55742447365b66d", "9899fc086e7a1fd5db0ac21a7bb96353b138d5378f57477566bbece7eebc06d5", 0x4, 0x6}) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000000)="580000001400192300bb4b80040d8c5628693232fba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) [ 259.266160][ T17] hid-generic 0000:0000:0000.0001: item fetching failed at offset -1439541695 [ 259.301254][ T17] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 09:19:04 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppoe, &(0x7f0000000100)=0x80, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500d, &(0x7f00000000c0)) 09:19:04 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80801) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x9}, 0x34e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10100, 0x0) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000080)="288c44e5ad87d39d23c047ca6d2b9964b67f10d759ae30c9c4c1f892") ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000140)={{0x1, 0x9, 0x1, 0x40000, 0x4, 0xfff}, 0x3f, 0x6, 0x3ef, 0xa, 0x5, "ef323f73f18233131a5038d69cda07c5efc7066aac0d7beac3644d728fe9f197d5fdde9599828a5d50723dc238484d26564eb44ebaee03416d934d64e2175cb0b7ee61e39ac253199cd3f5d8b2fd1d5a36d5dcac51bcafd232d2ac7cfe7c2da546363c5589883fb8c9ae4f118c59318fa25fcfe33063cd4f1d1d9b65e7150e2b"}) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) shutdown(r1, 0x1) 09:19:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfffffffffffffffd, 0x8000, 0xfc, 0x3ff}]}, 0x10) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 09:19:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={0x0, 0x0, &(0x7f0000013ff1)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000180001030000000000000000010000000c000100000000000000000061cd724b489101207d42fa63eea5dab1493cbf4dbfa94a88a89f1ba4de803f595f3b4ca2d8a7257c55645c38c800553252f6a37fbb44280327bc56cd20e58a66baeccb1368aa6c902653157cc949b5996c77a8ed6afea0e601ec45758cc0638b28bb250f1d7fcf8587418f1d886ecfb6789f33df7f3673dad485e72de927b9b585f6ce9cab43e7ca58011fc890edf73faf7e7a0e4229e9a19788ed5349d0b8b415f5652d54038da20ce6c1757bab7898aa0ee5d29dbf72ff3b85f3955de3bd2bdd6e83528b9a8c0000000000003b7869b4259bc32dc802a9b4847c04f84c83bb70"], 0x20}}, 0x0) 09:19:04 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffbef}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) r0 = semget(0x2, 0x7, 0x0) semtimedop(r0, &(0x7f0000000200), 0x2aaaaaaaaaaaadda, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r1, r2) 09:19:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000003c0)=0x353) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) syz_open_dev$dri(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x4}, &(0x7f0000000180)=0x8) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, 0x0) bind$bt_hci(r1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB]) 09:19:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/56, 0x38) 09:19:04 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffc) r2 = getuid() lstat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) r4 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x202) ioctl$FS_IOC_FSGETXATTR(r4, 0x802c550a, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x740000, 0xf7ffffff7ff0bdbe}) [ 259.532208][ T8089] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:19:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='logfs\x00', 0x10, &(0x7f0000000100)='bridge0\x00') 09:19:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x40000) recvmmsg(0xffffffffffffff9c, &(0x7f0000006b00)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/206, 0xce}, {&(0x7f0000001580)=""/18, 0x12}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x8}, 0xb8}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002640)=""/45, 0x2d}], 0x1, &(0x7f00000026c0)=""/211, 0xd3}, 0x9}, {{&(0x7f00000027c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002840)=""/223, 0xdf}, {&(0x7f0000002940)=""/139, 0x8b}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x3}, 0xe4f7}, {{&(0x7f0000003a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000003ac0)=""/167, 0xa7}, {&(0x7f0000003b80)=""/206, 0xce}, {&(0x7f0000003c80)=""/23, 0x17}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/68, 0x44}, {&(0x7f0000004d40)=""/46, 0x2e}, {&(0x7f0000004d80)=""/159, 0x9f}, {&(0x7f0000004e40)=""/173, 0xad}, {&(0x7f0000004f00)=""/4096, 0x1000}], 0x9, &(0x7f0000005fc0)=""/106, 0x6a}, 0x401}, {{&(0x7f0000006040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000006340)=[{&(0x7f00000060c0)=""/228, 0xe4}, {&(0x7f00000061c0)=""/134, 0x86}, {&(0x7f0000006280)=""/154, 0x9a}], 0x3, &(0x7f0000006380)=""/53, 0x35}, 0x7}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f00000063c0)=""/95, 0x5f}], 0x1, &(0x7f0000006480)=""/193, 0xc1}, 0xf716}, {{&(0x7f0000006580)=@hci, 0x80, &(0x7f0000006a80)=[{&(0x7f0000006600)=""/117, 0x75}, {&(0x7f0000006680)=""/114, 0x72}, {&(0x7f0000006700)=""/56, 0x38}, {&(0x7f0000006740)=""/205, 0xcd}, {&(0x7f0000006840)=""/236, 0xec}, {&(0x7f0000006940)=""/90, 0x5a}, {&(0x7f00000069c0)=""/140, 0x8c}], 0x7}, 0x5}], 0x7, 0x10000, &(0x7f0000006cc0)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) mknod(&(0x7f0000006d00)='./file0\x00', 0x200, 0xffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = getuid() getresuid(&(0x7f0000006d40), &(0x7f0000006d80), &(0x7f0000006dc0)=0x0) setreuid(r3, r4) [ 259.605547][ T8101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 259.679511][ T8104] vhci_hcd: invalid port number 255 09:19:04 executing program 3: socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ae}, 0x101}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, &(0x7f0000000500)=""/232, 0xe8, 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/168, 0xa8}, {0x0}, {&(0x7f0000000900)=""/56, 0x38}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000c00)=""/248, 0xf8}], 0x5, &(0x7f0000000a40)=""/37, 0x25, 0x8001}, 0x9}, {{0x0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000d00)=""/163, 0xa3, 0x100000001}, 0x40}, {{&(0x7f0000001080)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f0000001140)=""/67, 0x43}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/145, 0x91}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x5, 0x41, &(0x7f0000002640)) r5 = dup2(r4, r2) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="005121f38a016a916f4d2f04"], 0x28}, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x1, 0x6, 0x5, 0x7}) recvmmsg(r3, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 09:19:04 executing program 1: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0xf0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r3 = dup2(r1, r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000100)=""/117) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) [ 259.707078][ T8104] vhci_hcd: default hub control req: feff vffff i00ff l65535 [ 259.757966][ T8116] vhci_hcd: invalid port number 255 09:19:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(r2, 0x1404, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 259.821518][ T8116] vhci_hcd: default hub control req: feff vffff i00ff l65535 09:19:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x10001) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29) 09:19:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 09:19:05 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xffff8000, 0x2f}}, &(0x7f0000000180)='syzkaller\x00', 0x25d, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0xd}, 0x48) shutdown(r0, 0x0) 09:19:05 executing program 0: r0 = socket$packet(0x11, 0x4000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r3}}, 0x18) 09:19:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x23, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, @perf_config_ext, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}}], 0x33d) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0xbb1}, 0x8) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffa) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000200)={0x4, 0x100000000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) 09:19:05 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_setup(0x3e, &(0x7f0000000100)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x100000003, 0x4}) mkdirat(r0, &(0x7f00000002c0)='./bus\x00', 0x122) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 09:19:05 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r2 = socket(0xa, 0x7, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x9, 0x4403f) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) connect$netrom(r4, &(0x7f0000000340)={{0x3, @bcast, 0x4}, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x20, 0x32, 0xd, 0x5, 0x7, 0x5, 0x0, 0xce, 0xffffffffffffffff}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000400)) r6 = syz_open_procfs(r5, &(0x7f0000000140)='ns\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x02\x00', 0x1502}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 09:19:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) r2 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000040)={{0x3, @addr=0x3}, 0x8, 0xf9e, 0x5}) 09:19:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, {0x0, 0x2710}, {0x7, 0x0, 0x3ff, 0x0, 0x0, 0x2, "eae8dda6"}, 0x7, 0x2, @planes=0x0, 0x4}) r0 = userfaultfd(0x100007ffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e010dccab4000000"], 0x18) 09:19:05 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x200, 0x100) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x9, 0x4) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x0, 0x2}]}, 0x18, 0x2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}, {0x2}]}, 0x14, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 09:19:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xf7, "52c343423c0e1ec0cb33725e3bccac806d60604c83edc8cfebc6e700fa7a5fe54bde00b56e45df47f55d37309218770f1204ff0e84c6be207cb0992d6176c119b818c9cc82cb6f18966a55523df2947854aad3ac262370b3c0605b02ae65e7d29b1bada197b29a39fae25c62722983a62866eeb679481d3c2bfcb8901316dbc6b8c2a0b8b1b1ae991b23d124350c6eccd4376c98486785c802d5345b0e55212a8aaf17925b326d5d54dedbb563ec16b50fabb74f319171cabbfd86bf537aed6e8a38e9340accf8f8418e40eebb6a5f268355c5eef45ccd7f1a5d52a6f15a52dee58a32cfe736d302563288ccc09e69824419035f5871d1"}, 0x0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @netrom, @netrom, @netrom, @rose, @rose, @netrom, @default]}, &(0x7f00000000c0)=0x48) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000780), 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4000000000, @mcast1, 0xdab4}, {0xa, 0x4e20, 0x9, @remote, 0x1}, r3, 0x8001}}, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000c80)={@null=' \x00', 0xa, 