_surp=0 hugepages_size=1048576kB [ 1284.563160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1284.646323] devpts: called with bogus options [ 1284.664048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.790121] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.797744] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.825760] 2699 total pagecache pages [ 1284.872722] 0 pages in swap cache [ 1284.905275] Swap cache stats: add 0, delete 0, find 0/0 [ 1284.951627] Free swap = 0kB [ 1284.970338] Total swap = 0kB [ 1284.991124] 1965979 pages RAM [ 1285.011525] 0 pages HighMem/MovableOnly [ 1285.034450] 333229 pages reserved [ 1285.051600] 0 pages cma reserved [ 1285.090429] Out of memory: Kill process 31646 (syz-executor.3) score 1007 or sacrifice child [ 1285.178824] bond0: Releasing backup interface bond_slave_1 02:24:06 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/stctus\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x30, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00\x03', @ifru_names='tunl0\x00'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x20, 0x4, 0x7, 0x80000001}, 0x10) [ 1285.253441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1285.273293] bond0: Error: Device is in use and cannot be enslaved [ 1285.274729] devpts: called with bogus options [ 1285.280155] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.290660] protocol 88fb is buggy, dev hsr_slave_1 02:24:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e3", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1285.325729] devpts: called with bogus options 02:24:06 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x20009, 0x91}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1285.456941] audit: type=1800 audit(1572229446.651:3117): pid=31758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18489 res=0 [ 1285.487964] bond0: Releasing backup interface bond_slave_1 02:24:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1285.637153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1285.646114] bond0: Releasing backup interface bond_slave_1 [ 1285.684222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1285.798809] devpts: called with bogus options [ 1285.903958] devpts: called with bogus options [ 1285.975511] bond0: Releasing backup interface bond_slave_1 [ 1286.020213] devpts: called with bogus options [ 1286.045950] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1286.070154] protocol 88fb is buggy, dev hsr_slave_0 [ 1286.073111] protocol 88fb is buggy, dev hsr_slave_1 [ 1286.077710] protocol 88fb is buggy, dev hsr_slave_1 [ 1286.188670] audit: type=1800 audit(1572229447.381:3118): pid=31781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bond0" dev="sda1" ino=18634 res=0 [ 1286.272044] bond0: Releasing backup interface bond_slave_1 02:24:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="33a5957ff527747732b7bdb6437ac857cb64835dce408cfda87943c75e3aad3cf488a4923b95bf79e42465512594a231d60c02a1145dd792d078adc24ccdfa834c03b027c4fd60d1183aa4716a77eb61a89f78c1ca62590f1580d71854c6a1624ca96bc73c53998f0d30d5971c9b962f81b09df6d6156508c71d8b5558578124177f5c477012f2e3b7ddf2d03d47913e2fda17c7479bb7588019473cc4eae3c594879cfa1f0478f39283c0999cefeb282a00e6ec778637436b8e1ff79b3677d8ec8a052d0673d3be44675389658132995496d9f9c5c61df73f7c21026ce1c478aa1055465d0c91359bad3ae9f2868b7300"/256, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1286.390162] protocol 88fb is buggy, dev hsr_slave_0 [ 1286.504023] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1286.537703] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1286.553083] CPU: 0 PID: 7006 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 1286.560051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.569410] Call Trace: [ 1286.572009] dump_stack+0x138/0x197 [ 1286.575649] dump_header+0x177/0x6cd [ 1286.579367] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1286.584566] ? ___ratelimit+0x55/0x537 [ 1286.588454] oom_kill_process.cold+0x10/0xadd [ 1286.592948] ? rcu_read_unlock_special+0x895/0xd40 [ 1286.597874] ? lock_downgrade+0x740/0x740 [ 1286.602022] out_of_memory+0x2ee/0x1180 [ 1286.605991] ? lock_acquire+0x16f/0x430 [ 1286.609963] ? oom_killer_disable+0x1d0/0x1d0 [ 1286.614456] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1286.619380] __alloc_pages_slowpath+0x2251/0x2930 [ 1286.624229] ? warn_alloc+0xf0/0xf0 [ 1286.627859] ? __might_sleep+0x93/0xb0 [ 1286.631741] __alloc_pages_nodemask+0x62c/0x7a0 [ 1286.636408] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1286.641418] ? ____cache_alloc_node+0x1be/0x1d0 [ 1286.646088] ? cache_grow_begin+0x335/0x400 [ 1286.650410] cache_grow_begin+0x80/0x400 [ 1286.654574] ? __cpuset_node_allowed+0xff/0x450 [ 1286.659247] fallback_alloc+0x1fd/0x2c0 [ 1286.663227] ____cache_alloc_node+0x1be/0x1d0 [ 1286.667730] kmem_cache_alloc+0x1f3/0x780 [ 1286.671880] getname_flags+0xcb/0x580 [ 1286.675684] user_path_mountpoint_at+0x29/0x50 [ 1286.680267] SyS_umount+0x10c/0x380 [ 1286.683891] ? __detach_mounts+0x2f0/0x2f0 [ 1286.688123] ? do_syscall_64+0x53/0x640 [ 1286.692092] ? __detach_mounts+0x2f0/0x2f0 [ 1286.696349] do_syscall_64+0x1e8/0x640 [ 1286.700234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1286.705079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1286.710258] RIP: 0033:0x45c967 [ 1286.713441] RSP: 002b:00007ffdafc9d688 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 1286.721142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c967 [ 1286.728408] RDX: 0000000000403a70 RSI: 0000000000000002 RDI: 00007ffdafc9d730 [ 1286.735673] RBP: 0000000000001d40 R08: 0000000000000000 R09: 000000000000000d [ 1286.742947] R10: 0000000000000006 R11: 0000000000000206 R12: 00007ffdafc9e7c0 [ 1286.750214] R13: 000000000258e940 R14: 0000000000000000 R15: 00007ffdafc9e7c0 [ 1286.855646] Mem-Info: [ 1286.869716] active_anon:1171697 inactive_anon:464 isolated_anon:0 [ 1286.869716] active_file:996 inactive_file:1025 isolated_file:101 [ 1286.869716] unevictable:0 dirty:93 writeback:22 unstable:0 [ 1286.869716] slab_reclaimable:21089 slab_unreclaimable:180487 [ 1286.869716] mapped:53910 shmem:517 pagetables:85720 bounce:0 [ 1286.869716] free:24903 free_pcp:98 free_cma:0 02:24:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e3", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1286.955694] Node 0 active_anon:1643288kB inactive_anon:1828kB active_file:216kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209248kB dirty:68kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1287.073743] Node 1 active_anon:3043424kB inactive_anon:28kB active_file:3124kB inactive_file:3096kB unevictable:0kB isolated(anon):0kB isolated(file):288kB mapped:5072kB dirty:172kB writeback:28kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1287.210142] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:2632kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.327889] lowmem_reserve[]: 0 2580 2580 2580 [ 1287.337989] Node 0 DMA32 free:35768kB min:36468kB low:45584kB high:54700kB active_anon:1640656kB inactive_anon:1828kB active_file:216kB inactive_file:256kB unevictable:0kB writepending:68kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84136kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB 02:24:08 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x1b520e5, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r7], @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1287.459165] lowmem_reserve[]: 0 0 0 0 [ 1287.469920] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.580092] lowmem_reserve[]: 