Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. [ 41.858309] random: sshd: uninitialized urandom read (32 bytes read) 2019/10/15 09:47:20 fuzzer started [ 42.044859] audit: type=1400 audit(1571132840.339:36): avc: denied { map } for pid=6924 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 43.005520] random: cc1: uninitialized urandom read (8 bytes read) 2019/10/15 09:47:22 dialing manager at 10.128.0.105:40541 2019/10/15 09:47:22 syscalls: 2500 2019/10/15 09:47:22 code coverage: enabled 2019/10/15 09:47:22 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/10/15 09:47:22 extra coverage: extra coverage is not supported by the kernel 2019/10/15 09:47:22 setuid sandbox: enabled 2019/10/15 09:47:22 namespace sandbox: enabled 2019/10/15 09:47:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/15 09:47:22 fault injection: enabled 2019/10/15 09:47:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/15 09:47:22 net packet injection: enabled 2019/10/15 09:47:22 net device setup: enabled 2019/10/15 09:47:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist [ 45.137003] random: crng init done 09:49:11 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x134}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:49:11 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:dhcp_state_t:s0\x00', 0x22) 09:49:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r0, 0x0) 09:49:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0xf0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x40286608, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_bp={0x0}}) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) close(r0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x28, &(0x7f00000002c0)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r4, &(0x7f0000000000), 0xcbaa60f5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x6, 0x7, 0x40, 0x8, 0x2, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r4, 0x4) openat$cgroup(r0, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0xc, 0x1, 0xd8, 0x0}, 0x20) openat$cgroup_int(r5, 0x0, 0x2, 0x0) close(r5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa030\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xafs^p\x12Y*WU\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^\x00\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) 09:49:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x3102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) 09:49:11 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="148120024700000700256606000004000000002291aed3dc486e4711227bc0c898213f106881ed287ad65398b30100000035523ac2e05e2605584103777e93f6b5485a10cdf39c473931ff736bfb00000000000b538b099d836bf400"], 0xfffffcb7) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 153.451501] audit: type=1400 audit(1571132951.749:37): avc: denied { map } for pid=6924 comm="syz-fuzzer" path="/root/syzkaller-shm910532704" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 153.498046] audit: type=1400 audit(1571132951.759:38): avc: denied { map } for pid=6942 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13814 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 153.840896] IPVS: ftp: loaded support on port[0] = 21 [ 154.628981] IPVS: ftp: loaded support on port[0] = 21 [ 154.675482] chnl_net:caif_netlink_parms(): no params data found [ 154.717685] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.724360] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.731431] device bridge_slave_0 entered promiscuous mode [ 154.738347] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.745069] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.752336] device bridge_slave_1 entered promiscuous mode [ 154.753134] IPVS: ftp: loaded support on port[0] = 21 [ 154.775599] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.784388] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.818306] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.825723] team0: Port device team_slave_0 added [ 154.848439] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.855512] team0: Port device team_slave_1 added [ 154.868012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.875148] chnl_net:caif_netlink_parms(): no params data found [ 154.888373] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.961999] device hsr_slave_0 entered promiscuous mode [ 155.010379] device hsr_slave_1 entered promiscuous mode [ 155.052342] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.068543] IPVS: ftp: loaded support on port[0] = 21 [ 155.084125] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.094938] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.101910] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.108720] device bridge_slave_0 entered promiscuous mode [ 155.126632] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.133961] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.140838] device bridge_slave_1 entered promiscuous mode [ 155.187412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.196558] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.203003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.209782] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.216152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.226501] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.249656] chnl_net:caif_netlink_parms(): no params data found [ 155.266632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.274468] team0: Port device team_slave_0 added [ 155.293725] IPVS: ftp: loaded support on port[0] = 21 [ 155.300257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.307591] team0: Port device team_slave_1 added [ 155.313068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.340831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.347877] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.354335] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.361543] device bridge_slave_0 entered promiscuous mode [ 155.368286] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.375064] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.381912] device bridge_slave_1 entered promiscuous mode [ 155.405346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.414046] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.501952] device hsr_slave_0 entered promiscuous mode [ 155.540283] device hsr_slave_1 entered promiscuous mode [ 155.580809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.587781] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.594891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.603198] team0: Port device team_slave_0 added [ 155.610513] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.617502] team0: Port device team_slave_1 added [ 155.656591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.666206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.689361] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.695741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.702468] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.708802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.745982] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.753234] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.761023] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.767569] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.775717] IPVS: ftp: loaded support on port[0] = 21 [ 155.822966] device hsr_slave_0 entered promiscuous mode [ 155.890299] device hsr_slave_1 entered promiscuous mode [ 155.950319] chnl_net:caif_netlink_parms(): no params data found [ 155.958620] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.005007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.015084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.038594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.056244] chnl_net:caif_netlink_parms(): no params data found [ 156.078809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.087634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.094001] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.113363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.121705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.131313] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.144344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.161537] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.168110] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.176225] device bridge_slave_0 entered promiscuous mode [ 156.191667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.199424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.207141] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.213543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.228302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.235452] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.242674] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.249455] device bridge_slave_1 entered promiscuous mode [ 