'erspan0\x00'}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000380)="0f0766b818008ed80f20e035000040000f22e00faea66647000066ba2000b801000000efc4c13565d4b805000000b9f4ce05c80f01d9670f01750c66b8e3000f00d8c4c2e99626", 0x47}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:19:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000000)=""/222, 0xde) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x6}) 09:19:06 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={r4, 0xfffffffffffffff9}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e22, 0x934, @empty, 0x800}}}, &(0x7f0000000300)=0x84) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000340)=""/137, 0x8000, 0x1000, 0x7}, 0x18) [ 261.168862][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 261.174916][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket(0x5, 0x0, 0x807) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@ipv4={[], [], @loopback}, 0x78, r1}) sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_MAC]}]}]}, 0x34}}, 0x0) 09:19:08 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x44800, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 09:19:08 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x4) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) 09:19:08 executing program 5: r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x8, &(0x7f0000000100)="14d3635d", 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) recvfrom$x25(r0, &(0x7f0000000000)=""/68, 0x44, 0x10043, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 09:19:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200347393185790a62635f6b941e9c1be8b7a1282018000000000000000000000"], 0x10}}, 0x0) 09:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r4, 0x401}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pipe(&(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) getrlimit(0x6, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0x400}, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="08d84d3fc08397ce68c29bba95014b00d91b9f017251a72d1358bc02b5070000fa3900000000000000000000002e945538bb6916069f88c06354bbc45c4d36520fef718d816ceed3e517e2e275260aa9addf44788c56c1d72de8409d0d7f8ec73ae648b0b638f9b6886b", @ANYRES16=r6, @ANYBLOB="050000000000000000000c00000008000500ffffff7f"], 0x1c}}, 0x0) r7 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080), 0x0) 09:19:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$key(r1, 0x0, 0x10) fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f0000000380)="ae02ddb66b0470658550d8fe4aff44b7e13805468f686d136868183e26642209244d873614f649cd3231e2663779352f43a9fdb2e564167e9efcdc1c0d2bdbe13599ba7b4f2ac0f58fd868e357f0d87d1a5ccfcc84461cb9", 0x0}, 0x20) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x8000000000001, 0x0) r2 = semget(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0) semop(r2, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x0, 0x3, 0x7ff, 0x5, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x7f, 0x1, {0xffffffffffffffff, 0x2, 0x1, 0x3}}) fcntl$getownex(r3, 0x10, &(0x7f0000000640)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000700), 0xfffffffffffffe80) recvfrom(r0, 0x0, 0xe2a8a5a1ac39531a, 0x20, 0x0, 0xffffffffffffff7f) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000006c0)={0x80, 0x6d}) 09:19:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000fc1ff8)={0x4000019980330}, &(0x7f0000001fe8)) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000380)={0xffffffffffffff2f, 0x0, 0x200000000d, {0x5}}, 0x1ad) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0x1}, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000080)=0x800, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0xffffffff80000001}, 0x4) write$ppp(r1, &(0x7f0000000100)="030000000000", 0x6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x80, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}, {@mmap='mmap'}, {@version_9p2000='version=9p2000'}, {@loose='loose'}, {@fscache='fscache'}, {@version_L='version=9p2000.L'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x33, 0x63, 0x7d, 0x34, 0x34, 0x37, 0x62], 0x2d, [0x36, 0x38, 0x33, 0x34], 0x2d, [0x38, 0x62, 0x30, 0x74], 0x2d, [0x37, 0x7f, 0x38, 0x75], 0x2d, [0x30, 0x32, 0x34, 0x38, 0x63, 0x75, 0x66, 0x62]}}}, {@pcr={'pcr', 0x3d, 0x28}}, {@smackfshat={'smackfshat', 0x3d, 'ppp0'}}]}}) [ 263.257490][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.294593][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:19:08 executing program 3: socket$packet(0x11, 0x4000000000000003, 0x300) socket$packet(0x11, 0x3, 0x300) io_setup(0x8, 0x0) clock_gettime(0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[0x7, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 09:19:08 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000700)={[{@balloc_test4='block-allocator=test4'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@nouser_xattr='nouser_xattr'}, {@nolargeio='nolargeio'}, {@acl='acl'}, {@errors_ro_remount='errors=ro-remount'}, {@tails_small='tails=small'}, {@barrier_none='barrier=none'}]}) r1 = socket(0x17, 0x8000e, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000600)=0x2, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) getgroups(0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r8 = getgid() prctl$PR_SET_PDEATHSIG(0x1, 0x33) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="98020000000000000800000000000000060000000000000002000000000000000010000000000000000200000000000000000000010000000400000000000000080000000000000001800000000000000400000000000000444b000000000000050000000000000009000000010400000200000008000000ffffff7f", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="410b000020000000000000000500000000000000ffff00000000000009000000810000006e6f6c61726765696f000000000000000000000000000000000000000000000002000000000000000008000000000000050000000080000003000000000000000200000000000000cf000000000000000200000000000000400000000000000000000000000000007600000004000000810000000200000071030000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="2800000001fcffffffffffff0000000001004d32a4cd0000000000060000000000000001feffff0008000000000000040000002e00000000000000ffffff7f0000000005000000000000000500000000000000000400000000000008ffffe8000000000100000040000000000000003f00000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="eb000000ffffff7f000000000300000000000000ffffff7f00000000030000000800000061636c00000000000300000000000000030000000000000009000000000000000100008000000000000000000000000004000000000000000c0f000000000000000000000000000005000000000000002000000000000000fffffeffffffffff090000000200000088090000ff01000007000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="01010000080000000000000002000000000000007f0000000000000009000000010000002b747275737465642a00000000000000"], 0x298) 09:19:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000078060000c0030000c0030000c0030000a8020000c0030000e0050000e0050000e00500e3e0050000e005000006000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="7f00000100000000ffffff00ffffff00697064647030000000000000000000006e6c6d6f6e3000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00024000000000000000000000000000008801d001000000000000000000000000000000000000000000000000c000636f6e6e747261636b000000000000000000000000000000000000000001ac1414aa000000000000000000000000ffffffffffffff00000000ff000000fffe880000000000000000000000000001ffffffffffffffffffffff00ffffff0000000000000000000000ffffe000000100000000ffffffffffffffffffffff00e0000002000000000000000000000000ff0000ffff000000000000ffff00000004000000ff0300003a004e214e224e204e248300400000000000000000000000300061646472747970650000000000000000000000000000000000000000000004000400ffffff7f00000000000000004800544545000000000000000000000000000000000000000000000000000001000006e4000000000000000000000000687773696d3000000000000000000000ffff000000000000ac14141ae000000100000000000000006361696630000000000000000000000076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008800020100000000000000000000000000009800d80000000000000000000000000000000000000000000000000040005450524f58590000000000000000000000000000000000000000000000019002000004000000ac1414bb0000000000000000000000004e2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80018010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000000000800000001000000000000002000736f636b657400000000000000000000000000000000000000000000000030005450524f58590000000000000000000000000000000000000000000000000100000001000000ac1414bb4e24000000000001ac14142100000000ffffffff73797a5f74756e00000000000000000076657468305f746f5f626f6e64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000001000202000000000000000000000000000010013801000000000000000000000000000000000000000000000000400073657400000000000000000000000000000000000000000000000000000006000000ff000000f9ffffffdd0900000200000005000000376ddb620040000038007374617469737469630000000000000000000000000000000000000000000100010007000000ffffffff080000000000000000000000280054544c000000000000000000000000000000000000000000000000000000020300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000600000000000000280045434e00000000000000000000000000000000000000000000000000000020dd030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x6d8) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200), 0x3d2) 09:19:08 executing program 2: io_setup(0x9, &(0x7f0000000000)) mkdir(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x100) renameat(r0, 0x0, r0, &(0x7f0000000580)='./file0\x00') write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 263.494211][ T8256] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.527493][ T8251] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 263.527493][ T8251] 09:19:08 executing program 4: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x91, 0x0, @scatter={0x0, 0x40000, 0x0}, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r3, 0x1f}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3f, @local, 0x8}, @in6={0xa, 0x4e24, 0x7f, @mcast2}, @in6={0xa, 0x4e21, 0x101, @remote, 0x1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x29, 0x9, 0xf, 0x9, 0x10001, 0xc7, 0x7fffffff, 0x774, r4}, &(0x7f0000000200)=0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4) [ 263.568917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 263.574809][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_CPUID2(r6, 0xaea2, 0x0) r7 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x125001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x100b}}, 0x20) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="29000000060800000000000000000000000000000000000003000000000000000000"], 0x29) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r8, 