0 0 0 0 [ 1287.594122] Node 1 Normal free:56668kB min:53420kB low:66772kB high:80124kB active_anon:3043384kB inactive_anon:28kB active_file:2328kB inactive_file:2740kB unevictable:0kB writepending:208kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:97696kB pagetables:258212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.690107] lowmem_reserve[]: 0 0 0 0 [ 1287.693987] Node 0 DMA: 8*4kB (UM) 37*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10488kB [ 1287.750101] Node 0 DMA32: 850*4kB (UME) 921*8kB (UME) 1058*16kB (UME) 232*32kB (UME) 7*64kB (ME) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35824kB [ 1287.793978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1287.828693] Node 1 Normal: 640*4kB (UM) 523*8kB (UME) 419*16kB (UME) 717*32kB (UME) 257*64kB (UM) 38*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57960kB [ 1287.904865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.936521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.961868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.983075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.001355] 1801 total pagecache pages [ 1288.010346] 0 pages in swap cache [ 1288.017459] Swap cache stats: add 0, delete 0, find 0/0 [ 1288.028857] Free swap = 0kB [ 1288.045738] Total swap = 0kB [ 1288.055836] 1965979 pages RAM [ 1288.074688] 0 pages HighMem/MovableOnly [ 1288.088968] 333229 pages reserved [ 1288.098501] 0 pages cma reserved [ 1288.105594] Out of memory: Kill process 31762 (syz-executor.3) score 1007 or sacrifice child [ 1289.430209] net_ratelimit: 11 callbacks suppressed [ 1289.430215] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.441730] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.230141] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.232688] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.237874] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.550173] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.557233] protocol 88fb is buggy, dev hsr_slave_1 02:24:11 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1290.604667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1290.615420] bond0: Releasing backup interface bond_slave_1 [ 1290.674619] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1290.788780] devpts: called with bogus options 02:24:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1290.967690] devpts: called with bogus options [ 1291.030168] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.037704] protocol 88fb is buggy, dev hsr_slave_1 [ 1291.078270] devpts: called with bogus options [ 1291.097687] audit: type=1800 audit(1572229452.291:3119): pid=31806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17563 res=0 [ 1291.123536] bond0: Releasing backup interface bond_slave_1 [ 1291.166611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1291.258178] bond0: Releasing backup interface bond_slave_1 [ 1291.344716] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1291.368634] bond0: Error: Device is in use and cannot be enslaved [ 1291.510163] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.710850] devpts: called with bogus options 02:24:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1292.527179] devpts: called with bogus options [ 1292.536633] devpts: called with bogus options [ 1292.588618] devpts: called with bogus options [ 1292.901460] bond0: Releasing backup interface bond_slave_1 [ 1292.974873] audit: type=1800 audit(1572229453.941:3120): pid=31847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18060 res=0 [ 1293.118570] bond0: Releasing backup interface bond_slave_1 [ 1293.119031] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1293.175791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1293.202813] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1293.209101] CPU: 0 PID: 7305 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 1293.216029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.225373] Call Trace: [ 1293.227949] dump_stack+0x138/0x197 [ 1293.231557] dump_header+0x177/0x6cd [ 1293.235249] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1293.240353] ? ___ratelimit+0x55/0x537 [ 1293.244242] oom_kill_process.cold+0x10/0xadd [ 1293.248723] ? rcu_read_unlock_special+0x895/0xd40 [ 1293.253670] ? lock_downgrade+0x740/0x740 [ 1293.257810] out_of_memory+0x2ee/0x1180 [ 1293.261773] ? lock_acquire+0x16f/0x430 [ 1293.265739] ? oom_killer_disable+0x1d0/0x1d0 [ 1293.270227] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1293.275139] __alloc_pages_slowpath+0x2251/0x2930 [ 1293.279987] ? warn_alloc+0xf0/0xf0 [ 1293.283612] ? __might_sleep+0x93/0xb0 [ 1293.287484] __alloc_pages_nodemask+0x62c/0x7a0 [ 1293.292132] ? finish_task_switch+0x178/0x650 [ 1293.296616] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1293.301632] alloc_pages_current+0xec/0x1e0 [ 1293.305943] pte_alloc_one+0x1a/0x100 [ 1293.309720] __pte_alloc+0x2a/0x2d0 [ 1293.313324] copy_page_range+0x11ba/0x1bd0 [ 1293.317565] ? __pmd_alloc+0x410/0x410 [ 1293.321447] copy_process.part.0+0x4764/0x6a00 [ 1293.326027] ? __cleanup_sighand+0x50/0x50 [ 1293.330255] _do_fork+0x19e/0xce0 [ 1293.333705] ? fork_idle+0x280/0x280 [ 1293.337415] ? put_timespec64+0xb4/0x100 [ 1293.341461] ? nsecs_to_jiffies+0x30/0x30 [ 1293.345596] ? SyS_clock_gettime+0xf8/0x180 [ 1293.349911] SyS_clone+0x37/0x50 [ 1293.353279] ? sys_vfork+0x30/0x30 [ 1293.356801] do_syscall_64+0x1e8/0x640 [ 1293.360678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1293.365510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1293.370696] RIP: 0033:0x45850a [ 1293.373861] RSP: 002b:00007ffd3e69d420 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.381555] RAX: ffffffffffffffda RBX: 00007ffd3e69d420 RCX: 000000000045850a [ 1293.388820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1293.396079] RBP: 00007ffd3e69d460 R08: 0000000000000001 R09: 0000000002a30940 [ 1293.403345] R10: 0000000002a30c10 R11: 0000000000000246 R12: 0000000000000001 [ 1293.410611] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd3e69d4b0 [ 1293.430753] Mem-Info: [ 1293.435437] active_anon:1168448 inactive_anon:464 isolated_anon:0 [ 1293.435437] active_file:965 inactive_file:880 isolated_file:126 [ 1293.435437] unevictable:0 dirty:53 writeback:1 unstable:0 [ 1293.435437] slab_reclaimable:21244 slab_unreclaimable:180270 [ 1293.435437] mapped:53621 shmem:517 pagetables:85724 bounce:0 [ 1293.435437] free:27753 free_pcp:659 free_cma:0 [ 1293.470387] Node 0 active_anon:1641968kB inactive_anon:1828kB active_file:368kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209524kB dirty:24kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1293.504469] Node 1 active_anon:3031824kB inactive_anon:28kB active_file:3516kB inactive_file:3160kB unevictable:0kB isolated(anon):0kB isolated(file):464kB mapped:4956kB dirty:188kB writeback:4kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1293.532632] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.601890] lowmem_reserve[]: 0 2580 2580 2580 [ 1293.606557] Node 0 DMA32 free:36128kB min:36468kB low:45584kB high:54700kB active_anon:1639336kB inactive_anon:1828kB active_file:368kB inactive_file:372kB unevictable:0kB writepending:24kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13280kB pagetables:84168kB bounce:0kB free_pcp:1368kB local_pcp:648kB free_cma:0kB 02:24:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e3", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x8000000, 0x7, 