156.262905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.276204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.284091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.291673] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.297984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.306578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.321249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.329986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.348400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.357262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.377954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.385613] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.392266] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.399034] device bridge_slave_0 entered promiscuous mode [ 156.406192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.417756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.424873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.432331] team0: Port device team_slave_0 added [ 156.439268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.446825] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.453307] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.462199] device bridge_slave_1 entered promiscuous mode [ 156.468211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.475938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.483553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.490383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.497201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.504640] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.513536] team0: Port device team_slave_1 added [ 156.518887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.526528] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.540142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.557281] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.588273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.596088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.603660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.613050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.625968] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.632266] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.639080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.671549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.678931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.722087] device hsr_slave_0 entered promiscuous mode [ 156.760306] device hsr_slave_1 entered promiscuous mode [ 156.801385] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.808681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.822018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.828207] chnl_net:caif_netlink_parms(): no params data found [ 156.839848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.848430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.856274] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.862649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.869781] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.877843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.885434] team0: Port device team_slave_0 added [ 156.891050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.903286] team0: Port device team_slave_1 added [ 156.908904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.926617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.934227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.944784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.953044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.960786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.969537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.977173] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.983658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.991705] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.997691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.019154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.027216] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.035856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.048641] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.056089] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.063077] device bridge_slave_0 entered promiscuous mode [ 157.075022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.082161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.088903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.099066] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.105344] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.116164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.123687] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.133741] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.140789] device bridge_slave_1 entered promiscuous mode [ 157.153885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.163996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.173529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.186330] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.232073] device hsr_slave_0 entered promiscuous mode [ 157.270356] device hsr_slave_1 entered promiscuous mode [ 157.310295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.318056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.325810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.333359] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.339678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.346650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.354307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.361893] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.368220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.375357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.385550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.399569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.408312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.418036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.432599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.447002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.456332] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.464677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.478154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.486256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.493780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.501692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.513118] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.521064] team0: Port device team_slave_0 added [ 157.526504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.533957] team0: Port device team_slave_1 added [ 157.539471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.553275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.561998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.570686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.577945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.586399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.594351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.602240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.609704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.617425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.626037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.649355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.658920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.666147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.678171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.686033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.693709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.701295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.708604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.718711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.773674] device hsr_slave_0 entered promiscuous mode [ 157.830519] device hsr_slave_1 entered promiscuous mode [ 157.882982] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.889864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.899053] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.905259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.915278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.923039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.936703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.952497] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.959521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.966358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.974470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.984522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.994000] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.002732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.011325] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.026766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.036409] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.047277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.057030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.067715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.078139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.087796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.094639] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.132645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.147515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.156458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.166973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.175894] bridge0: port 1(bridge_slave_0) entered blocking state 09:49:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800003bf4f10b0da703afc20000100074a1095842abd94002ed37026a3a678e6d28f20ab484debe9784337a0b623cbde4272df6b8575f", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 158.182284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.194669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.205175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.219905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.230504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.239099] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.245482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.255929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.272209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.279600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61940 sclass=netlink_route_socket pig=6990 comm=syz-executor.0 [ 158.281091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.320607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.329565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.348667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61940 sclass=netlink_route_socket pig=6988 comm=syz-executor.0 [ 158.353188] ptrace attach of "/root/syz-executor.5"[6998] was attempted by "/root/syz-executor.5"[6999] [ 158.369442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:49:16 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x4000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x7fd417f6b3bd1b6c, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x80) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)=@known='\x00\x00\x00\x00ted.syz\x00', &(0x7f0000000300)=""/179, 0xb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) 09:49:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x6, {0xfffffe01}}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000f2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) [ 158.379008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.394593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.423803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.432807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.444551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.451577] audit: type=1400 audit(1571132956.759:39): avc: denied { map } for pid=7004 comm="syz-executor.5" path="/root/syzkaller-testdir703304124/syzkaller.1wnhxs/1/file0/mem" dev="devtmpfs" ino=13681 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file permissive=1 [ 158.455693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 09:49:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400900, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/4096) openat$null(0xffffffffffffff9c, 0x0, 0x280000, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000083000000000000000000000000000000000000000000000000000000ffffffff010000000500000000000000000061716c0000000002000000000000000000000000000000f9ff0000000000000065727370616e300000000000000000007465616d5f736c6176b1f83100000000aaaaaaaaaabb000000000000aaaaaaaaaa970000000000000000e00000005001000088010000706b747479706500000000ed8292dff628e2350000000000000000000000000008000000000000000000000000000000636f6e6e627974657300000000001badf12700000000000000000000000000001800000000000000000000000000000000e2ffffffffffff0200000000000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000200000000000000000006172707265706c79000000000040000000000000000000000000000000003843729d200000000019f1aaaaaaaabb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x290) r5 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000083000000000000000000000000000000000000000000000000000000ffffffff010000000500000000000000000061716c0000000002000000000000000000000000000000f9ff0000000000000065727370616e300000000000000000007465616d5f736c6176b1f83100000000aaaaaaaaaabb000000000000aaaaaaaaaa970000000000000000e00000005001000088010000706b747479706500000000ed8292dff628e2350000000000000000000000000008000000000000000000000000000000636f6e6e627974657300000000001badf12700000000000000000000000000001800000000000000000000000000000000e2ffffffffffff0200000000000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000200000000000000000006172707265706c79000000000040000000000000000000000000000000003843729d200000000019f1aaaaaaaabb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x290) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001340)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001440)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=@deltclass={0x54, 0x29, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, r6, {0x9, 0xffe8}, {0x8, 0x1}, {0x9, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0x81, 0x20}}, @TCA_RATE={0x8, 0x5, {0x3, 0x20}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x8}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6008001}, 0x200880d0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 158.526527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.539680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.571716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 158.583240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.590965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.604685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.614380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 09:49:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x68, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x241}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f00000002c0)) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 158.625608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.651470] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.657552] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.683299] xt_connbytes: cannot load conntrack support for proto=7 [ 158.698295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 158.700040] hrtimer: interrupt took 33185 ns [ 158.705787] xt_connbytes: Forcing CT accounting to be enabled [ 158.732008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.744495] xt_connbytes: cannot load conntrack support for proto=7 [ 158.752019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.759176] xt_connbytes: Forcing CT accounting to be enabled [ 158.769382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.777806] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.786558] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.793082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.805353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.813054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.860275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.882489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.901064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.908659] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.915032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.925637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.936272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.948125] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 09:49:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400900, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/4096) openat$null(0xffffffffffffff9c, 0x0, 0x280000, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) r5 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001340)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001440)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=@deltclass={0x54, 0x29, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, r6, {0x9, 0xffe8}, {0x8, 0x1}, {0x9, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0x81, 0x20}}, @TCA_RATE={0x8, 0x5, {0x3, 0x20}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x8}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6008001}, 0x200880d0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 158.954851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.971675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.979513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.997655] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.004065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.011612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.018417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.027310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.037054] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.046295] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.054848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.066404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.078404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.087509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.091695] xt_connbytes: cannot load conntrack support for proto=7 [ 