0x6}}, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) [ 263.658680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 263.664549][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:08 executing program 4: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x91, 0x0, @scatter={0x0, 0x40000, 0x0}, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r3, 0x1f}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3f, @local, 0x8}, @in6={0xa, 0x4e24, 0x7f, @mcast2}, @in6={0xa, 0x4e21, 0x101, @remote, 0x1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x29, 0x9, 0xf, 0x9, 0x10001, 0xc7, 0x7fffffff, 0x774, r4}, &(0x7f0000000200)=0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4) [ 263.747319][ T8261] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 263.777858][ T8247] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 263.777858][ T8247] [ 263.788950][ T8261] FAT-fs (loop2): Filesystem has been set read-only [ 263.813779][ T8261] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020) 09:19:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x17a) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x740000, 0xf7ffffff7ff0bdbe}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4008550c, &(0x7f0000000040)) 09:19:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x6, 0x7ff, 0x1f, 0x9, 0x6, 0x2d368ae9}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1000000005) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x8925, &(0x7f00000001c0)) 09:19:09 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x40, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) r1 = creat(&(0x7f0000000a80)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff}, {0x0, 0x0, 0x1ff, 0x1}, {0xff, 0x7fffffff, 0x833, 0x706}]}, 0x10) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="576f00734800baca6043836a2135990a0000000000000be866e4096db2b5013e19d3561ef8a5c48fd2165e692d4d3ba9353241f194ca0d4fef89fa4c4b1132b2b359a3b8733da8f284d77c2978cf3f01000000546355f6d266388eccfe2f137047adbac1be5665fde84d9786a4adc61d723d1821d8cef4a51cdda8bf7e047921d5774564a4ada8a9e920995cbc38aa88f754856d96c20028"]) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x2) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000540)={{0x0, 0x0, 0x9, 0x3, 0xffffffffffffffff}, 0x0, 0xe326}) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x587, 0xc0) r4 = open(&(0x7f00000008c0)='./bus\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) 09:19:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0xec, "dfffab3763fc935ec3043cbd4461679d374f6bf6953de7dea6daaeb6aa1354f5e8c98c6e57bb93e3134222ff932201c2507d4aa922d23e090df66b7bb381848f28735e929ed8049cd3c614b208fae5c5aa7b3c13a1f41272a05ee070ee3226eed5931f061612ed021c56c3edbd80073e71316357bfeb1ccf27acbcefe5ddfbf37a0d70ef693436034ef8a20c1f4094ce36ba16cee84d4122896d5745504a637838d4fcd2d9aaed204ae613856af90fa63d2c7a869d7c131e12c580ddb23bbf787a3a3f8783335906778c4b2cfb6c6b32d38147f8755cecba5744fea22177ed734bd31819ab900e0c9a8e919a"}, &(0x7f00000002c0)=0xf4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6401, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1f) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={r3, @loopback, @local}, 0xc) [ 263.898110][ T8284] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 263.915052][ T8284] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16) 09:19:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x8, @remote, 0xffffffff}, r2}}, 0x38) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="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", 0x113}], 0x1}, 0x0) ftruncate(r3, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r0) [ 263.978433][ T8288] vhci_hcd: default hub control req: f308 v0000 i0000 l0 [ 264.001259][ T8293] vhci_hcd: default hub control req: f308 v0000 i0000 l0 [ 264.048688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 264.054590][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 264.100635][ T8299] IPv6: Can't replace route, no match found [ 264.133717][ T8299] IPv6: Can't replace route, no match found 09:19:09 executing program 3: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x8000, 0x6, 0x5) mbind(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x3, &(0x7f00000019c0)=0x9, 0x7fff, 0x0) 09:19:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESHEX, @ANYRESHEX=r2, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYPTR], @ANYRESHEX=r2], @ANYPTR, @ANYRES64=r2]) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8000, &(0x7f0000000400)=ANY=[]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000004c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) io_pgetevents(0x0, 0x3, 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f00000005c0)={r4, r5+10000000}, &(0x7f0000000640)={&(0x7f0000000600)={0x20}, 0x8}) fcntl$notify(0xffffffffffffffff, 0x402, 0x33) sendfile(r3, r1, 0x0, 0x10013c941) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000480)={0x0, 0x7fffffff}, 0x2) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x840, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 09:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}) 09:19:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x350}], 0x104f, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) rt_sigprocmask(0x2, &(0x7f0000000000)={0x29f9}, 0x0, 0x8) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "8ca9fd878b534098194c925f613b3c7a"}, 0x11, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x80000000, {{0xa, 0x4e20, 0xe82a, @ipv4={[], [], @rand_addr=0x8}, 0x2}}, {{0xa, 0x4e20, 0x8b5, @empty, 0x6}}}, 0x108) preadv(r1, &(0x7f0000000480), 0x114, 0x0) 09:19:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) [ 264.226695][ T27] audit: type=1804 audit(1552209549.361:31): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 [ 264.300034][ T8303] overlayfs: unrecognized mount option "Wo" or missing value 09:19:09 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa4247bf0, 0x102005, 0x0, 0xfffffffffffffdad) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) fstat(r0, &(0x7f0000001b80)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000340)=""/85, 0x55}], 0x2, &(0x7f00000002c0)}, 0x10000) getpgid(r3) shmctl$IPC_SET(r2, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x28000, 0x6, 0x9, 0x8, 0x16, 0xffff, 0x9, 0x1ff, 0x8, 0x0, 0xbf, 0x1}) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x4000000000000], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0xe, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x0, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r5 = request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) lsetxattr$security_smack_transmute(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0), 0x0, 0xfffffffffffffff9) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x200) r6 = request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, r6) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r8, 0x1b}}, 0x10) keyctl$search(0xa, r5, &(0x7f00000004c0)='trusted\x00', &(0x7f0000000500)={'syz', 0x3}, r6) 09:19:09 executing program 5: syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500005c0000000000019078ac7014bbac1414110504907800000600400000000000000000210000ac1414aaac141400082c00000000000000000000e000000200000000000000007f0000010000000000000000"], 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x8) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000001c0)={0x0, 0x3, 0x1}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x2) accept$netrom(r1, &(0x7f0000000280)={{0x3, @bcast}, [@rose, @default, @null, @remote, @null, @netrom, @default, @rose]}, &(0x7f0000000080)=0xfffffffffffffeaf) 09:19:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) [ 264.339678][ T27] audit: type=1804 audit(1552209549.461:32): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 09:19:09 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x9, 0x18000) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0xa, &(0x7f0000000000), 0x1) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x202) [ 264.479651][ T27] audit: type=1804 audit(1552209549.591:33): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir393139657/syzkaller.j6w0XT/22/file0" dev="sda1" ino=16552 res=1 [ 264.547918][ T8332] overlayfs: unrecognized mount option "Wo" or missing value [ 264.575545][ T27] audit: type=1804 audit(1552209549.611:34): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 09:19:09 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ppp\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000440)='./file0\x00', 0x800, 0x80) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000480)=0xf1) getresuid(0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x4206, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="dc00000001c64106fd0e521b0bc7b625a596923f6b61d8b9f7236dd40ee18f89664a689e96b3b45998b14051f1bf628d2a54ebfd441996267b6dcbb359162b1fd26918caf6523ff7ad729f93775b661adc619daa076a64850e8e583f586cf6ff90fc14325d9c1b19fdff8a712430790c1be04c974c68d1688d3a15ead12a83bb5ee2370dc62e6db1334d697235a26861e6b640bbed9c4e6058ef9d2c989a3babe22c60b09f1828fe3db5d71532dbd6fab5ac445df920638a0b4ffbc17628f81dc2abe535dfb940995e846512b4f9b7cc36bc7c3e5af750087198c4accbc35fe4a9fc4293736f2ca5ee8e"], &(0x7f0000000340)=0xe4) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r4, 0x4, 0x200000000000, 0xac76}, &(0x7f0000000540)=0x10) ptrace(0x8, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x108) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000001c0)) write$uinput_user_dev(r5, &(0x7f0000000980)={'syz1\x00', {0x8000, 0xfffffffffffffffa, 0x2f2, 0x10000}, 0x11, [0x6, 0x9, 0x9, 0xe97, 0x0, 0x80000000, 0x2, 0x2, 0x3, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x0, 0x200, 0x9, 0x217, 0x0, 0x7, 0x9, 0x0, 0x7, 0x0, 0x0, 0x1, 0x4, 0x0, 0x9, 0x4c, 0x9c42, 0x400000000000, 0x9, 0x2, 0x5, 0x7ff, 0x0, 0x1, 0x1000, 0x645, 0xd3, 0xfffffffffffffff8, 0x9, 0x67be, 0x0, 0x100000000, 0x2f, 0x0, 0xfff], [0x0, 0x3, 0x10000, 0xfffffffffffffffa, 0x5d, 0x3ff, 0x23a, 0xb069, 0x100000001, 0xe50, 0x10001, 0x3198, 0x6, 0x4, 0x80000001, 0xffff, 0x0, 0x200, 0x80d, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x0, 0xd8, 0x2, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x4, 0x0, 0x100, 0x100000001, 0x80000000, 0x735a, 0x3, 0x9f71, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x684, 0xfffffffffffffffc, 0x101, 0x2, 0x0, 0xc1, 0x3, 0xfffffffffffff001, 0x2, 0x4, 0x6, 0x3, 0x81, 0x20, 0x200, 0x9, 0x7fff, 0x9], [0x0, 0x9c, 0x1e, 0x9, 0x7, 0x3253, 0x131, 0x3, 0x80, 0x14, 0x0, 0x6a5, 0x1, 0x7, 0x7, 0x0, 0x0, 0x5, 0x6, 0x1f, 0x2, 0xffff, 0xbb, 0x0, 0x9, 0x6, 0xf33, 0x81, 0x400, 0x7f, 0x0, 0x0, 0x8, 0x5, 0x80000000, 0x0, 0x8, 0x0, 0x7ff, 