0xfffffffffffffffe}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a346cc25f59066bcdd4d71b98f9c0ca8c8585b165093508b66643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1293.798444] lowmem_reserve[]: 0 0 0 0 [ 1293.813295] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.840981] lowmem_reserve[]: 0 0 0 0 [ 1293.849725] Node 1 Normal free:63392kB min:53420kB low:66772kB high:80124kB active_anon:3031732kB inactive_anon:28kB active_file:5532kB inactive_file:4672kB unevictable:0kB writepending:192kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:97728kB pagetables:258540kB bounce:0kB free_pcp:872kB local_pcp:464kB free_cma:0kB [ 1293.883444] lowmem_reserve[]: 0 0 0 0 02:24:15 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) r7 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r7}, 0xc) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRES32, @ANYRESOCT=r5, @ANYRESDEC]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r11, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_mtu=0x9}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x140a0, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="81adce6a313e0e89d99ce778f5850efd4fcaf8701f7395ecb222e3e7ab96314622770cbfc3cb6ddc07a603c7860d0f604d9cfaad4c4459eaf45268c7e4c6399317142ca8a48c6eb0d00db38e425de7d3ea053e0923ef8aef4eb33d240145d5099d2da28efd41e93f64dcfa80841163a0fe90b5ec9bd0fa1560245f1fc6810d117205e11da0cbd653e6c42934150660188e318d14cc241ffe6c9ec4bde925de3c0605ab4da6d0248fae2f1d9e8310564e2aa32ad3830e68c558af6b664447416c2dd1327c0d104fa1eb78c383f0eb638dd1c3ef87b20abd819cedf4e4e25aba317669c33c0cdb00"/246, 0xf6}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x7fff}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRES64=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT, @ANYRES64=r9, @ANYRESDEC=0x0]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r14 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_ifreq(r14, 0x8911, &(0x7f0000000240)={'vlan0\x00', @ifru_hwaddr=@local}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000500)=ANY=[@ANYRES32=r12, @ANYRESHEX=r11, @ANYPTR64, @ANYBLOB="35dec926df012b3abb50b70f998c0da4d560c4867fd295030f39c87c74a1a46d0ea9fa", @ANYRESOCT=0x0, @ANYRESHEX=r13]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:15 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000200)='&\xe4N\xcf~\xf5\xf0\xc9') preadv(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f00000002c0), 0x187040, &(0x7f0000000000)=ANY=[@ANYRESDEC=r7]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1293.887881] Node 0 DMA: 3*4kB (UM) 38*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10508kB [ 1293.912707] Node 0 DMA32: 910*4kB (UMEH) 1018*8kB (UMH) 1018*16kB (UM) 231*32kB (UME) 5*64kB (UME) 3*128kB (M) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36424kB [ 1293.933034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1293.967706] Node 1 Normal: 3*4kB (UME) 127*8kB (UMH) 341*16kB (UMH) 824*32kB (UME) 312*64kB (UME) 59*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62164kB [ 1293.986008] devpts: called with bogus options [ 1294.000894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.013800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1294.030087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.038957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1294.067738] 3358 total pagecache pages [ 1294.080099] 0 pages in swap cache [ 1294.083582] Swap cache stats: add 0, delete 0, find 0/0 [ 1294.088941] Free swap = 0kB [ 1294.100085] Total swap = 0kB [ 1294.103145] 1965979 pages RAM [ 1294.106245] 0 pages HighMem/MovableOnly [ 1294.117325] 333229 pages reserved [ 1294.122141] audit: type=1800 audit(1572229455.321:3121): pid=31863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18358 res=0 [ 1294.130064] 0 pages cma reserved [ 1294.151108] bond0: Error: Device is in use and cannot be enslaved [ 1294.161208] Out of memory: Kill process 31818 (syz-executor.3) score 1007 or sacrifice child [ 1294.221070] devpts: called with bogus options [ 1294.351464] bond0: Releasing backup interface bond_slave_1 [ 1294.434187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1294.459902] bond0: Error: Device is in use and cannot be enslaved [ 1294.559352] devpts: called with bogus options [ 1294.567037] audit: type=1800 audit(1572229455.761:3122): pid=31862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18358 res=0 02:24:15 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x963) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1294.710711] net_ratelimit: 13 callbacks suppressed [ 1294.710718] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.722975] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.827199] devpts: called with bogus options [ 1294.839640] devpts: called with bogus options 02:24:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:16 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_tables_names\x00') preadv(r5, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1294.869946] devpts: called with bogus options [ 1294.881024] devpts: called with bogus options [ 1294.939098] audit: type=1800 audit(1572229456.131:3123): pid=31900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18509 res=0 [ 1294.970161] bond0: Releasing backup interface bond_slave_1 02:24:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1295.017498] bond0: Releasing backup interface bond_slave_1 [ 1295.055328] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.090695] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.103070] bond0: Releasing backup interface bond_slave_1 02:24:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1295.134934] devpts: called with bogus options [ 1295.141347] devpts: called with bogus options [ 1295.150606] bond0: Releasing backup interface bond_slave_1 [ 1295.163608] devpts: called with bogus options [ 1295.190147] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.197736] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.214355] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.235831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.245334] bond0: Releasing backup interface bond_slave_1 [ 1295.308814] bond0: Releasing backup interface bond_slave_1 [ 1295.325029] audit: type=1800 audit(1572229456.181:3124): pid=31902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18480 res=0 [ 1295.371867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.388051] bond0: Releasing backup interface bond_slave_1 [ 1295.444193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1295.451889] bond0: Error: Device is in use and cannot be enslaved [ 1295.583739] audit: type=1800 audit(1572229456.431:3125): pid=31918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18489 res=0 [ 1295.647480] audit: type=1800 audit(1572229456.461:3126): pid=31919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=18798 res=0 [ 1295.670918] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.672546] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.684679] devpts: called with bogus options 02:24:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r9 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r9}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r9, @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r13, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r14 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r14}, 0xc) r15 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r15}, 