159.100540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.113389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.122152] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.128527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.135769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.145882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.155279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.157025] xt_connbytes: cannot load conntrack support for proto=7 [ 159.169055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.183775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.191662] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.198055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.206530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.217465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.225762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.234220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.242072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.249774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.258905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.267609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.278863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.286758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.294788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.308659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.318072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.326027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.334040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.342375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.349777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.361251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.369896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.377190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.385333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.395094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.403625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.411602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.419849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.432244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.441775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.449742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.457675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.471048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.494159] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize [ 159.508575] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 09:49:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x68, 0x1, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x241}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f00000002c0)) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 159.521857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.561832] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 09:49:17 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}}, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffff9c, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) uselib(&(0x7f0000000240)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000480)=0x4) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000400)={0x2d8}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000700)) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x100002, &(0x7f0000000980)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0xbf2}}, {@rq={'rq', 0x3d, 0x1}}, {@common=@debug={'debug', 0x3d, 0x7}}, {@common=@afid={'a\xff\xff{', 0x3d, 0x2}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role={'obj_role', 0x3d, 'net/udp\x00'}}]}}) dup(r4) r5 = socket$inet6(0xa, 0x80003, 0x9) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x9, 0x100) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x523) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') [ 159.567874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.587483] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.609617] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.643404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.658311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.678566] audit: type=1400 audit(1571132957.959:40): avc: denied { create } for pid=7055 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 159.785439] audit: type=1400 audit(1571132957.969:41): avc: denied { write } for pid=7055 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.182539] audit: type=1400 audit(1571132958.009:42): avc: denied { read } for pid=7055 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:49:19 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write(r2, &(0x7f0000000040)="0600", 0x2d4) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34e700000000350000007f12b579fb64a18c15eeb876aeb1cd06000000e20093750ecb8a56df78a949b7d0e2"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x202000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x5, 0x4}}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 09:49:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0xffffffce, 0x0) [ 160.794018] audit: type=1400 audit(1571132959.089:43): avc: denied { map } for pid=7077 comm="syz-executor.3" path="/dev/binder3" dev="devtmpfs" ino=15453 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 160.798096] binder: binder_mmap: 7077 20ffc000-20ffd000 bad vm_flags failed -1 [ 160.874160] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 160.930694] audit: type=1400 audit(1571132959.219:44): avc: denied { map } for pid=7081 comm="syz-executor.5" path=2F6D656D66643A0B656D31C1F8A68D4EC0A35CE2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=27762 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 09:49:19 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, r3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x15) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) r4 = socket(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x200}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', 0x0, &(0x7f0000000480)='\x00', 0x0) umount2(0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 09:49:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)) connect$bt_sco(r1, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 09:49:19 executing program 3: r0 = dup(0xffffffffffffffff) write$P9_RAUTH(r0, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x570da2850ec3f9e4, 0x2, 0x2}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10) unlink(&(0x7f0000000040)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_acc\xff\x03s\x00\x06\x86\b\xd8^>\xdc\xae\xedY\xe3\xe7\x06\xef\xf01\x00\xc2\xd8\x8fK\x83\xe1\x11\xe7kKJ\xe8nM\xfc\xfb\x834K\xe5\xc9\xd96G\x8e\xaf\x18i\bxq/1\xd9O S\xd6\xc3\x03\xd1\x05l\x80z\xcb\x99\x1fz\x15GI\x96[\xd8\xd8\\lQ\xf5o\xa0\x1apJ\x89\xd0\xc4]\x17l\x91\xc4c\xfa\bSv\x02\x92\x12_\x12\x1b\xd5sY\xd32\x883E\t\x18\xef\xd9-\xd7f\x7f6\xc1D\xf2', 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000080)="f175adcf82bbc58203e47ff5bdc4a67b49263e06689f73fe62bec44bfacd8ec6949c1a63d15c2dabe107d6fd84ebe01cc8834cf3d64cb9fadb4bd12ab9e9b3cbd023216967639abbdb0e0a50e957e191138dd5840f5502c47ebc45cfcfd874", &(0x7f0000000140)=""/100, 0x8}, 0x20) close(r3) creat(&(0x7f0000000100)='./file0\x00', 0x0) 09:49:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6_vti0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x268, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYRES64=r0], @ANYRESDEC=r2, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="627d81b978bb379e9994e6955bac8f863eb707d641a6e630a358f69c3e2bcefc684ace41c2974d95d5dfe94fb079e473303d55a1ed862e004abc9bc4dc9ae027d28b2ddbb33a4e7f8d6b7f1cb220ec471fdf36d45ad418499d0be60ef80da3fe8575b2eb5918e054d18aeb575fe4232fca2d58f1bf57e331", @ANYRES64=0x0, @ANYRES64]]], 0x1}}, 0x3c000055) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:49:19 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write(r2, &(0x7f0000000040)="0600", 0x2d4) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34e700000000350000007f12b579fb64a18c15eeb876aeb1cd06000000e20093750ecb8a56df78a949b7d0e2"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x202000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x5, 0x4}}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 09:49:19 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000080)=0xffff, &(0x7f0000000100)=0x4) bind(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r4, 0x1d7) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r5, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000083000000000000000000000000000000000000000000000000000000ffffffff010000000500000000000000000061716c0000000002000000000000000000000000000000f9ff0000000000000065727370616e300000000000000000007465616d5f736c6176b1f83100000000aaaaaaaaaabb000000000000aaaaaaaaaa970000000000000000e00000005001000088010000706b747479706500000000ed8292dff628e2350000000000000000000000000008000000000000000000000000000000636f6e6e627974657300000000001badf12700000000000000000000000000001800000000000000000000000000000000e2ffffffffffff0200000000000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000200000000000000000006172707265706c79000000000040000000000000000000000000000000003843729d200000000019f1aaaaaaaabb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x290) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000400)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={r8, 