0x1, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x687, 0x3, 0x0, 0x0, 0x4, 0x80000000, 0x2, 0x6, 0x5, 0x5, 0x6, 0x0, 0x7fff, 0x0, 0x101, 0x0, 0x2, 0x0, 0x6], [0x2, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, 0x5, 0x0, 0x401, 0x4, 0x1ff, 0x4, 0x132, 0x5, 0x5, 0x40, 0x2, 0x428e, 0x400000, 0x7, 0x14, 0x101, 0x3, 0x4, 0x100, 0xb6b, 0x5d962c61, 0x1, 0x10000, 0x9, 0x7fffffff, 0x1, 0xfffffffeffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x1000000000000, 0x1736, 0x4, 0x20, 0x8, 0x401, 0x7fff, 0x0, 0xf7d, 0x2, 0x9, 0xf24, 0x0, 0x1ff, 0x80000000, 0x0, 0x9, 0xa82b, 0x44e, 0x1, 0x5, 0x0, 0x0, 0x4]}, 0x45c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x28013, 0xffffffffffffffff, 0x0) [ 264.648060][ T27] audit: type=1804 audit(1552209549.611:35): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir566154707/syzkaller.tegVaA/32/bus" dev="sda1" ino=16568 res=1 09:19:09 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xfffffffffffffffd}) 09:19:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x56aa, 0x100000000000f, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2, 0x0, 0x6052, r1, 0x2000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x3}) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)='/dev/zero\x00', &(0x7f0000000180)='cgroup\x00', &(0x7f00000001c0)='&md5sumvboxnet1', &(0x7f0000000200)=':,bdev)*\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/zero\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='/dev/zero\x00', &(0x7f0000000340)='$\x00'], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) [ 264.694149][ T27] audit: type=1800 audit(1552209549.611:36): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16568 res=0 [ 264.747647][ T8358] x86/PAT: syz-executor.1:8358 map pfn RAM range req write-combining for [mem 0x4cfea000-0x4cfeafff], got write-back 09:19:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) close(r1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2b00000, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() fcntl$getownex(r1, 0x10, &(0x7f0000001d80)={0x0, 0x0}) getresuid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0) r8 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000025c0)=0xe8) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000026c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000002800)=0xe8) getresgid(&(0x7f0000002840), &(0x7f0000002880)=0x0, &(0x7f00000028c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002940)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000002900)='\x00'}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002980)={0x0, 0x0}, &(0x7f00000029c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a00)={0x0, 0x0, 0x0}, &(0x7f0000002a40)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000002a80)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002ac0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000002bc0)=0xe8) r19 = getgid() r20 = getpid() stat(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002e80)={&(0x7f00000000c0), 0xc, &(0x7f0000002440)=[{&(0x7f0000000140)={0x3c0, 0x10, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@generic, @typed={0x3c, 0x4d, @binary="b809d55ad5228ed7162b52896b78a95909cac999ad969d83c8c9dcf57d50ce007bf1289aaa745046283267527a3c9f2038d9efb769ef3c03"}, @generic="db6e6120b42d4b74b475e1cd96bcde5f0d086edbb79de6ad7189dea9995306fb04e2848136667695f95646a6891fbac7d03481b49b708b52c3d571196418e11c32713ba53c3e20e84d46c3033cb41057b1f8f190d03c8e87d3ea536f8e8ca7aa5a4090aa3db64d97bdadec9c1160e9073688d3588d57", @typed={0x8, 0x7e, @pid=r3}, @generic="b93c05533d3432692e09bfe9cc1889bee318a04b3a88171975bfb2696b2c4714bddbf82c41a23dc3f6ed9d90f9ee8d93a8e99315da366164817a27f2d6710a4d632bd6b7c7a721061609dfe69afb8fbc6725eefb720932bae77338d74d1fa42b705c82a06f77ce3a82e05d30fd989e19bcd9a63c279a90f00fe54b957aa6d06cf63f4b65050d0a", @nested={0x50, 0x3b, [@generic="0a325537d31b0b3a11d499cc5c6301eccf7b0965f27acc1d23e83b735e16f2abd3ddda4e687cc7c499847ba79a4906c6da3df4438763f69895876d40d55e6e48b1ec5406c0a51aa96b"]}, @generic="827e934de55c8aeed1d556997fa31d80ae34a33cc507cf53483a4c041bfb9b648ac923bd15979079e3c1ea339c7a8b1ed5d81929e9ed19bcb58d09eee03f73a0b9c16d0e0eb589085e3efcb997cd8215257e7d4a0510810cf4d9ded09110df764312ce776faa81dfdf3baec9880a9ec8f226f5e3a446dec7ce5acd94ee9ce73195cb922bcb5b0ba94fec0a7ca80cafc2e406f245a2248d8df6900e04f6b414abd66d500cd491e7679fe1e52180fc4bce0a899b6ee83dc6131d4d2882170d3f3bec8e93c8f2633c1f016dc9a2d8959d62a951e152bbcff7fb8e8c24406d6a106edbb0902f4af315b43e20e6b6009c20611d75b768e68e6b40b8", @generic="662b434c9fe366dd2369893bb3322ff85205e1cff5866117ce1bc30083ca2b9d4008c2d7487f6825f060775ba50b0fbd1d7f137c80bc3a5f6351d5b0623007ae37d92e9b7586d00ab9b92aa84388785c5d6fcb1b4a1301feb84c6cd69f1bebe956a82d6b1d5c0751a39367a46122f8a61ae0e1db5e4d958f661091181d47e7afc3b0915805f87a3217d6b00cd08e439aac775bca493616ccb3e3748068015576a8f0216c9edc3333e7dfe8837a932008f28447bc956a832a4335f669e2c7d4bb928a49affae04162160944dd1cfd34c37da6caa761da89", @generic="1e2493394417c27dc00ebf2bf251ca8a0a79dbecbc22d90c83cd4881edb8cadae4259a89", @nested={0x28, 0x24, [@typed={0x14, 0x2d, @ipv6=@rand_addr="c64774ef2c700f79a15c56bf6d40cdec"}, @typed={0x8, 0x3b, @u32=0x1000}, @typed={0x8, 0x35, @u32=0x876}]}]}, 0x3c0}, {&(0x7f00000005c0)={0x42c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x1b0, 0x3e, [@typed={0x8, 0x95, @fd=r1}, @generic="5872e6b0dfad2713a1b5456ba4820bab26f68a74d9087a842a4fce67301e21631f3092659ad97c24d92018148cb74425823debd2be65baec432a0646ea1b27394468ebdc5c5963b218d2fb8bcf63e2f2d5c415d5a590905cc630533cd6efc3e5a9f5d01337ea91226064d76072f3065561ddce6d109eb6ed24713fa514b170947557170009eaf0b3d7edb85a3b988ec14ab14283067faa355da89f13a03cd7c4fa3c04f4acba9adb1c40b1b2d608b71fd44c99a2c9206245d66a4f7a8f14482e0089d20f419f9055b995ea57", @typed={0x8, 0x60, @u32=0x1}, @typed={0x8, 0x7e, @u32=0x5}, @generic="79f1b9e860c1f2eb8049721d7d5684e8ccf65dd4faf52f031e42be07d793f5734f4b715b09e5892dd0ce8cbbee6b4593b532c628dfe16efdfca7eca5e1b6b25d58eb44ee0129db1c49d9d6ee1235da93a53b62278eb6fc72ee148beeaa4f1095719623a2f16dcaccac0d4cff54ff7d93f9ad5ad965f2480366dd321d8c40530c578858345021dbbb5901a1a17b843e9abb2f219689c0ba38d65d376e65145edd45dddd8148e558735dda91942af2e3381fa94dc4bec3d1f7401b244ada3b3cc0a75899f4e19fedce"]}, @nested={0x74, 0x6a, [@typed={0x8, 0xb, @uid=r4}, @generic="13b80b03aefbfec269613d6333d9bf36344f143d1b76b61f80a04f7a9cadff3a665a79652b655efb31a58ec165a914d1d16c8cdca0328abe2370ba0a2954482b880684d3bd0fef261871ef6f39ac8545e855ddb1a5f98b97aedfb964f84dabf47dc79259bc45"]}, @nested={0x100, 0x87, [@typed={0xc, 0x13, @u64=0x4000000000000000}, @generic="3ead2cbf81a315db84be4d36e43bbec63d", @typed={0x8, 0x96, @fd=r1}, @generic="3f8ddbb73a98116ba3dbbfb97756b4410c4ebf9c7a1e9f5e5e", @generic="d9daae42f724a91c9c29525889e38bc8f9a98129c05f3a37eaf7dc0ab533aa79b0a6b198960c15c1b5da37016c13e32e88b8c649e29f51510b8203de7d5947590694b57167136080ca92fb5b95023b8dc01715db6acf0c0c98ecb2995719979ecc678180e69198449b20eb7c283f621ad884c435a35f6e11e6003a18715741976e6034a51d052fa6c094cf958ebf35993e9d762b12d994145ca044dfae5c4741b717fa7600d6cab1631c5add10dafe88753e1597845fdff2a9759e"]}, @generic="314545eab06fa1334f52a58ba4dfecf759c8d036b7792f816c34971498882ad030a940c9c5eb960b3f17da666cfb56669e8e31bd530d15e77a8198f14a6fc38e20adbaa132d18be5", @generic="b0f832049a14f74a8fd721310baf97c6ec3ae7ca20072eb966744ed5ceac398bea756f04638d84dea3efb4ff733f334df62e4359f56b187faa9382a2e440f3cc90c09d99ac7bdee3c64eee47c44acfe6dff1d9a173e0bdd5a56f89394461a0368bcfeab900665c5c8f3978c002b5e21ed65cac2380d957fc78729274be805ff26418bc00596acef77dea79998d320cb4f8b8912b06cedb1ba4b02f37158890131f09a61c11902100ee4b4a8b3df141"]}, 0x42c}, {&(0x7f0000000a00)={0x127c, 0x3a, 0x8, 0x70bd27, 0x25dfdbfd, "", [@nested={0x114, 0x14, [@generic="023e7b23bd2d0a789a09dd2e86b11ac848b139a272144bb5bb5eeb39253b1ba06fa3bff017dda1e62173496b3ec21cadc00d5acda5d0f92ef86f5580bfa116ce5ecb313adcc7bfa61757eb69782cb10132baa660f48ba9476ab56a68eebd2e42da2b79cb5f61d11f18afe36e33eb9fd06281ba116bee1f4f696854b992094613f1e1e7f938377bbd2d3bd96757cf30e8747b4c981396851e637a17020d28cf84d6c36abd55d8c9c007af6210c3c15531c50f8be2f642951647b37062acef518cf90dfd9fb0544e9467948ff330801afe4322217dc6b861c0b4af5c89816e32db23818c6253ffc53b8fa54e2f4ce549d07ffc71458bbd199c16be1c3a8ebc", @typed={0x8, 0x6, @uid=r5}, @typed={0x8, 0x6e, @fd=r1}]}, @generic="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", @generic="ab602cbcd5035f716b23839337506f16172beabf6a75503bf4182d99b086ab7490c18abd9365ae74754072dc615b6e3dc5583bf4ea746d764249106650fc90f3e1bd9d43a8f575bfd488ef7667d37a22889bc8e8080fea0724cc2de2de", @generic="02e94d8164b55e51524d083e8d25f33201743ce057601aeb1929d57c443b2f808fb7e959a3fc11bf6bdc4eff0e64ebad598a7018171955cc3dca983a64ae0728b4bf56cd93da6699b40ec7c88476aec86c63055ae3366d7f49f25781ad72f7ffc1f3c593110db496f86190d84a0dd76775c1ee8846968b9c7cfde261b892d02f5ae1e50c0caff3e72ceec36d2cb5d37265b7c1c50d8c0ab9b9f7978cb2a991b12a30e1c4a7f97c40e7f71f247de2179dfbac794809583430f63653c0e0128bd720ec489d7f0adbc0a17d148dfac89433bf1eafd4d06c3bf917d8793e47029909b1921c99405294b68199304bdb5d07dfd76440f6a88aa182"]}, 0x127c}, {&(0x7f0000001c80)={0xe8, 0x42, 0x400, 0x70bd26, 0x25dfdbfd, "", [@generic="52fa00deac18dc85efd743c98256b78efc26842d8ce55c7acc1df1b7902ff452c30f5baadb805bd0ea3582765e2f3be92afb669408bf31158095753deb8f5143c0f366e8d75c8c1f788387c11d7146f0c2d217c2c01049db27f5715841bea850c19da4a549f3b3128b3a32929d7f923e1e8f2181bde85412189c9e861099a06072f5c9cc984fd13e7c2b17cfccd52e88de865ae6852bb060227ca599259dea562b5a8816e048cbf290edf269af26b43e013122a7988b14094f77ca4b80193fc11b64215011debc497234", @typed={0x8, 0x2e, @u32=0x9}, @typed={0x4, 0x48}]}, 0xe8}, {&(0x7f0000001dc0)={0x100, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@generic="e946664ca61b941ea7b3566e1b7170187ad94cb140c49fc8f54d2315216da3f9bd7413667764b7e4c92be2d5cc641c24b9f2456c7d82fc69cb089e8e8c0aa87f97e44bd38f3ddd5a824e18591ad9d1c800cfe3a1ad369a1c6c070e47424fc73335caf28318ac9bf74fcf028f53a27e232aa354885fda4a2a79833d28a971a7abdfac760520c5a76828f66c789504b3d7986061854f15c885098cf952e6471f75f4338959301dff7b2f75675f7e5609ba7bd6847d062c23969fbac4f3d6f36cfa155b27be33ac08022f481af5c377967e0f7fc1cf1d132e4f394a611b3aa4c19d", @nested={0x4, 0x5}, @typed={0x8, 0x56, @pid=r6}, @typed={0x4, 0x5c}]}, 