0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESDEC=r13, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYRES64=r11], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRES16=r0, @ANYPTR]], @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r14, @ANYRESHEX, @ANYBLOB="499460720039430cbd9336b19373", @ANYRESOCT=r15, @ANYRES64=r7, @ANYBLOB="42cfab38be3a9aebbe2fb6ef2075ecdce59c6ebbde8b4d2910b505da7de81a6802889f111918cba323319d98e9fe191aa057681583063c1d6254d88d357fb87c5fb755881bb6405aaeaf177d6806caa893e930e2b99067200b385d7f1210165971115605a199504c00ba0891b88de7ba56b13cf6633852ca7b7b62c04a9731c040d4d84d10d7b4106536947246efd64274a232259492514ef5085051e0a84d06a56b6d0fd458"]], @ANYRESHEX=r12]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) r16 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x80000) setsockopt$packet_tx_ring(r16, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10002, 0x3, 0x50000, 0x0, 0x7fff, 0x0, 0x10000}, 0x1c) 02:24:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='befs\x00', 0x0, &(0x7f0000000340)='\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r9, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r9, @ANYRESDEC=r10, @ANYRES32=r7, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r12, @ANYRESHEX=r11, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r13]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1296.046895] bond0: Releasing backup interface bond_slave_1 [ 1296.275704] devpts: called with bogus options 02:24:17 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1, 0x800) write(r4, &(0x7f0000000540)="9735fb4ce63d34290293af6485ed6ced5905adaca55ab89fec5b61bcbd763441a2cde664cfc4df86604683ab0a8ea58ea7ba2da730a8afee65968020ad27a8188e29c93bd9a8ca4c8640471d21a23499bd1d080000ead503af718a839d5863436a7123a0330752b3ce809f16270100010000000000c2d466d9abfd2a10e9d11979c6442acf37b08fe03f020d1babb007905f8df77e12ce36ad4fec8a17a8", 0xfffffffffffffc63) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000380)='net/\xa7\xd9\x94\x19\xe3*') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_addrs=@nfc={0x27, 0x1, 0x0, 0x6}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_ifreq(r0, 0x16, &(0x7f0000000000)={'vxcan1\x00', @ifru_addrs=@rc={0x1f, {0x8, 0x4, 0x0, 0x30, 0xfd, 0x9}, 0x81}}) mount$fuse(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000240)='fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) getsockopt$inet_int(r8, 0x0, 0x6, 0x0, &(0x7f0000000040)=0xffffffffffffff58) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1ff, 0x100000001, 0x50000}, 0x1c) 02:24:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r9, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYPTR64, @ANYRES64, @ANYRESOCT=r3, @ANYRESDEC=r8, @ANYBLOB="b36af13dd49cca7da16efc6d42dd23bd1393e544c14a7955e9636afc091204d24e10d7f7d47d10595ebf00c31b7e4e13176ae2751825ecd3f992ceac6089ad5aff0fd9b7efc895ecb5b60a36e69e4d9e3eb294f81216fde194546abda64f33c6ffc3216330a13078fa1d510d4f2b63179bec0e9afa06bdc647ab759de0c155ce58d73af7d35f91ce8a2ac6f56da125811017649f2aec6272cc042ec6135424abbe43a546d371ad1109dbc9e5a01a2e85aa2a645124518e6a618467140af296be371a4799182a83ea4513d8482ba0f4fc0198c4185bf3e87d387a5b3f"], @ANYRES16=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES32=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1296.352158] devpts: called with bogus options [ 1296.357384] devpts: called with bogus options [ 1296.408763] bond0: Releasing backup interface bond_slave_1 [ 1296.450699] devpts: called with bogus options [ 1296.470160] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.470163] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.473159] protocol 88fb is buggy, dev hsr_slave_1 [ 1296.477825] protocol 88fb is buggy, dev hsr_slave_1 02:24:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1296.502750] audit: type=1800 audit(1572229457.701:3127): pid=31953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18422 res=0 [ 1296.533451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1296.587008] bond0: Releasing backup interface bond_slave_1 [ 1296.645789] bond0: Error: Device is in use and cannot be enslaved [ 1296.654958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1296.678428] bond0: Releasing backup interface bond_slave_1 02:24:17 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0xcd19, &(0x7f0000000000)={'dummy0\x00', @ifru_mtu=0xf6}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:18 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x124) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66643d3b45178606ea2f6c52e0567ebbf7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf34849f365081946c49b4c934f6809d6dba86c19cdc2aa0c1abf4aab69f4f824f4f7977314fd0ee91f8162ff49e403430e12ca02bb2", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r10, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=r11, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1296.772520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1296.781817] bond0: Releasing backup interface bond_slave_1 [ 1296.818453] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1296.901303] devpts: called with bogus options 02:24:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='qnx4\x00', 0x2000, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/raw\x00') preadv(r6, 0x0, 0x0, 0x0) accept$netrom(r4, &(0x7f00000003c0)={{0x3, @bcast}, [@default, @bcast, @bcast, @remote, @bcast, @bcast, @bcast, @rose]}, &(0x7f0000000340)=0x48) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) fcntl$setpipe(r7, 0x407, 0x8) write(r5, &(0x7f0000000900)="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", 0x18a) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0xf8, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0xfffffffffffffe69, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x1000000, 0x1, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1297.372453] devpts: called with bogus options 02:24:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x0, 0x3}, 0x87c9d5382d2e07b7) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="439c566b87540fe94de7d17fad861760e1c9bbdeea95ba3ea683a60c513c256b26500d839c12c83cc7b3fcc54472e1fb36f87ea52f74070c5fd0b622920200000000", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:18 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8926, &(0x7f0000000240)={'veth1\x00', @ifru_settings={0x2, 0xffff, @te1=&(0x7f0000000000)={0x8, 0x1ff, 0x8001, 0x7}}}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000, 0x0, 0x0, 0x0, 0x4}, 0x1c) [ 1297.542285] devpts: called with bogus options [ 1297.577691] devpts: called with bogus options 02:24:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1297.763020] bond0: Releasing backup interface bond_slave_1 [ 1297.821000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1297.831777] bond0: Releasing backup interface bond_slave_1 [ 1297.843587] devpts: called with bogus options [ 1297.905027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1297.948024] devpts: called with bogus options [ 1298.035522] devpts: called with bogus options [ 1298.057401] audit: type=1800 audit(1572229459.251:3128): pid=31997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17801 res=0 