0x633a, 0xc2efcea7c9e85ff}, &(0x7f0000000240)=0xc) 09:49:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000000000000000000000000000000000000000000000dc35e900aa2402ce"]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {0x0, 0x8100}, {}, {0x208901e5723e6a1a}}, [@filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x14, 0x4, 0x5, 0x0, 0x1, 0x0, [], r5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001300)={r7, &(0x7f0000000000)="21ce00f4e47aebda42b5eea1fcf158220c71e2d410476c71d0a5c2e419a781b268e9951e4240fa274dd8e57d4aa5173e9ef5903fc02a49bb31255222e3360ad273c365cf1aa8338c1f3dbdaae77e4ebd59b740f562895ebdd1367469353c0396510433e7f608cb143c13919e0c88ee8bbeaeaa2734dbd14f131859ecc14d262844940715e402b5054fdc2da6778dfd376d6e4f07fefb00d089abce8d4a090688ec034e25821104acb669af0ba0c9758e8e02734b458803a6fcdbd5ce0e3e7c96520a3c79d617e2b2d52d70c3feb691df287be2845bed7ac35f4c4c0000f1b0ee39438993af9f120ef9ff90f6e7e02bca3e3dbd92c7b9f3", &(0x7f0000000000), 0x1}, 0x20) [ 161.769361] 9pnet: Insufficient options for proto=fd [ 161.818478] xt_connbytes: cannot load conntrack support for proto=7 [ 161.829166] xt_connbytes: Forcing CT accounting to be enabled 09:49:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xfffffffa, 0x4) [ 161.881577] 9pnet: Insufficient options for proto=fd [ 161.899107] xt_connbytes: cannot load conntrack support for proto=7 [ 161.906897] xt_connbytes: Forcing CT accounting to be enabled [ 161.923742] xt_connbytes: cannot load conntrack support for proto=7 09:49:20 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, r3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x15) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) r4 = socket(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x200}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', 0x0, &(0x7f0000000480)='\x00', 0x0) umount2(0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 09:49:20 executing program 2: setreuid(0x0, 0x0) mknod(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x6, 0x1, [{0x400, 0x80000000, 0xfffffffffffffff9, 0x0, 0x0, 0x65dc6d4fe7e9e829}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000cab000)=0x6) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000001d40)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e20, 0x9, @ipv4={[], [], @broadcast}, 0x2}, {0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x5, [0xae8, 0x200, 0xffffff6b, 0xe0e, 0x535, 0x3, 0x6, 0x1]}, 0x5c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1400000000000000010000e245000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c00000000000000ecffffff01000000", @ANYRES32, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x5c, 0x80000c0}, 0x8801) setregid(r5, 0xee00) keyctl$session_to_parent(0x12) [ 162.024765] xt_connbytes: cannot load conntrack support for proto=7 09:49:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x8}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 09:49:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xfffffffa, 0x4) [ 162.198270] 9pnet: Insufficient options for proto=fd 09:49:20 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x83, 0x40, 0x3, 0x8}, {0x1, 0x0, 0x0, 0x3e00000000000000}, {0x4, 0x7ec3}, {0x0, 0x2, 0x8}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0x2, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20000000000008, &(0x7f00000000c0), 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000100)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000400)={0x890f047ed6446997, @output={0x3000, 0x1, {0x8462, 0xff}, 0xee, 0x5}}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x0, 0x6}) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f00000004c0)="2e00000022004786006d20020031d4591ba8acdd41e600899c22fb5b66000025f9336056ac3d23c878ed0f0c0b7c", 0x2e) setsockopt$sock_int(r6, 0x1, 0x20000000000008, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000b1000/0x4000)=nil, 0x4000, 0x65) [ 162.232525] xt_connbytes: cannot load conntrack support for proto=7 [ 162.249586] xt_connbytes: cannot load conntrack support for proto=7 09:49:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, @ipv6=@local}]}, 0x28}, 0x1, 0xfdffffff00000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0xaa6) 09:49:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='.//]!@\'%#\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000107749dd93ec69a4ba7832500a3", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 09:49:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000c007f2d8cd1347100001476987e61bf80586af5867eaa505000000000000000000000000eeafa701436888e260c730361e868b3ee154937b301c540a4276efa4082d8b1d9e6e2345e60c56570d1bcfd74dfc703192c1e4f312b9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800130005000000"], 0x3c}}, 0x0) 09:49:21 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0xfffffffffffffffc, @broadcast}, 0x10) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:49:21 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x170) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x6035ddd9cbe3575a) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 09:49:21 executing program 0: socket$unix(0x1, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file2\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='vxfs\x00', 0x4, &(0x7f0000000180)='eth0\x00') [ 162.781219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1984 sclass=netlink_route_socket pig=7203 comm=syz-executor.1 09:49:21 executing program 3: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000340)=""/166) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r9 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0xa0) ftruncate(r9, 0x28007d) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fu\x9d\x93\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="040000000000000070", @ANYRESDEC=0x0]) sendfile(r9, r9, 0x0, 0x2008000fffffffe) socket$inet_tcp(0x2, 0x1, 0x0) 09:49:21 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="81a5997ad4193d70d458d9b7486f013881e64544f92d3fe751cc8a1003822d17b9ba3029e775cd54643bd35b94525d2b0c52ca6158e0771c7f5ae2bde1eeb3f1ea3bacca509e0ddfb79e534fa7", 0x4d) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = request_key(0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r6, &(0x7f00000001c0)=""/103, 0x67) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCLINUX7(r8, 0x541c, &(0x7f0000000080)={0x7, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000400)={r9, 0xfff9, 0x6}, 0x8) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r10, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x0) dup2(r11, 0xffffffffffffffff) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="5e8e46f8c97fc7a90c85755da872caff698fb1ba54da56eac69c8c995063840132235dcd62d44f8343fe108144629122237d3a87c0417c26252bd034a02ed5d776f322d6c94f7a4416a5d2367120f4d89ceea4dd319574674844c5a1904cb617770cdb9255b78a9c3722186981b972ac62673fba6920cc6a8c6d608a513f6639a528eb509a46583ccf2c955f315ca2bef566", 0x92) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x10, &(0x7f0000000100)='wlan1+em1}*self\x00', 0xffffffffffffffff}, 0x30) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:49:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x8040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x2, 0x8000}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000280)="36670f01c46726f20fa26736f30f090f01c40f2013f4b832000f00d80f0fd89a440f20c066350d000000440f22c066b96b0a000066b8a9910dc566ba000000000f30", 0x42}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) iopl(0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0xa6da3b9eb0daa28d}, 0x10) 09:49:21 executing program 3: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000000)='./file0\x00', 0xe000000000000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xb) r4 = gettid() tkill(r4, 0x20000000014) sendfile(r0, r1, 0x0, 0x9) 09:49:21 executing program 4: ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) socketpair(0x1, 0x0, 0x9, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r1, 0x110, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x210040, 0x6) sendmsg$tipc(r5, &(0x7f0000000800)={&(0x7f0000000040)=@name={0x1e, 0x2, 0xdf614f9e6e33a8b2, {{0x42, 0x2}, 0x1}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="f0b84bdabf82c138756ae046a9a051e37c7c20aa3f205a9a216f96ec03697ef2c98c70cced10dae5a14bb2663b023f6b9cfc9aedadcf011b42e7f315fdb02fa25abf8021b1428057586050f9ce01a5efa73ca99fcfad5c8fb8dd110ea975bdb2c6a60502bd171911843ff45b4b354ae1e0c405e887607c420b02b77a758f31d2c2a254f41073220f0809281a5e9beaf1ba57377c3bb731f3a75193c66ccf9d20813cbbef473996e614d72a42ba2fb52db31e0472ab0508db7e8877af134dafd1c9267e3e77f605cfd9644b52aa4bc20e75a30cff555c3f10a301a1a6b2084846e4f2f7251512ba6f48ce05abace108d2e2a14dca6e", 0xf5}, {&(0x7f0000000200)="554c36277e4d0af28b37b340729aacfe72f0663a88581c8c4e6ad517e5ace6804649f824e71ad25ff4164d709ac1f3b18259000308db8a7353d326d5d50991ac4e187b6d6004d59dc244c11b2eebb75c1990954654c881c13217df7a768cc39898ede103e74e58f3e9145e695187f09591327c9527c9b45598bcdb6d4f676c793bdec4", 