0x100}, {&(0x7f0000001ec0)=ANY=[@ANYBLOB="240200003900000526bd7000fcdbdf25a800840008006700020000001400780000000000000000000000ffffac1414bb880026002cc572f65fc0a0449865f865c59743f1359a2d9eca9350268282b20cff5f06ab7add10ae736859ac19b3b89ac37426e01746e8db86274054ea62957109675b8fdf44d421242c5b1f217ff696068b58214eb9623023466b668bcb18d86dc019d31bb053316895f5ae6921fc986a4225c03b82db2b058596b4e23757d30d7af8f814b245000c004c0008008d00", @ANYRES32=r1, @ANYBLOB="71ac285943cc370a257aa9efa73f931e55eb30442ce2ddc533f8aeb460a9f922984d2187742aa27c38bcfaa467791d0dd9fd6b8cc5e6782f8133513be3093c161731e10116d9e165de34fdf2faeb6dfbc190f27db4cc741ebbec6401e1f602342f4a4798916cb87533d2c220a2e581bd0bbc59afe3e00090002a972dbae467075708d0988808648dfae76af1c98ae98047422cd32c5b9e199735b4048f7dc46ea350905a1e0c8b27799f72cb8bb674e8f91da5ea25fb3ec1cfb691b37392676891092a6358115de9a378b3cfbd901b636e53d25592394937c8fc46c3e4c662e9e5f382d6e4310db902fdff3c36716470a9b7f86c4e740bac9fa36dd1a599d0e6172e6761f917a347a892712757ceab2cb5602f3425c62cbc994a7981d0fef0d6b3b8a0f3c41087682ccfa05051cf8e1f65f3ce3a0a2328483a20074da5d72602b3d443d09a1b33ddfee7451b26223fb7901c00000008008b00", @ANYRES32=r1, @ANYBLOB="00a52c"], 0x224}, {&(0x7f00000021c0)={0x27c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, "", [@generic="153b6ec194c7ce5e9b8767408a8e92fc50dab588ee071877ed0e04a130242bcc6a157626e1d1df686377a3ac7c01e5bd8688ecda53237c4fb4a8a21f0fe2395af07c658a6994a4b9347b28f665c802952fd3beb47f93df9bb07712d6680bf9731dc63bae3f53fcef63c0", @nested={0x200, 0x21, [@generic="1b704e74066797c550a845cbdb25c76d958ba336aaf82ac6e88a494751adcc60a36f60810032402bea5b80e7c8c52ad3304eb932b5bca690", @typed={0x4, 0x59}, @generic="4849e44064faa8e2e43173b6ed86bc142339080d499eda27ea8893", @generic="109e5ef25a4add0ac52d9689af8770901e49b69490a7a95271d435eda9a70d5eb723ce7a8c78fe74210a6cf0f86360c5e68b8f9c17c91c9e677752cad0dde6907c897d1a6cf470314eccaf735c02da07e08cb86ea542e7b8cf16581ce4050eb3ab0f35193577199049a88fbfd4e1870b0d5886ca022a713dff560077606ece5161350d5d6c1f0b66c85cc7180d8ec705a2419dbfe9523ba0f1f2964d59eb32a4675038ae3281f9621a98b7", @typed={0xf0, 0x45, @binary="b50120062f654134e91d8b912f799374aaaabf294a46e71451bec35c8e58af523c5bfe730af84a00f69982097a1f6634b4a2579732f5bcbf3c138cadba8ef85d66f656f0de12595a5762aef320203bb0ffd43e8ed03c3bc0d2676d091f10aa0d3feaf3c34648d2ea12ef48a76a445f494535e4bd55d576adae08f35c99f26bcdaf2c2e9538338468128c62b69eca9e606e019285a7cfc52baba2acbdd2fc10ad2099e8198e01f0df91923f9ae3ff05078d12c5dc91f49aab0dfbfa31dfed9e7f95c084e5479b5d87d5c3f620656c40acacc0eac746be0956b8a2c09bef6870e51b514ace30847bd50a43"}, @typed={0x8, 0x3b, @uid=r7}]}]}, 0x27c}], 0x7, &(0x7f0000002d80)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xd0, 0x4000}, 0x80) [ 264.787790][ T27] audit: type=1804 audit(1552209549.651:37): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 [ 264.815255][ T8360] x86/PAT: syz-executor.1:8360 map pfn RAM range req write-combining for [mem 0x4cfea000-0x4cfeafff], got write-back 09:19:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x7, 0x0, [{0x4, 0x2c, &(0x7f0000000140)=""/44}, {0x4000, 0xa1, &(0x7f0000000200)=""/161}, {0xf002, 0x8d, &(0x7f00000002c0)=""/141}, {0x0, 0x30, &(0x7f0000000180)=""/48}, {0x0, 0xa6, &(0x7f0000000380)=""/166}, {0x4, 0x0, &(0x7f0000000440)}, {0x10002, 0xd1, &(0x7f0000000480)=""/209}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) io_getevents(0x0, 0x8001, 0x0, &(0x7f0000000240), 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000006c0)) socket$inet6(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000680)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x3) [ 264.860150][ T27] audit: type=1804 audit(1552209549.711:38): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 [ 264.961521][ T27] audit: type=1804 audit(1552209549.741:39): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir479139647/syzkaller.VvwGLE/19/bus" dev="sda1" ino=16555 res=1 [ 264.986534][ T27] audit: type=1804 audit(1552209549.761:40): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir566154707/syzkaller.tegVaA/32/bus" dev="sda1" ino=16568 res=1 09:19:10 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400000, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x18000000000000, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind(r1, &(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x3c6) 09:19:10 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = socket(0x2, 0x80005, 0x1000000000000000) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000000000000, 0x0, r0, &(0x7f0000000080)}]) 09:19:10 executing program 5: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x80140, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x4000, 0x65822399097e6112) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r5 = getuid() mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x14000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x100}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xe57}}], [{@subj_role={'subj_role', 0x3d, '%$posix_acl_accesskeyringeth1'}}, {@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'measure'}}, {@euid_lt={'euid<', r5}}, {@dont_measure='dont_measure'}]}}) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='fuse\x00', 0x240802, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c626c6b73697a653d3078303030303030303030303030303230302c616c6c6f775f6f746865722c7569643ceb1deea15d96170ad9fb9e2d4cc4ad08e683f5b4ae0cef502b1611aec4fc5c1a2e901a070a90106b64f2fa8318fd892cd0f29db1052d58e48447c20ec8a8bb5ca7f5dd1286d3c6dde2b97e3d8c", @ANYRESDEC=r4, @ANYBLOB=',measure,uid=', @ANYRESDEC=r5, @ANYBLOB=',fsmagic=0x0000000000000000,\x00']) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_lt={'fowner<', r4}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@uid_gt={'uid>', r5}}, {@subj_user={'subj_user', 0x3d, '2vboxnet1ppp1\'mime_type'}}]}}) dup2(r0, r6) 09:19:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100000000000000fe090000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r2, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454de, &(0x7f0000000080)) 09:19:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x200000) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000200)) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) socket$inet(0x2, 0x7, 0xfff) 09:19:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x727, {{0x2, 0x4e22, @empty}}, 0x1, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}]}, 0x190) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x100000, 0x7000, 0x0, 0x0, 0x100000000}) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x8}}, 0x0, 0x0, 0x7, 0x2ff5}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:19:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0xfffffffffffffff7, @mcast2}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffe, 0xfe, 0x41, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/63, 0x3f}]}, &(0x7f0000000400)="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", &(0x7f00000002c0)=""/133, 0xfff, 0x1, 0x0, &(0x7f00000000c0)}) listen(r0, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x18, 0x0, 0x0, 0x300}, 0x9c) 09:19:10 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f3188b070") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x3, @broadcast}}, [0x8000, 0x0, 0xfffffffffffffbff, 0x8, 0x1f, 0x9, 0x10001, 0xffffffff, 0x539, 0x4, 0x9, 0x1ff, 0x5, 0xffffffffffffffff, 0x4]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r2, 0x81, 0x1, 0x3}, &(0x7f00000002c0)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="240000002d0007041dfffd946f610500070000001f00000000000000f1ffffff0400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x6, 0x4000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 09:19:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x200040) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x208, 0x7fffffff, 0x8, 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x400) r2 = socket$inet(0x28, 0x2, 0x0) getsockname$ax25(r2, &(0x7f0000000140)={{0x3, @netrom}, [@null, @rose, @null, @rose, @null, @netrom, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r2, 0x0, 0x8, 0xffff, 0x5e}) 09:19:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="40d68eeeca04bb444566d5632b130ece63e7f2600628a4c61c0e88b177ba55e6d52194a95bdd3e4394f02afd8d1d3b6893ff8fac950ddb952d0a48aa5a57bd5ffd94fc34c32d5db79b661a"], 0x0, 0x0, 0x0}) [ 265.329658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 265.335479][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:10 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x1f, 0x946, &(0x7f0000000000)="35f1b5f6b0473be2e83fbd887050ed0dfd743cacbbadff6134373907d66457a436a183c3b719d99286325848721cd67ad086f05c70166546c7e59812ac333572c4f6fe9edc949f0e29eda704dabb1ce918bda83e5961b94fc96aa3455949ecd6e2110eef21aa2ffe3f25e96559c4eecc3d9b53864e9fc40890fca01d71a7472fd959a74e4a87b046f725b987e54ceb4bf3adac2680e58fa36dd4", &(0x7f00000000c0)="f405f2bbb0aec7d7e77082d7d2b544969fcbee39d3e55962973b761b28c0e8770a2494622ee8778bdaf4f900e29a2f", 0x9a, 0x2f}) [ 265.405647][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.454847][ T8414] binder: 8412:8414 unknown command -292628928 [ 265.476051][ T8414] binder: 8412:8414 ioctl c0306201 20000040 returned -22 09:19:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001780)="1d4394378f3ac627925097128b1b19f1", 0x10) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x412000, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000080000800300000001000000400000000200000007000000040000000000000000000000000000002447c487a10350e2cbb2755c5ee847a339e7b2e95c69e20ccf4d05d739de142fc346d6d869b762815f8cebd895b814318b03456ca6ca09e53a7d3262156bb1dd04a989c4352200aee47a25ebb1d9f3d62b2937d15bf6c33d9c4c59b934c3664b6e9f6a1d2ad8d5e91360945d9156ac207516da461f6037c189d8d1af29e00718296c8ea29414fb6c372b5dc675d52523fe18"]) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000180)={[{0x4, 0x3, 0x100000000, 0x10000, 0x3ff, 0x7fffffff, 0x0, 0x8, 0x100, 0x8, 0x20c, 0x100000001, 0x1f}, {0x7, 0x1ff, 0x100, 0x74b7, 0x4, 0x7, 0x8, 0xa5, 0x9, 0x64a2, 0x0, 0x0, 0x6}, {0x10000, 0x3, 0x2, 0x10000, 0x1ff, 0x4b325766, 0xdda, 0xf3, 0x0, 0x5b, 0x8, 0xffffffff, 0x2}], 0x5e7c}) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000040)={0x6f}) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000280)=0x400, &(0x7f00000002c0)=0x1) sendto(r4, &(0x7f00000000c0)="0a8321c12eaea8a50924a66ec8ad9a887dc42beaecda4d15352a", 0x1a, 0x0, &(0x7f0000000200)=@nfc={0x27, 0x1, 0x0, 0x6}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x3, 0x1, 0x4, 0x2b01, 0x80000, 0x1, 0x6, 0xf9, 0x100000001, 0x1, 0x5, 0x4, 0x3, 0xfff, 0xffff]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYBLOB="64000000d62d240996169eee0bdbb0346ebf056d47da55fae400d4c8c3188995e4f0eefecdbb4b3089a62fa3710a7a6165c97f9f8c6e7d05afb5a4d5181d6b934ef1159b5f223d6ce85defce75cca18a9b07882d77bb0a6243115201945cb148caa3d180fce78049"], &(0x7f0000000340)=0x6c) clone(0x240800, &(0x7f0000000600)="2557c8f5387d6d7bdebaa4a31ce1f214b349124727943fe65b5901fc7bb0b7c4a607af332cbf98ce34019d3f3f4fbec6ea8684dc01ce4a1b06b294a3bcc60b1355c64cdf8e1eb767890bd36bf5d93a42834f53addf7605077925119170d5762d091535e2682ecbc3d79b5d371c4b24497d13d11f85aa5529bc4f30a1c0b3da497d7a943c1e2dfa163d075c5c10ecda099e322099d3f216ceb143a75180025cf9d0e1d264a4", &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") [ 