02:24:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000001900)=ANY=[@ANYRES32=r9, @ANYRESDEC=r2, @ANYRES64, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000001740)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=r3], @ANYRES16, @ANYBLOB="e2fb1f442d425d11782d9bf61d6da854278a7dc4c63045eee0ebffb0a04125cfa2a7e0b6974ceeaf645c68eec0899e4013d6993a549d0e421a373314ce450f996d935be5883384d8e2eeb04597c7e1c538dd5b6641702d79ca0fd545cce828c5b6925da1fbfce6142f7f4a2dfa29a42806eb20afe7c0777eb839904fa851033745eb4fdb9beb24f2bd6b6e6a81671693fd2734f47658a2a7852f6a9d054c6a57615fe7a78cf2d07ab30904e3ad44e777bb4ee00f95e5fcb525d5e34ee68c33b8fa851cc2dac8fd7af631d9f23ed61de86db06b88a99eec8f9ea76d02845ecbb1a10ffd38a6f6bebcdacd66fdf7b800813d60375bbbbfd35299", @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000001540)=ANY=[@ANYRES64=r5, @ANYBLOB="4ebcd183366abe06bae25014908ab95fd00373b4b848df66cc479bf4ea59ec917033e2cdab8fabada9f3953d7f9297de5a61b87269ae929929f805c56abeb4fd4e3fc67cf324bc6d21812a7503ddc4975fefabd6d51531e8bed89eef7cb76ced711e2c041e1caec44879fd2eeaabd8c1f4f8d65a96c298d3e2dc4cf1dff042ce667651d2d1db4af37ce4ad24c16f1738f98d1ebe8076916f3c195421cf6fb5c1346fe9e55c6d07dc12d305e5608e6ec2b6bdaa90628e8c307170912f684f3cbc785b17a0d00ec02300ea", @ANYRES64=r0, @ANYPTR64, @ANYRESDEC=r5, @ANYRES16=0x0], @ANYRES16, @ANYRESDEC, @ANYRES32=r11, @ANYBLOB="a1252996636a922eb4cfd29df4e1d29d5c58441bdab34e15864c7f2f59ef00ae0b315764cf84a46499351095680ffe32f4a9bca6adc6abb3702dd08f23221736e7bc1d0e8c04302c", @ANYPTR64=&(0x7f0000001640)=ANY=[@ANYPTR=&(0x7f0000001980)=ANY=[@ANYRES32=r12], @ANYPTR, @ANYBLOB="a60798e2e9353749dbee261fb8056126c78aecb1aaf5d8b1405cded54a98a64423831d9f231eb7ad351dfa6dea93ac5eec0a2c6a9c33f1dc0ed488b474f8f279f58d4f19a589be5ed2619e6b770085748e9378ad29f21921cefb42af069a19e7dd04fc97e0c1ed213db5e45194f6ef37c483bb2ba4fcb7fd4d6ef4db030bc4d9226f4c6ab5b9a9953a48e65f5c876fbf1ede52a6ea826da568501bce4eb610a814922ee45b40b4c14682b9658aefb1e1a93fa34bf7b2c06d3e67e16684ede559e5"]], @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1298.118137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1298.128909] bond0: Releasing backup interface bond_slave_1 02:24:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000340)={0x2f, 0x2, 0x1, 0x0, 0x7, 0x3c9, 0x80000000000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1e9240, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000, 0xffffffff}, 0x1c) 02:24:19 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000400)}], 0xd819e25837b0f01, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f78e2734e49e4e0ace87bdca324126f71c093d", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r7, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r8]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1298.694127] devpts: called with bogus options 02:24:20 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='netdevsim0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(r1, 0x0, &(0x7f0000000280)={0x7fffffff, 0xfffffffd}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000340)={'b]\bd0\x00\x950\xeb\xe9\xa1\x1bk\xc8\x00', @ifru_map={0x7, 0xffffffffffffffb8, 0x0, 0xef, 0x9, 0x65}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="2b8100433eac96", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1298.905854] devpts: called with bogus options [ 1298.952078] devpts: called with bogus options 02:24:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1299.065459] devpts: called with bogus options 02:24:20 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cb095ea5d9561cfc20000000000000000a67e24c5d334beddbdb3f3a2c720858c5574a9f48ea112f7958bdd1b37f5f28d17301892a8fd88954100634409fbd8c3d4a26d5ab22c5c4c3caf0ed1255a57edb349963fb07c47b7ed3a11ac2173b8da2db725d010b390f0bec7b3fbd965646444c2c882f74a8c3252564c619561d506ae8675dc25a81a0a7b45d32411ff50366765095103f6d02cfe8f3e490d", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1299.153333] devpts: called with bogus options [ 1299.274733] audit: type=1800 audit(1572229460.471:3129): pid=32042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=18043 res=0 [ 1299.298553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1299.318962] devpts: called with bogus options 02:24:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf64", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1299.357442] devpts: called with bogus options [ 1299.361079] devpts: called with bogus options [ 1299.395816] devpts: called with bogus options [ 1299.443662] devpts: called with bogus options [ 1299.513295] audit: type=1800 audit(1572229460.701:3130): pid=32066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18365 res=0 [ 1299.557397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1299.573000] bond0: Releasing backup interface bond_slave_1 [ 1299.626992] bond0: Releasing backup interface bond_slave_1 [ 1299.683747] bond0: Releasing backup interface bond_slave_1 [ 1299.820412] audit: type=1800 audit(1572229460.751:3131): pid=32068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18799 res=0 [ 1299.850116] net_ratelimit: 13 callbacks suppressed [ 1299.850123] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.862418] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.006037] audit: type=1800 audit(1572229460.781:3132): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18700 res=0 [ 1300.630141] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.630153] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.637832] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.642871] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.700226] devpts: called with bogus options [ 1300.950196] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.957215] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.430140] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.437775] protocol 88fb is buggy, dev hsr_slave_1 [ 1302.947661] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1302.959082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1303.072027] devpts: called with bogus options [ 1303.614123] devpts: called with bogus options [ 1303.743251] bond0: Releasing backup interface bond_slave_1 [ 1303.785107] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1303.799475] bond0: Error: Device is in use and cannot be enslaved 02:24:24 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x400, 0x1, 0x9d, 0x101, 0x1635}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 02:24:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000001800)=[{&(0x7f0000000500)="90a6ce9b9c93d77fcda67e17cebd6e3f706875bbef784d4010672a82c6b9d8fd687ee7ddda1bb6be11e4f3a8fdadfa4282c3e8883cbfccde886533e3b171056af09d5cd3abe3ec73d12a9cd44bf54322def1f619fe5754e47603aacf37b0283d5e80abd9151a96e00b431e28f8a9d76278692c35d7d7bbcfad2a7d4752d4fb68b11f1c1860d751513115213bfc01db1169a5dbd973c71a5fc258b46bd8c3bb127c7f4ee076f769af81084df5388a61e0a81e1f8708ed266a2b34481dcc884cfeae1ece0b168af2bef2fd0b836b7d4f569abded9d5135406f6ebc15be31ffded599788ce3e35d27", 0xfffffcd1}, {&(0x7f0000001980)="adc9ae7790a90d7a2422646653bd3eb266bce7586c467ea2b65313e3de475b27470c1f6dcf5a84dd07b546b299db1807f5856169871d", 0x2d}, {&(0x7f0000000400)="e5b0c45e68e8dbfcac7e0c54cb46c29c8e938b6cc6a07a51fa59d3ef6a51b3aad3920c4ed45a75b62a635f246035ed041f0e86118255f741d40abc41b935480cadef57fcec0780e40c6be875fa7850376031592a50d8f5c0d47b22145877b0bfe23bdf89ef97464fff36", 0x6a}, {&(0x7f0000001880)="0cdf8aaf6dbc967d23016e7e65d1e29cc94caa2a81545f831e07afec79393ae83ae09b2cfd5f450d9eea1e4091c1084b1f31e576ae78b5b57760a604cca2ab6ab0aaf8591f220dc1bb953ddaf429a13938e6b01cf80077a52784945759efbcd210f085c3b80a2acbcf22d54aaed85a8e09affb25593df8120d5bc4195d9704e3e2b180fd6167e33673b19f48fac9c77f1d94086d048af14672643cd3cdde7a88529ad014322a68a900fc1e8b900fe2b09b86ed132b181cbeef1c7267553e8222365407d0c52298c2465affca2a29d938f3adfe8d2c01f3f912fbc6dc719e94c186dcc7237cacc63c5d6ff5", 