0x83}, {&(0x7f00000002c0)="4528105549616ee26d7844f0310a2e6872e815e6f4d6626b9c3f15d0575de48988e91614beba9d00697c46e23cf1ddd7b178861e858a2860cd27492df5732c2e5b346ba36b7eeab264ce7a75a80a59cbe4523635fcacfe4e890d361656d992fe304904324a59f75e94b1dcdd51aef82aae1244013a1a2ace81be991cc667674de7058bcbbb31207882c4443deaa8bd5141b7a5693011ce1dad88583dffadee1b3693ff3fca10ce", 0xa7}, {&(0x7f0000000380)="4910cd9455ab0b929c23fc680eb20ef8da7b88224bde532301800000c3147c4c674ac77cb6b355efb15abd72797df29efc37c4380279338aa43832d5700ebe9d89ab211204281f7fffa5bb7ee10889c87d2a4c0dc5ed45009a1612e100"/104, 0x68}, {&(0x7f00000004c0)="f6316ffeaf6037062fba5d0acda89608a619e2c2f4a066ca265e89782f25bfb38e68f990215a58f0e6669a8a781e8b2142a2417251663e8940a9760f3bf9708bf2df", 0x42}, {&(0x7f0000000540)="d132f01e9a8b9da6f58b2a0c20205d91175e31b5757df0eba03baf861129513b0370a3be7e954b2f4e00f18154c0b59696c35e81971d7a9a238f3d66362853004dbcedfef66c220bde23a7a808d4ed86eda38faaf9b12aab370b3e1f6c0e5ea969eab67f9c9df2ef84944812934e16", 0x6f}, {&(0x7f00000005c0)="bf16f9096b0e095c7c7dc771fedd6f8106d171d6faaf447654eee71348396d1ceedd48cde70cdd4e95d74be2b70b81fa9e1ba4779726ebbd7a595f7d5da46b052b285b89190e5208dd5ed10ed79a25405aa5056fb4d4e5e6c770e1e9cc1840f67d5bf73c1e3ce487107e32dc7b5be1816ab274b77d624384280415598f2253d7ed18b01bef2235faf871aa0fbb", 0x8d}], 0x7, &(0x7f0000000700)="60e7ee9f209142d2f9d54cdf3960023c1f860c73b38de9628c78bc6073626fbc153ffe6606ff5ff64c867aa6971e406180952f0ed14dd48a19e221e7fec48b368baff251e53e8e0e27199bf7ce76f6c647c9dbbf5940dbcfa6f691e2239d437d22a929fa2edd8264367e00c03b86bb99afaa4ab036f1bfae72e0150cafd47ef52763e00ef6d9c48d9df54936421b5a29c422b38e9f187588230c959ca0766dcaddf87e61e64ca75f6425514b001b4e8ff3c6b0093449e73f0effce66e5b8d61d2dc186f128c16101b7d959312279786426ad287d77e9", 0xd6, 0x4}, 0x40000) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) add_key$user(0x0, 0x0, &(0x7f0000001140), 0x0, 0x0) [ 163.110852] overlayfs: filesystem on './file0' not supported as upperdir 09:49:21 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="79d589bbbb78587ce510906b29489fb394566ee14ffedd5d2f75471105851c09d3497771"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffff9c, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000400)={0x2d8}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x18f08b65}, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sendto$inet(r0, 0x0, 0x0, 0x400c000, 0x0, 0x0) getpgrp(0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) ptrace(0xffffffffffffffff, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000480)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000500)='net/fib_triestat\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x523) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x4800) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x10142, 0x0) 09:49:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) socket$inet_dccp(0x2, 0x6, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$int_in(r2, 0x800000c004500a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:49:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x10036}, 0x3f00) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) [ 163.340586] kvm: emulating exchange as write [ 163.360122] protocol 88fb is buggy, dev hsr_slave_0 [ 163.365384] protocol 88fb is buggy, dev hsr_slave_1 09:49:21 executing program 2: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0xffffffffffffffda, 0x47, 0x1}, 0x7) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffefffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = open(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000086fff4)) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000280)=0x0) write$cgroup_pid(r4, &(0x7f0000000240)=r8, 0xffffffffffffffd5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r9 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x332) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) accept$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000002c0)={'team0\x00', r12}) openat$cgroup_ro(r4, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = open(0x0, 0x400100, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r13, 0x8955, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00@\xd6\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400201) r15 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r15, 0x7709, 0x0) r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x6100}, 0x0, 0xfffdffffffdfffff, 0xffffffffffffffff, 0x0) dup3(r15, r16, 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) [ 163.492736] overlayfs: filesystem on './file0' not supported as upperdir [ 163.535603] xt_connbytes: cannot load conntrack support for proto=7 09:49:22 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x63) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000004800), 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) 09:49:22 executing program 5: creat(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000700)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 09:49:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x400}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000240)={@loopback, @initdev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd, r8}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)=0x0) ptrace$cont(0x9, r9, 0x8, 0x7fffffff) [ 163.753644] audit: type=1800 audit(1571132962.049:45): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16585 res=0 [ 163.858524] audit: type=1804 audit(1571132962.089:46): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir794437099/syzkaller.TY2raw/11/file0" dev="sda1" ino=16585 res=1 [ 164.040551] xt_connbytes: cannot load conntrack support for proto=7 [ 164.047140] xt_connbytes: Forcing CT accounting to be enabled 09:49:22 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0x4a, 0x81}, 0x0, 0x0, 0x1, {0x3, 0xa4}, 0x7f}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_off='metacopy=off'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 164.160679] overlayfs: unrecognized mount option "metacopy=off" or missing value [ 164.171882] device bridge_slave_1 left promiscuous mode [ 164.177711] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.183339] xt_connbytes: cannot load conntrack support for proto=7 [ 164.208404] overlayfs: unrecognized mount option "metacopy=off" or missing value 09:49:22 executing program 2: r0 = socket$inet(0x10, 0x10000000003, 0x9) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff28, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000000a001800004d0000000000000100000000000000000000000000000000001876ecb41564c1417454d63bb010f58e243ea557e5b1d21c1407f5ae517565247b8281ca1a0a7c9c37212ee3962661dd3f33aa38f83d28f35967728c25704521f73133a0c2041a894f29e3c85a33f9f4c8efe259a4f43f017670181bf2552e60ff87d2135b843dda00218feb2b8fb5f878b5f52aa392f049777b2f5abb68c1de23eadf2dbb672d0d6d3963a966b91e40e32ac2173ceb720f287de9d55bf75467f92804ad066a566d778d8413412f6f0aa6119e1258dcce1384fdfdd0f67c3482b9dca4a860602658d6eaffa42c62f1bccd0d76a971b242cebf3f14989c3bb11dcbf6f37056c0d309cb1d4bb4d4c258d93ae5b504c12d95b20b7520e1f6edd7e88c3255e150cff948da064b292918ab23", @ANYRES32=r4], 0x28}}, 0x0) 09:49:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01ff0000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000400)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r5, 0x92, "7b842e6abc1e2a419ab375b4f6bc68ba849b84e286dafc782087478400fa7a631e84f53a07ac845d29fd4bfa018128287552c6c697388e31661e448824638524b7808117272bebf85fa02e090742a5459081b53a1ee9310a9dfc443a538b79d9ef29669cda6727f06e0dbf2825f7ba4e4d6627a3d4d4ae4e68d9b74253af50884fb199511a35289cdbc1d6803864973545bf"}, &(0x7f00000000c0)=0x9a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e23, 0x46a, @mcast1, 0x4}}, 0x4b09, 0x9}, 0x90) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000100)={@local, @remote, 0x0, 0x2, [@loopback, @multicast1]}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 09:49:22 executing program 4: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, r3, r4) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000180)) r9 = accept4$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d80)=0x14, 0x100000) listen(r9, 0xfffffffd) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r11, 0x40045569, 0xa3c) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r12, 0x40045569, 0xa3c) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYRESOCT=r12, @ANYRES64=r10], 0x1023}}, 0xfffffffffffffff9) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c000000200029e30b00000000000000020000009500290000000001acf2fbd06c5362a728a937b5b4cdd7939f3ad46ee4aee890c9cf80959ff8eceffdd7fbbdd70e0ee9d6f1c70c1c215991a9e5b3bbe82f6d37e042dd0877fb3066d56670b10b738776090b09cda55898d033a6f9e4fa2389403a22e7091e48464db984", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) [ 164.284069] device bridge_slave_0 left promiscuous mode [ 164.289591] bridge0: port 1(bridge_slave_0) entered disabled state 09:49:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x20000) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f00000000c0)) 09:49:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x80000000000004, 