265.521032][ T8414] binder: 8412:8414 tried to acquire reference to desc 0, got 1 instead [ 265.544198][ T8422] binder: 8412:8422 unknown command -292628928 [ 265.550781][ T8422] binder: 8412:8422 ioctl c0306201 20000040 returned -22 09:19:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xb, 0x0, 0x4, 0xcba5}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x4}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) 09:19:10 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) 09:19:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/30, 0x1e}, 0x0) r2 = msgget(0x0, 0x40) msgsnd(r2, &(0x7f0000000240)={0x0, "292588875d6542192a24ec038e35fcb39065840c9be5fb34ebc72a33a4801f9fc2944c8e93499fd0ab7c15f6b5e42152b2c11c7a64fe874b7c831c9373f3b34c774c47594fe3f3a6b3c9b3a03d73a2c58502fa9b3add0a87e7716859aa8cdf1ee0f54b400b8007f23bf34f2d4787fe83bde588e0f9593c4f1a764959da46eea229fe2e13ba"}, 0x8d, 0x800) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x9}, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x0, 0x0) getgid() getgroups(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000680)) getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), 0x0) fstat(0xffffffffffffffff, 0x0) fstat(r0, 0x0) syz_open_dev$radio(&(0x7f0000000800)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]) shmget$private(0x0, 0x4000, 0x54000080, &(0x7f0000ffa000/0x4000)=nil) gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) creat(&(0x7f00000006c0)='./file0\x00', 0x60) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@remote, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@local}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)) 09:19:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f020008000a00000000000000000000000000"], 0x3c}}, 0x0) 09:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100070c10000a00000001400000", 0x58}], 0x1) [ 266.118453][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.166487][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.448734][ C0] net_ratelimit: 6 callbacks suppressed [ 266.454336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 266.460141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.088749][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.094648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.409955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.415746][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 267.728754][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 267.734537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 267.808667][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 267.814499][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 271.568766][ C0] net_ratelimit: 18 callbacks suppressed [ 271.574491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 271.580245][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 271.888785][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 271.894613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 271.968671][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 271.974448][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 272.368732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.374545][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.688762][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.694594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 276.848728][ C0] net_ratelimit: 22 callbacks suppressed [ 276.848734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 276.860186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 277.488813][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 277.494759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 277.808708][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 277.814627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 278.128680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.134716][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 278.208683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 278.214507][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 281.968754][ C0] net_ratelimit: 18 callbacks suppressed [ 281.974597][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 281.980411][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 282.288706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 282.294528][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 282.368696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 282.374599][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 282.769575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 282.775392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 283.088769][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 283.094684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 287.249225][ C0] net_ratelimit: 22 callbacks suppressed [ 287.249230][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 287.260680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 287.889198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 287.895046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 288.208754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 288.214594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 288.528708][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 288.534513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 288.608710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 288.614567][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 292.368790][ C0] net_ratelimit: 18 callbacks suppressed [ 292.374511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 292.380321][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 292.688745][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 292.694538][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 292.768688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 292.774531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 293.168725][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.174508][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 293.488808][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.494618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 297.648741][ C0] net_ratelimit: 22 callbacks suppressed [ 297.654422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 297.660748][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.288747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.294577][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.608715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.614499][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.928685][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 298.934633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 299.008692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 299.014659][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 302.768767][ C0] net_ratelimit: 18 callbacks suppressed [ 302.774452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 302.780255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.088771][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 303.094641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 303.168689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 303.174456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 303.568747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.574576][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.888917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.894727][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 308.048739][ C0] net_ratelimit: 22 callbacks suppressed [ 308.054423][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.060255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 308.688773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.694623][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.009191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 309.014973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.328708][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 309.334555][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 309.408695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 309.414553][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 313.168768][ C0] net_ratelimit: 18 callbacks suppressed [ 313.174556][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 313.180325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 313.489274][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 313.495177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 313.568678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 313.574473][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 313.968737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 313.974537][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 314.288751][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 314.294569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 318.448779][ C0] net_ratelimit: 22 callbacks suppressed [ 318.454469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 318.460394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.088758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.094581][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.408744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.414557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.728702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 319.734512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 319.808680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 319.814548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 323.568725][ C0] net_ratelimit: 18 callbacks suppressed [ 323.574412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 323.580163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 323.888734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.894513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 323.968695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.974559][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 324.368872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.374725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.688733][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.694513][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 328.848763][ C0] net_ratelimit: 22 callbacks suppressed [ 328.854451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.860209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 