0xeb}, {&(0x7f0000000700)="35b50adf7aba26eb3227b856dd9eaf96d8d36a5ba367e0e8d9cb725a2ed83cf58e387471126e60dec1016dc05d422a49be556ef4e87e757797826110fdc9ead08d1e5e3d8a6a64ad88836c1f96f856ac57e857634f0e6e5750172de18cdbdca35d7b17db283facf31d7672dab2563bcc7bf36b4d08ec18f9dc880ecc606dcb210a1b9469a5f09b7bc53c474f71b6c0a542090f11fdf15de49ed8bb2c7a4c214abd6f0e17f99dcae9b3e1e49180ab5f85bb85711b9f8cd881d948e02f51da25021eeaf60eb08e4531083e437889016fee3710a9c834b7c1a2a9c6cc6a4095ccbc914060", 0xe3}, {&(0x7f0000000800)="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", 0x1000}], 0xfffffffffffff4a, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0xb5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x84) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040007,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000240), 0x848410, &(0x7f00000004c0)=ANY=[]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:25 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16], @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES16]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1303.916818] devpts: called with bogus options 02:24:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1304.014637] devpts: called with bogus options [ 1304.295805] devpts: called with bogus options [ 1304.316019] devpts: called with bogus options [ 1304.432719] audit: type=1800 audit(1572229465.631:3133): pid=32123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18404 res=0 [ 1304.446404] devpts: called with bogus options [ 1304.469525] bond0: Releasing backup interface bond_slave_1 02:24:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf64", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1304.518801] bond0: Releasing backup interface bond_slave_1 [ 1304.527193] audit: type=1800 audit(1572229465.661:3134): pid=32126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18434 res=0 [ 1304.601625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1304.614600] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1304.626692] bond0: Releasing backup interface bond_slave_1 [ 1304.695392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1304.899213] audit: type=1800 audit(1572229465.831:3135): pid=32132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18541 res=0 [ 1305.075739] devpts: called with bogus options [ 1305.087787] devpts: called with bogus options [ 1305.110160] net_ratelimit: 12 callbacks suppressed [ 1305.110168] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.122136] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.210611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1305.219115] bond0: Releasing backup interface bond_slave_1 [ 1305.255018] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:24:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYPTR64, @ANYRES64]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode00000000000000id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1305.371044] devpts: called with bogus options [ 1305.435781] devpts: called with bogus options 02:24:26 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="8307ae", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="cf00"/17, @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8936, &(0x7f0000000440)={'nlmon0\x00', @ifru_ivalue=0xfffffffe}) r9 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r9}, 0xc) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r11, 0x0, 0x0, 0x0) r12 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r12}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r14, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r14, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000640)=ANY=[@ANYRES32=r12, @ANYBLOB="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", @ANYRESDEC=r14, @ANYRES64=r11, @ANYRESHEX]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1305.590133] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.597815] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.768507] devpts: called with bogus options 02:24:27 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r1]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf64", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1305.871032] devpts: called with bogus options [ 1305.949502] devpts: called with bogus options [ 1306.053383] devpts: called with bogus options [ 1306.059540] devpts: called with bogus options [ 1306.070170] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.070317] devpts: called with bogus options [ 1306.076894] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.124843] devpts: called with bogus options 02:24:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r13, 0x0, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r14, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000700)=ANY=[@ANYBLOB="38a693f98a57f387fe4366104eaa1c355dc42313147954ee89153eb75b8a90a41d8c8b1f00a2e3f4cb8f13a82336ccbff67d4b0e9a0fee91b37111158a6e52719f9efbfd2d1470f85c3a949b23f08dfba30f3d8b5bc27e73b7f55e86abb4a58081613cdf29ec47c8200e79b315996eaa456b675b66576bd99348f5c8106c1cc308aad2", @ANYRESHEX=r9, @ANYRESHEX, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYPTR=&(0x7f0000000840)=ANY=[]], @ANYRESOCT=0x0, @ANYRES16]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1306.188715] audit: type=1800 audit(1572229467.381:3136): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18480 res=0 [ 1306.219467] bond0: Releasing backup interface bond_slave_1 02:24:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r12}, 0xc) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r13, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r13, @ANYRESHEX=r9, @ANYBLOB, @ANYPTR64, @ANYRESOCT=0x0, @ANYPTR64]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1306.277245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1306.295045] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:24:27 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpgid(r3) sched_setattr(r4, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x19bda, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r10, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='?U\xaf\xcb\xb5', 0x22ca884, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESDEC=r10, @ANYPTR, @ANYRESOCT=r11]], @ANYRES32]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0xcde1, &(0x7f0000000240)={'irlan0\x00', @ifru_hwaddr=@remote}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1306.614965] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1306.694832] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1306.719014] CPU: 0 PID: 6832 Comm: rs:main Q:Reg Not tainted 4.14.150 #0 [ 1306.725892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.735251] Call Trace: [ 1306.737857] dump_stack+0x138/0x197 [ 1306.741488] dump_header+0x177/0x6cd [ 1306.745202] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1306.750309] ? ___ratelimit+0x55/0x537 [ 1306.754198] oom_kill_process.cold+0x10/0xadd [ 1306.758693] ? rcu_read_unlock_special+0x895/0xd40 [ 1306.763625] ? lock_downgrade+0x740/0x740 [ 1306.767777] out_of_memory+0x2ee/0x1180 [ 1306.771751] ? lock_acquire+0x16f/0x430 [ 1306.775735] ? oom_killer_disable+0x1d0/0x1d0 [ 1306.780232] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1306.785597] __alloc_pages_slowpath+0x2251/0x2930 [ 1306.790547] ? warn_alloc+0xf0/0xf0 [ 1306.794181] ? __might_sleep+0x93/0xb0 [ 1306.798069] __alloc_pages_nodemask+0x62c/0x7a0 [ 1306.802735] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1306.807758] ? lock_downgrade+0x740/0x740 [ 1306.811919] alloc_pages_current+0xec/0x1e0 [ 1306.816279] __page_cache_alloc+0x248/0x3e0 [ 1306.820599] pagecache_get_page+0x17c/0x750 [ 1306.824919] grab_cache_page_write_begin+0x74/0xa0 [ 1306.829849] ext4_da_write_begin+0x24c/0xc30 [ 1306.834259] ? ext4_write_begin+0x1030/0x1030 [ 1306.838756] ? balance_dirty_pages_ratelimited+0xc5/0x17f0 [ 1306.844380] generic_perform_write+0x1f8/0x480 [ 1306.848963] ? page_endio+0x530/0x530 [ 1306.852763] ? current_time+0xb0/0xb0 [ 1306.856565] ? ext4_file_write_iter+0x1f4/0xe90 [ 1306.861228] __generic_file_write_iter+0x239/0x5b0 [ 1306.866155] ext4_file_write_iter+0x2ac/0xe90 [ 1306.870201] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.870644] ? ext4_file_mmap+0x2c0/0x2c0 [ 1306.878597] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.879779] ? trace_hardirqs_on+0x10/0x10 [ 1306.879791] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 1306.893746] ? save_trace+0x290/0x290 [ 1306.897546] ? iov_iter_init+0xaf/0x1d0 [ 1306.901513] __vfs_write+0x4a7/0x6b0 [ 1306.905222] ? kernel_read+0x120/0x120 [ 1306.909103] ? check_preemption_disabled+0x3c/0x250 [ 1306.914117] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1306.919567] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1306.924320] ? __sb_start_write+0x153/0x2f0 [ 1306.928645] vfs_write+0x198/0x500 [ 1306.932203] SyS_write+0xfd/0x230 [ 1306.935651] ? SyS_read+0x230/0x230 [ 1306.939278] ? do_syscall_64+0x53/0x640 [ 1306.943250] ? SyS_read+0x230/0x230 [ 1306.946882] do_syscall_64+0x1e8/0x640 [ 1306.950763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1306.955619] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1306.960808] RIP: 0033:0x7f4f8f6cd19d [ 1306.964515] RSP: 002b:00007f4f8dc6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1306.972220] RAX: ffffffffffffffda RBX: 000000000000009a RCX: 00007f4f8f6cd19d [ 1306.979487] RDX: 000000000000009a RSI: 000000000182e340 RDI: 0000000000000006 [ 1306.986754] RBP: 000000000182e340 R08: 6c656e72656b2072 R09: 36303331205b203a [ 1306.994022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1307.001294] R13: 00007f4f8dc6e480 R14: 0000000000000001 R15: 000000000182e140 [ 1307.010957] protocol 88fb is buggy, dev hsr_slave_0 [ 1307.018940] protocol 88fb is buggy, dev hsr_slave_1 [ 1307.058938] Mem-Info: 02:24:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1307.093470] active_anon:1171279 inactive_anon:464 isolated_anon:0 [ 1307.093470] active_file:969 inactive_file:880 isolated_file:33 [ 1307.093470] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1307.093470] slab_reclaimable:21660 slab_unreclaimable:179843 [ 1307.093470] mapped:53779 shmem:517 pagetables:86204 bounce:0 [ 1307.093470] free:24566 free_pcp:222 free_cma:0 [ 1307.204233] devpts: called with bogus options [ 1307.278858] devpts: called with bogus options [ 1307.430119] Node 0 active_anon:1652100kB inactive_anon:1828kB active_file:244kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209184kB dirty:80kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1307.620085] Node 1 active_anon:3034776kB inactive_anon:24kB active_file:4168kB inactive_file:3352kB unevictable:0kB isolated(anon):0kB isolated(file):368kB mapped:5956kB dirty:24kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1307.780126] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.853236] lowmem_reserve[]: 0 2580 2580 2580 [ 1307.858669] Node 0 DMA32 free:27264kB min:36468kB low:45584kB high:54700kB active_anon:1649488kB inactive_anon:1828kB active_file:244kB inactive_file:252kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13344kB pagetables:84336kB bounce:0kB free_pcp:676kB local_pcp:308kB free_cma:0kB [ 1307.904535] bond0: Releasing backup interface bond_slave_1 [ 1307.959156] devpts: called with bogus options [ 1307.967333] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1308.000439] devpts: called with bogus options [ 1308.068427] lowmem_reserve[]: 0 0 0 0 [ 1308.068681] devpts: called with bogus options [ 1308.076747] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.105233] lowmem_reserve[]: 0 0 0 0 [ 1308.107286] audit: type=1800 audit(1572229469.301:3137): pid=32220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18352 res=0 [ 1308.111706] Node 1 [ 1308.148618] bond0: Releasing backup interface bond_slave_1 [ 1308.190384] Normal free:56772kB min:53420kB low:66772kB high:80124kB active_anon:3034284kB inactive_anon:20kB active_file:4096kB inactive_file:3424kB unevictable:0kB writepending:112kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98592kB pagetables:260580kB bounce:0kB free_pcp:1024kB local_pcp:624kB free_cma:0kB [ 1308.224990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1308.235685] bond0: Releasing backup interface bond_slave_1 [ 1308.282704] audit: type=1800 audit(1572229469.481:3138): pid=32225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17904 res=0 [ 1308.321244] bond0: Releasing backup interface bond_slave_1 [ 1308.376925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1308.394386] bond0: Releasing backup interface bond_slave_1 [ 1308.462549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1308.686320] lowmem_reserve[]: 0 0 0 0 [ 1308.720877] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1308.833859] Node 0 DMA32: 112*4kB (UME) 825*8kB (UME) 916*16kB (UME) 209*32kB (UMEH) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28456kB [ 1308.917606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1308.973545] Node 1 Normal: 361*4kB (UME) 269*8kB (UMEH) 13*16kB (UE) 494*32kB (UEH) 250*64kB (UME) 67*128kB (UM) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45980kB [ 1309.064579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.108330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.138803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.159480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.180503] 1848 total pagecache pages [ 1309.189552] 0 pages in swap cache [ 1309.198302] Swap cache stats: add 0, delete 0, find 0/0 [ 1309.212572] Free swap = 0kB [ 1309.219473] Total swap = 0kB [ 1309.227682] 1965979 pages RAM [ 1309.234721] 0 pages HighMem/MovableOnly [ 1309.244882] 333229 pages reserved [ 1309.254482] 0 pages cma reserved [ 1309.266481] Out of memory: Kill process 32169 (syz-executor.3) score 1007 or sacrifice child [ 1309.437478] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1309.488536] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1309.507945] CPU: 0 PID: 32193 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 1309.515614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.524961] Call Trace: [ 1309.527539] dump_stack+0x138/0x197 [ 1309.531153] dump_header+0x177/0x6cd [ 1309.534849] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1309.539933] ? ___ratelimit+0x55/0x537 [ 1309.543823] oom_kill_process.cold+0x10/0xadd [ 1309.548387] ? rcu_read_unlock_special+0x895/0xd40 [ 1309.553301] ? lock_downgrade+0x740/0x740 [ 1309.557433] out_of_memory+0x2ee/0x1180 [ 1309.561385] ? lock_acquire+0x16f/0x430 [ 1309.565343] ? oom_killer_disable+0x1d0/0x1d0 [ 1309.570337] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1309.575246] __alloc_pages_slowpath+0x2251/0x2930 [ 1309.580084] ? warn_alloc+0xf0/0xf0 [ 1309.583707] ? __might_sleep+0x93/0xb0 [ 1309.587594] __alloc_pages_nodemask+0x62c/0x7a0 [ 1309.592250] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1309.597242] ? rcu_read_lock_sched_held+0x110/0x130 [ 1309.602247] ? check_preemption_disabled+0x3c/0x250 [ 1309.607248] copy_process.part.0+0x26a/0x6a00 [ 