0x4, 0x0}, 0x21) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff50f05faf1f8030c8310000000000019078ac7014bbac141411030490780000021d453f09000000000000010000ac1400aaac14140023"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x420080) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000400)={r2}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x8, 0x80000001, 0x4, 0x1ff, 0x40, 0xff, 0x3, {r2, @in6={{0xa, 0x4e22, 0xf8d2, @loopback, 0x10001}}, 0x2, 0x9, 0x7, 0x9, 0xffff}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x6, 0x62, "42620da3b9de26ae2f4255ec0bb08132266457f9aa7246e886e690d030e1e71585d236aac60f107ed0bca333f2faa36345ae89d4eb8543a9027130f06fa4ebdc9e8e412bf65b456c2cf9f60f4ec00295f686462f8689c04782b1ba7d0d8d04940814"}, 0x6a) [ 164.485490] xt_connbytes: cannot load conntrack support for proto=7 [ 164.502296] device hsr_slave_1 left promiscuous mode [ 164.549374] device hsr_slave_0 left promiscuous mode 09:49:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x331a}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0x81}, &(0x7f00000001c0)=0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket(0x10, 0x3, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x800, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x4, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302", 0x11}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x8) ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000000200)={0x0, 0x1, @raw_data=[0x200, 0x8, 0x2c0d, 0x24f3, 0x8, 0x32f5, 0x3, 0x2, 0x1, 0x3f, 0x3f, 0x4, 0x5, 0x7, 0x9, 0xa33]}) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) [ 164.604952] team0 (unregistering): Port device team_slave_1 removed [ 164.617023] team0 (unregistering): Port device team_slave_0 removed [ 164.637250] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 164.705009] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 164.731936] xt_connbytes: cannot load conntrack support for proto=7 [ 164.796934] bond0 (unregistering): Released all slaves [ 164.849324] bridge0: port 3(gretap0) entered blocking state [ 164.859677] bridge0: port 3(gretap0) entered disabled state [ 164.871012] device gretap0 entered promiscuous mode [ 164.876773] bridge0: port 3(gretap0) entered blocking state [ 164.882607] bridge0: port 3(gretap0) entered forwarding state [ 164.890007] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.925306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.937956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.950405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.962598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.962784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.962942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.963098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.963249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.963396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 164.963540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7317 comm=syz-executor.0 [ 166.711389] IPVS: ftp: loaded support on port[0] = 21 [ 167.698172] chnl_net:caif_netlink_parms(): no params data found [ 167.729925] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.736446] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.743297] device bridge_slave_0 entered promiscuous mode [ 167.749723] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.756718] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.763627] device bridge_slave_1 entered promiscuous mode [ 167.779713] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.788667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.804473] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.811694] team0: Port device team_slave_0 added [ 167.816963] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.824082] team0: Port device team_slave_1 added [ 167.829183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.836421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.902249] device hsr_slave_0 entered promiscuous mode [ 167.940363] device hsr_slave_1 entered promiscuous mode [ 167.980628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 167.987463] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 168.000870] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.007205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.013823] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.020190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.045564] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 168.052014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.059643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.068157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.075367] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.082289] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.091777] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 168.097844] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.106530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.114216] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.120602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.129197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.136868] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.143241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.158049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.166105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.176157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.185271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.196255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.206622] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 168.213105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.219875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.232592] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 168.241973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.690526] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 09:49:28 executing program 3: 09:49:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = dup2(r0, 0xffffffffffffffff) openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x14, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x6, 0x80, 0x9, 0xc2, 0x10001}, 0x14) 09:49:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x20000) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f00000000c0)) 09:49:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) r1 = shmget$private(0x0, 0x3000, 0xac0476c4416a346b, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/49) fcntl$setlease(r0, 0x400, 0x0) 09:49:28 executing program 1: pipe(0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x49, 0x0, 0x8, 0x6, 0x0, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xec, 0x3, @perf_config_ext={0x1, 0x360d}, 0x210, 0x6, 0x3ff, 0x8, 0x7, 0x4, 0x2}, r0, 0x5, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000140)="b074407b0c40454aeef4061f534cd501a05440d09d269e693f42f0283e57067b4d370fe9c40f653e5a524cf2d572ff2f53566c0ebff235a8ac9caec26ff37df2c4243ce622f9b900b71c9833abaf7f3fe4", 0x51) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) 09:49:28 executing program 0: 09:49:28 executing program 0: 09:49:28 executing program 2: 09:49:28 executing program 3: 09:49:28 executing program 0: [ 170.154823] ntfs: (device loop5): parse_options(): Unrecognized mount option errorsXstF4{ ߼⸳z:f'![Fc1;8; 7;{(?4m}!:2iufECqWr᝙F]ReGHz~6.fjF)xnҷs@&jKآfi0+䑕dֺ [ 170.154823] 2w@q< h30 [ 170.154823] (y. 09:49:28 executing program 3: 09:49:28 executing program 4: 09:49:28 executing program 0: [ 170.261405] ntfs: (device loop5): parse_options(): Unrecognized mount option errorsXstF4{ ߼⸳z:f'![Fc1;8; 7;{(?4m}!:2iufECqWr᝙F]ReGHz~6.fjF)xnҷs@&jKآfi0+䑕dֺ [ 170.261405] 2w@q< h30 [ 170.261405] (y. 09:49:28 executing program 5: 09:49:28 executing program 2: 09:49:28 executing program 4: [ 170.375482] xt_connbytes: cannot load conntrack support for proto=7 09:49:28 executing program 1: 09:49:28 executing program 3: 09:49:28 executing program 0: 09:49:28 executing program 2: 09:49:28 executing program 4: 09:49:28 executing program 2: 09:49:28 executing program 0: 09:49:28 executing program 3: 09:49:28 executing program 5: 09:49:28 executing program 4: 09:49:28 executing program 2: 09:49:28 executing program 0: 09:49:28 executing program 1: 09:49:28 executing program 3: 09:49:28 executing program 4: 09:49:28 executing program 5: 09:49:28 executing program 1: 09:49:29 executing program 2: 09:49:29 executing program 0: 09:49:29 executing program 3: 09:49:29 executing program 4: 09:49:29 executing program 5: 09:49:29 executing program 1: 09:49:29 executing program 2: 09:49:29 executing program 4: 09:49:29 executing program 3: 09:49:29 executing program 0: 09:49:29 executing program 5: 09:49:29 executing program 1: 09:49:29 executing program 2: 09:49:29 executing program 4: 09:49:29 executing program 5: 09:49:29 executing program 0: 09:49:29 executing program 3: 09:49:29 executing program 1: 09:49:29 executing program 2: 09:49:29 executing program 4: 09:49:29 executing program 5: 09:49:29 executing program 0: 09:49:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 09:49:29 executing program 