329.488744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 329.495238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 329.808734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 329.814575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.128709][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.134511][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 330.208691][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.214602][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 333.968775][ C0] net_ratelimit: 18 callbacks suppressed [ 333.974457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 333.980212][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 334.288713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 334.294498][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 334.368700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 334.374526][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 334.768707][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 334.774530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.088722][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.094573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 339.248731][ C0] net_ratelimit: 22 callbacks suppressed [ 339.248737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 339.260161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 339.888784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 339.894745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.208689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.214516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.528709][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 340.534510][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 340.608690][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 340.614524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 344.368723][ C0] net_ratelimit: 18 callbacks suppressed [ 344.374503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.380250][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 344.688734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 344.694524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 344.768768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 344.774643][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 345.168709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.174493][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.488754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.494535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 349.648754][ C0] net_ratelimit: 22 callbacks suppressed [ 349.654475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 349.660228][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.288766][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.294591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.608738][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.614540][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.928702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 350.934607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 351.008699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 351.014526][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 354.768751][ C0] net_ratelimit: 18 callbacks suppressed [ 354.776768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 354.782908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.088810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.094667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 355.168699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.174627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 355.568738][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.574626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.888797][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.894708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 360.048739][ C0] net_ratelimit: 22 callbacks suppressed [ 360.054432][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 360.060238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 360.688757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 360.694712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.008757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 361.014550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.328709][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.334753][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 361.408748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.414578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 365.168685][ C0] net_ratelimit: 18 callbacks suppressed [ 365.168692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 365.180233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 365.488723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 365.494500][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 365.568682][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 365.574581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 365.968758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 365.974609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.288766][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.294622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 370.448787][ C0] net_ratelimit: 22 callbacks suppressed [ 370.448796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 370.461338][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 371.088786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 371.094656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 371.408794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 371.414668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 371.728720][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 371.734691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 371.808675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 371.814512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 375.568742][ C0] net_ratelimit: 18 callbacks suppressed [ 375.574559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 375.580520][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 375.888712][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 375.894554][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 375.968677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 375.974460][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 376.368713][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.374583][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.688728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.694509][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 380.848736][ C0] net_ratelimit: 22 callbacks suppressed [ 380.854464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 380.860272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 381.488787][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 381.494645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 381.808728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 381.814587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.128701][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.134531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.208667][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.214445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 385.968707][ C0] net_ratelimit: 18 callbacks suppressed [ 385.974542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 385.980395][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 386.288694][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.294473][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 386.368717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.374626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 386.768742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.774584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.088769][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.094667][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 391.248755][ C0] net_ratelimit: 22 callbacks suppressed [ 391.254478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 391.260281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 391.888813][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 391.894654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 392.208738][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 392.214535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 392.528717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.534492][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 392.608674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.614452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 396.368752][ C0] net_ratelimit: 18 callbacks suppressed [ 396.374446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.380216][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 396.688695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 396.694508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 396.768666][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 396.774603][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 397.168716][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.174583][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.488741][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.494629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 401.648739][ C0] net_ratelimit: 22 callbacks suppressed [ 401.654469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 401.660399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 402.288737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.294681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 402.608705][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.614519][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 402.928724][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 402.934556][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.008677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.014537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 406.768706][ C0] net_ratelimit: 18 callbacks suppressed [ 406.774384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 406.780159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.088781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.094856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.168692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.174615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.568685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.574622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.888735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.894521][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 412.048726][ C0] net_ratelimit: 22 callbacks suppressed [ 412.054464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 412.060262][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 412.688743][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 412.694565][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.008722][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.014518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.328735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.334532][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.418727][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.424519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.168786][ C0] net_ratelimit: 18 callbacks suppressed [ 417.174615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 417.180407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 417.488695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 417.494469][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.568687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 417.574483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.968689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 417.974501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.288729][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.294619][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.648845][ T1042] INFO: task syz-executor.1:8394 blocked for more than 143 seconds. [ 421.656990][ T1042] Not tainted 5.0.0-next-20190306 #4 [ 421.662881][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.671591][ T1042] syz-executor.1 D28392 8394 7696 0x00000004 [ 421.677954][ T1042] Call Trace: [ 421.681479][ T1042] __schedule+0x817/0x1cc0 [ 421.686155][ T1042] ? __sched_text_start+0x8/0x8 [ 421.691124][ T1042] ? wait_woken+0x250/0x250 [ 421.695632][ T1042] schedule+0x92/0x180 [ 421.699794][ T1042] synchronize_rcu_expedited+0x54e/0x5b0 [ 421.705420][ T1042] ? rcu_exp_wait_wake+0x3c0/0x3c0 [ 421.710568][ T1042] ? finish_wait+0x260/0x260 [ 421.715230][ T1042] ? packet_set_ring+0x237/0x1b50 [ 421.720302][ T1042] ? find_held_lock+0x35/0x130 [ 421.725146][ T1042] ? kasan_check_write+0x14/0x20 [ 421.730262][ T1042] ? ___might_sleep+0x163/0x280 [ 421.735131][ T1042] synchronize_net+0x3b/0x60 [ 421.739833][ T1042] packet_set_ring+0x23c/0x1b50 [ 421.744763][ T1042] ? mark_held_locks+0xf0/0xf0 [ 421.749604][ T1042] ? prb_dispatch_next_block+0x1b0/0x1b0 [ 421.755272][ T1042] ? __local_bh_enable_ip+0x15a/0x270 [ 421.760753][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 421.766062][ T1042] ? lock_sock_nested+0x9a/0x120 [ 421.771130][ T1042] ? trace_hardirqs_on+0x67/0x230 [ 421.776152][ T1042] ? lock_sock_nested+0x9a/0x120 [ 421.781168][ T1042] ? __local_bh_enable_ip+0x15a/0x270 [ 421.786540][ T1042] packet_release+0x558/0xbf0 [ 421.791288][ T1042] ? packet_set_ring+0x1b50/0x1b50 [ 421.796445][ T1042] __sock_release+0xd3/0x2b0 [ 421.801090][ T1042] ? __sock_release+0x2b0/0x2b0 [ 421.805938][ T1042] sock_close+0x1b/0x30 [ 421.810205][ T1042] __fput+0x2e5/0x8d0 [ 421.814184][ T1042] ____fput+0x16/0x20 [ 421.818162][ T1042] task_work_run+0x14a/0x1c0 [ 421.822836][ T1042] exit_to_usermode_loop+0x273/0x2c0 [ 421.828118][ T1042] do_syscall_64+0x52d/0x610 [ 421.832762][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.838702][ T1042] RIP: 0033:0x411e31 [ 421.842597][ T1042] Code: 48 39 c8 0f 8e 87 01 00 00 48 89 ca 48 85 c9 0f 84 5f 01 00 00 48 89 4c 24 40 48 8b 9c 24 98 00 00 00 48 89 5c 24 50 48 8b b4 <24> b0 00 00 00 48 89 74 24 48 0f b6 3d 53 2f 29 01 40 84 ff 0f 85 [ 421.862368][ T1042] RSP: 002b:00007ffeba07c4d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 421.870810][ T1042] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411e31 [ 421.878975][ T1042] RDX: 0000000000000000 RSI: 0000000000741640 RDI: 0000000000000005 [ 421.887650][ T1042] RBP: 0000000000000000 R08: 0000000000741638 R09: 0000000000040bdb [ 421.895791][ T1042] R10: 00007ffeba07c3f0 R11: 0000000000000293 R12: 0000000000000001 [ 421.903791][ T1042] R13: 00007ffeba07c510 R14: 0000000000000000 R15: 00007ffeba07c520 [ 421.911839][ T1042] [ 421.911839][ T1042] Showing all locks held in the system: [ 421.919592][ T1042] 1 lock held by khungtaskd/1042: [ 421.924603][ T1042] #0: 0000000043357116 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 421.934000][ T1042] 1 lock held by rsyslogd/7561: [ 421.938916][ T1042] #0: 000000000ba6b736 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 421.947541][ T1042] 2 locks held by getty/7651: [ 421.952259][ T1042] #0: 00000000b650eb63 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 421.961219][ T1042] #1: 000000003b750517 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 421.970858][ T1042] 2 locks held by getty/7652: [ 421.975517][ T1042] #0: 000000008ce59adb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 421.984545][ T1042] #1: 000000002e0662cf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 421.994165][ T1042] 2 locks held by getty/7653: [ 421.998927][ T1042] #0: 00000000e928e63e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 422.007885][ T1042] #1: 00000000a906aed6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 422.017548][ T1042] 2 locks held by getty/7654: [ 422.022247][ T1042] #0: 00000000518e3493 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 422.031223][ T1042] #1: 00000000454e7a62 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 422.040863][ T1042] 2 locks held by getty/7655: [ 422.045537][ T1042] #0: 00000000e3dfda26 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 422.054725][ T1042] #1: 000000004b575b7d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 422.064326][ T1042] 2 locks held by getty/7656: [ 422.069039][ T1042] #0: 00000000246af570 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 422.077981][ T1042] #1: 0000000003d1f956 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 422.087642][ T1042] 2 locks held by getty/7657: [ 422.092346][ T1042] #0: 0000000020aa339c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 422.101336][ T1042] #1: 000000007f1b1a16 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 422.110938][ T1042] 2 locks held by syz-executor.1/8394: [ 422.116376][ T1042] #0: 00000000ced00c69 (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2b0 [ 422.126519][ T1042] #1: 0000000037bb374b (sk_lock-AF_PACKET){+.+.}, at: packet_release+0x4ff/0xbf0 [ 422.135927][ T1042] [ 422.138255][ T1042] ============================================= [ 422.138255][ T1042] [ 422.146737][ T1042] NMI backtrace for cpu 0 [ 422.151137][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.0.0-next-20190306 #4 [ 422.159356][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.169390][ T1042] Call Trace: [ 422.172771][ T1042] dump_stack+0x172/0x1f0 [ 422.177091][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 422.182348][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 422.187977][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 422.193951][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 422.199877][ T1042] watchdog+0x9b7/0xec0 [ 422.204029][ T1042] kthread+0x357/0x430 [ 422.208077][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 422.213647][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 422.219872][ T1042] ret_from_fork+0x3a/0x50 [ 422.224382][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 422.229912][ C1] NMI backtrace for cpu 1 [ 422.229917][ C1] CPU: 1 PID: 2557 Comm: kworker/u4:4 Not tainted 5.0.0-next-20190306 #4 [ 422.229921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.229924][ C1] Workqueue: bat_events batadv_nc_worker [ 422.229929][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 422.229937][ C1] Code: 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 06 00 00 00 48 89 e5 48 8b 4d 08 e8 18 ff ff ff 5d c3 66 0f 1f 44 00 00 <55> 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 48 89 e5 48 8b 4d 08 e8 [ 422.229939][ C1] RSP: 0018:ffff8880a198fc60 EFLAGS: 00000246 [ 422.229944][ C1] RAX: ffff8880a1b9e180 RBX: ffff8880888a5198 RCX: ffffffff86f35445 [ 422.229948][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.229951][ C1] RBP: ffff8880a198fcd0 R08: ffff8880a1b9e180 R09: ffffffff895e57b4 [ 422.229954][ C1] R10: ffff8880a1b9ea50 R11: ffff8880a1b9e180 R12: 0000000000000000 [ 422.229958][ C1] R13: ffff888057b3aac0 R14: ffff888057b3a0c0 R15: dffffc0000000000 [ 422.229961][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 422.229964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.229967][ C1] CR2: ffffffffff600400 CR3: 0000000091d4e000 CR4: 00000000001406e0 [ 422.229971][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.229974][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.229976][ C1] Call Trace: [ 422.229978][ C1] ? batadv_nc_process_nc_paths.part.0+0x112/0x3c0 [ 422.229981][ C1] ? batadv_nc_sniffed_purge+0x360/0x360 [ 422.229983][ C1] batadv_nc_worker+0x550/0x760 [ 422.229985][ C1] process_one_work+0x98e/0x1790 [ 422.229987][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 422.229990][ C1] ? lock_acquire+0x16f/0x3f0 [ 422.229992][ C1] worker_thread+0x98/0xe40 [ 422.229994][ C1] kthread+0x357/0x430 [ 422.229996][ C1] ? process_one_work+0x1790/0x1790 [ 422.229999][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 422.230001][ C1] ret_from_fork+0x3a/0x50 [ 422.230614][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 422.436684][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.0.0-next-20190306 #4 [ 422.444943][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.460059][ T1042] Call Trace: [ 422.463334][ T1042] dump_stack+0x172/0x1f0 [ 422.467705][ T1042] panic+0x2cb/0x65c [ 422.471598][ T1042] ? __warn_printk+0xf3/0xf3 [ 422.476180][ T1042] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.481907][ T1042] ? printk_safe_flush+0xf2/0x140 [ 422.486918][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.493148][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 422.498774][ T1042] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 422.504995][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 422.511138][ T1042] watchdog+0x9c8/0xec0 [ 422.515279][ T1042] kthread+0x357/0x430 [ 422.519373][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 422.524913][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 422.531207][ T1042] ret_from_fork+0x3a/0x50 [ 422.536565][ T1042] Kernel Offset: disabled [ 422.540902][ T1042] Rebooting in 86400 seconds..