1: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) pipe(0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:49:29 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000240)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b56070000000000000036bc9e892451c93db0ed05311b9e56d77397f8640cef47628488498f2c8c6624e7329e5b17f60fe94e963686a647bbcddc1417ad4f79a4d2a5e964644e4f7edcd054a09445138614285d", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef04ff46cf47e8137f38ee38898fd565996a1a1f4cd1b86a0e031dff9943eb7285dbf2666b810306f91c45e9"], 0x0, 0xc3}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:49:29 executing program 5: openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x4000000000000, &(0x7f0000000040), 0x3) 09:49:29 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x108000, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000100)=""/86) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) tee(r3, 0xffffffffffffffff, 0x4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 09:49:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x2400479d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x446373aab99932e) 09:49:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x6c, 0x2}, @ramp}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)={0x20, 0x1, 0x4, 0x0, 0xb77}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0xfffffffffffffdaf) 09:49:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getresgid(&(0x7f0000000480), &(0x7f0000000300)=0x0, &(0x7f00000004c0)) setresgid(r2, r3, 0xee00) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {0xb2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) 09:49:29 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0xffffffffffffff11) sendfile(r0, r1, 0x0, 0x10000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) setsockopt(r2, 0x9, 0x81, &(0x7f0000000200)="806be95d1cadd1dd7840d613f2d9f8a51bdb426a5ed08038ea4ba839cbe2950c21ade489362dd4cae8c2ee5232936d30c574c9fbb628a7ba7e40268abdfe3c7fade605660dd8ea31ef5efe89b90c3406a2c80322a051919fa8f4f832b5b46f4ef17010599802a51718013dc793e05520350256267c3fde8eae434ee57f72582160ba820f4270c930daf03b9abc95aac4bbf363f0be5b376d193707818fbe0d08050c391a3668b5d10740f4aa7a46a2b9d4f33cb169e3c6099bb2f9ed273024", 0xbf) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "1e80978a24f31f9a934593a84ea5363f"}, 0x11, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000007f00)={0x0, 0x989680}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000080)) setreuid(0x0, r5) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) semget(0x0, 0x0, 0x20c) [ 171.153423] ptrace attach of "/root/syz-executor.3"[7461] was attempted by "/root/syz-executor.3"[7467] [ 171.180475] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 09:49:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0xc00000000000008, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000640)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "86dca5", 0x0, 0x0, 0x0, @dev, @mcast2, [@dstopts={0x3a}], "59eacce11792e98a"}}}}}}}, 0x0) 09:49:29 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x84000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x2, 0xff8, 0x2, {0x5, @pix={0xbf, 0x3, 0x4c47504a, 0x0, 0x1ff, 0xc7da, 0x9, 0x3, 0xc6f26c7ecfa009a, 0x4, 0x1, 0x4}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) epoll_create1(0x0) socket$alg(0x26, 0x5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 09:49:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='lapb0\x00'}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000480)={r2, 0x1, 0x7, 0x1, 0x40, 0xfb, 0x80}) r3 = socket(0x2, 0x80800, 0x20) write(r3, &(0x7f0000000000)="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", 0xfc) [ 171.275315] audit: type=1800 audit(1571132969.569:47): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16620 res=0 09:49:29 executing program 2: syz_extract_tcp_res(&(0x7f0000000040), 0xed4, 0x804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @local, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @dev, @local}}}}}}}, 0x0) [ 171.384137] audit: type=1804 audit(1571132969.599:48): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir385395042/syzkaller.B2TKUr/11/file0" dev="sda1" ino=16620 res=1 [ 171.579229] audit: type=1800 audit(1571132969.609:49): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16620 res=0 [ 171.604762] audit: type=1400 audit(1571132969.649:50): avc: denied { create } for pid=7478 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 171.620692] xt_connbytes: cannot load conntrack support for proto=7 [ 171.632406] audit: type=1400 audit(1571132969.659:51): avc: denied { setopt } for pid=7478 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 171.659078] audit: type=1800 audit(1571132969.719:52): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16620 res=0 [ 171.682339] audit: type=1400 audit(1571132969.739:53): avc: denied { map } for pid=7484 comm="syz-executor.0" path="/dev/vbi1" dev="devtmpfs" ino=15302 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1 [ 171.710799] list_add double add: new=ffff888059270b58, prev=ffff888059270b58, next=ffff888092017340. [ 171.720651] ------------[ cut here ]------------ [ 171.725414] kernel BUG at lib/list_debug.c:29! [ 171.730256] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 171.735617] Modules linked in: [ 171.738808] CPU: 0 PID: 7496 Comm: syz-executor.4 Not tainted 4.14.149 #0 [ 171.745715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.755050] task: ffff8880591d8380 task.stack: ffff8880591e0000 [ 171.761100] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 171.766273] RSP: 0018:ffff8880591e7a00 EFLAGS: 00010282 [ 171.771615] RAX: 0000000000000058 RBX: ffff888092017300 RCX: 0000000000000000 [ 171.778882] RDX: 0000000000011b3d RSI: ffffffff814b3fa5 RDI: ffffed100b23cf36 [ 171.786135] RBP: ffff8880591e7a18 R08: 0000000000000058 R09: ffff8880591d8c48 [ 171.793385] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888092017340 [ 171.800640] R13: ffff888059270b58 R14: ffff888059270b58 R15: ffff888059270b58 [ 171.807943] FS: 00007f9988d3e700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 171.816147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.822008] CR2: 000000c438947000 CR3: 000000008ae5f000 CR4: 00000000001426f0 [ 171.829256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.836503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.843750] Call Trace: [ 171.846319] ? _raw_spin_lock+0x37/0x40 [ 171.850271] p9_fd_request+0xe3/0x2b0 [ 171.854049] p9_client_rpc+0x21b/0x1180 [ 171.858003] ? p9_client_prepare_req.part.0+0xa90/0xa90 [ 171.863344] ? trace_hardirqs_on_caller+0x400/0x590 [ 171.868336] ? trace_hardirqs_on+0xd/0x10 [ 171.872467] ? finish_wait+0x260/0x260 [ 171.876372] ? destroy_inode+0xc7/0x120 [ 171.880332] ? evict+0x3e6/0x630 [ 171.883735] p9_client_clunk+0x89/0x150 [ 171.887691] v9fs_dentry_release+0x6d/0xd0 [ 171.891901] ? v9fs_cached_dentry_delete+0x40/0x40 [ 171.896823] __dentry_kill+0x39a/0x580 [ 171.897934] kobject: 'kvm' (ffff88821980ae10): kobject_uevent_env [ 171.900703] ? dput.part.0+0x2a/0x750 [ 171.900712] ? dput.part.0+0x2a/0x750 [ 171.900719] dput.part.0+0x59f/0x750 [ 171.900728] do_one_tree+0x44/0x50 [ 171.900737] shrink_dcache_for_umount+0x67/0x140 [ 171.900747] generic_shutdown_super+0x6d/0x370 [ 171.900754] kill_anon_super+0x3f/0x60 [ 171.900764] v9fs_kill_super+0x3e/0xa0 [ 171.900774] deactivate_locked_super+0x74/0xe0 [ 171.908727] kobject: 'kvm' (ffff88821980ae10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 171.910790] deactivate_super+0x85/0xa0 [ 171.910800] cleanup_mnt+0xb2/0x150 [ 171.910808] __cleanup_mnt+0x16/0x20 [ 171.910817] task_work_run+0x114/0x190 [ 171.910830] exit_to_usermode_loop+0x1da/0x220 [ 171.918676] kobject: 'kvm' (ffff88821980ae10): kobject_uevent_env [ 171.921832] do_syscall_64+0x4bc/0x640 [ 171.921840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.921853] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.921860] RIP: 0033:0x459a59 [ 171.921864] RSP: 002b:00007f9988d3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.921873] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a59 [ 171.921877] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140 [ 171.921884] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 171.928579] kobject: 'kvm' (ffff88821980ae10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 171.931181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9988d3e6d4 [ 171.931186] R13: 00000000004c9496 R14: 00000000004e0b60 R15: 00000000ffffffff [ 171.931193] Code: e9 56 ff ff [ 171.939001] kobject: 'kvm' (ffff88821980ae10): kobject_uevent_env [ 171.943510] ff 4c 89 e1 48 c7 c7 80 31 9d 86 e8 9f 9e 72 fe 0f 0b 48 89 f2 4c 89 e1 [ 171.954294] kobject: 'kvm' (ffff88821980ae10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 171.956509] 4c 89 ee 48 c7 c7 c0 32 9d 86 e8 88 9e 72 fe <0f> 0b 48 89 f1 48 c7 c7 40 32 9d 86 4c 89 e6 e8 74 9e 72 fe 0f [ 172.087351] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff8880591e7a00 [ 172.094055] ---[ end trace 3d6ceec86ba287e2 ]--- [ 172.098804] Kernel panic - not syncing: Fatal exception [ 172.105428] Kernel Offset: disabled [ 172.109048] Rebooting in 86400 seconds..