1309.611724] ? __handle_mm_fault+0x1c49/0x3470 [ 1309.616290] ? lock_downgrade+0x740/0x740 [ 1309.620430] ? pud_val+0xe0/0xe0 [ 1309.623777] ? _raw_spin_unlock+0x2d/0x50 [ 1309.627907] ? __cleanup_sighand+0x50/0x50 [ 1309.632122] ? __do_page_fault+0x4e9/0xb80 [ 1309.636335] ? find_held_lock+0x35/0x130 [ 1309.640378] _do_fork+0x19e/0xce0 [ 1309.643818] ? fork_idle+0x280/0x280 [ 1309.647514] ? up_read+0x1a/0x40 [ 1309.650860] ? __do_page_fault+0x358/0xb80 [ 1309.655075] ? mprotect_fixup+0x920/0x920 [ 1309.659205] SyS_clone+0x37/0x50 [ 1309.662568] ? sys_vfork+0x30/0x30 [ 1309.666094] do_syscall_64+0x1e8/0x640 [ 1309.669964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1309.674792] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1309.679961] RIP: 0033:0x45c909 [ 1309.683129] RSP: 002b:00007ffd3e69d188 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1309.690815] RAX: ffffffffffffffda RBX: 00007f7d2b26a700 RCX: 000000000045c909 [ 1309.698062] RDX: 00007f7d2b26a9d0 RSI: 00007f7d2b269db0 RDI: 00000000003d0f00 [ 1309.705310] RBP: 00007ffd3e69d3a0 R08: 00007f7d2b26a700 R09: 00007f7d2b26a700 [ 1309.712561] R10: 00007f7d2b26a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1309.719809] R13: 00007ffd3e69d23f R14: 00007f7d2b26a9c0 R15: 000000000075c124 [ 1310.050297] Mem-Info: [ 1310.053315] active_anon:1174911 inactive_anon:462 isolated_anon:0 [ 1310.053315] active_file:333 inactive_file:322 isolated_file:33 [ 1310.053315] unevictable:0 dirty:76 writeback:3 unstable:0 [ 1310.053315] slab_reclaimable:21713 slab_unreclaimable:179728 [ 1310.053315] mapped:52795 shmem:517 pagetables:86243 bounce:0 [ 1310.053315] free:22367 free_pcp:63 free_cma:0 [ 1310.088424] Node 0 active_anon:1651376kB inactive_anon:1828kB active_file:80kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209056kB dirty:16kB writeback:4kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1310.143917] Node 1 active_anon:3048268kB inactive_anon:20kB active_file:1148kB inactive_file:1152kB unevictable:0kB isolated(anon):0kB isolated(file):280kB mapped:1936kB dirty:288kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1310.223820] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.250680] net_ratelimit: 14 callbacks suppressed [ 1310.250686] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.252222] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.355721] lowmem_reserve[]: 0 2580 2580 2580 [ 1310.366538] Node 0 DMA32 free:28812kB min:36468kB low:45584kB high:54700kB active_anon:1648764kB inactive_anon:1828kB active_file:80kB inactive_file:84kB unevictable:0kB writepending:20kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84340kB bounce:0kB free_pcp:108kB local_pcp:104kB free_cma:0kB [ 1310.424190] lowmem_reserve[]: 0 0 0 0 [ 1310.428347] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.550183] lowmem_reserve[]: 0 0 0 0 [ 1310.562538] Node 1 Normal free:51408kB min:53420kB low:66772kB high:80124kB active_anon:3048268kB inactive_anon:20kB active_file:760kB inactive_file:1060kB unevictable:0kB writepending:288kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98432kB pagetables:260444kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1310.654923] lowmem_reserve[]: 0 0 0 0 [ 1310.662875] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1310.698547] Node 0 DMA32: 145*4kB (UME) 837*8kB (UME) 927*16kB (UME) 211*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28924kB [ 1310.729739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.752684] Node 1 Normal: 939*4kB (UME) 603*8kB (UME) 58*16kB (UME) 496*32kB (UEH) 250*64kB (UME) 67*128kB (UM) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51748kB [ 1310.787874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.807228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.825839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.845087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.864815] 914 total pagecache pages [ 1310.873493] 0 pages in swap cache [ 1310.880334] Swap cache stats: add 0, delete 0, find 0/0 [ 1310.892823] Free swap = 0kB [ 1310.899028] Total swap = 0kB [ 1310.905843] 1965979 pages RAM [ 1310.912601] 0 pages HighMem/MovableOnly [ 1310.931777] 333229 pages reserved [ 1310.940190] 0 pages cma reserved [ 1310.948497] Out of memory: Kill process 32209 (syz-executor.4) score 1007 or sacrifice child [ 1310.957603] Killed process 32227 (syz-executor.4) total-vm:73380kB, anon-rss:16588kB, file-rss:35056kB, shmem-rss:0kB [ 1311.010894] oom_reaper: reaped process 32227 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1311.030202] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.037680] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.050339] devpts: called with bogus options [ 1311.110137] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.118250] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.148433] devpts: called with bogus options [ 1311.350139] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.357124] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.830183] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.837851] protocol 88fb is buggy, dev hsr_slave_1 [ 1312.867948] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1312.891295] blkid cpuset=/ mems_allowed=0-1 [ 1312.895688] CPU: 1 PID: 32219 Comm: blkid Not tainted 4.14.150 #0 [ 1312.901930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.911291] Call Trace: [ 1312.913891] dump_stack+0x138/0x197 [ 1312.917529] dump_header+0x177/0x6cd [ 1312.921244] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1312.926345] ? ___ratelimit+0x55/0x537 [ 1312.930255] oom_kill_process.cold+0x10/0xadd [ 1312.934752] ? rcu_read_unlock_special+0x639/0xd40 [ 1312.939687] ? lock_downgrade+0x740/0x740 [ 1312.943837] out_of_memory+0x2ee/0x1180 [ 1312.947807] ? lock_acquire+0x16f/0x430 [ 1312.951782] ? oom_killer_disable+0x1d0/0x1d0 [ 1312.956275] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1312.961222] __alloc_pages_slowpath+0x2251/0x2930 [ 1312.966068] ? warn_alloc+0xf0/0xf0 [ 1312.969699] ? __might_sleep+0x93/0xb0 [ 1312.973586] __alloc_pages_nodemask+0x62c/0x7a0 [ 1312.978278] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1312.983296] ? ____cache_alloc_node+0x1be/0x1d0 [ 1312.987965] ? cache_grow_begin+0x335/0x400 [ 1312.992285] cache_grow_begin+0x80/0x400 [ 1312.996342] ? __cpuset_node_allowed+0xff/0x450 [ 1313.001008] fallback_alloc+0x1fd/0x2c0 [ 1313.004985] ____cache_alloc_node+0x1be/0x1d0 [ 1313.009482] kmem_cache_alloc+0x1f3/0x780 [ 1313.013626] ? memcpy+0x46/0x50 [ 1313.016994] getname_flags+0xcb/0x580 [ 1313.022879] ? security_prepare_creds+0x89/0xb0 [ 1313.027543] user_path_at_empty+0x2f/0x50 [ 1313.031694] SyS_access+0x222/0x6b0 [ 1313.035322] ? __do_page_fault+0x358/0xb80 [ 1313.039640] ? SyS_faccessat+0x6b0/0x6b0 [ 1313.043706] ? do_syscall_64+0x53/0x640 [ 1313.047768] ? SyS_faccessat+0x6b0/0x6b0 [ 1313.051833] do_syscall_64+0x1e8/0x640 [ 1313.055718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1313.060572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1313.065756] RIP: 0033:0x7f243d173267 [ 1313.069460] RSP: 002b:00007ffdc70ae708 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1313.077166] RAX: ffffffffffffffda RBX: 0000000000401300 RCX: 00007f243d173267 [ 1313.084433] RDX: 000000000000001d RSI: 0000000000000000 RDI: 00007f243d1772e6 [ 1313.091708] RBP: 00007f243d376000 R08: 00007f243d37e570 R09: 0000000000000000 [ 1313.098984] R10: 000000006ffffeff R11: 0000000000000246 R12: 00007f243d37e1c8 [ 1313.106261] R13: 00007f243d376718 R14: 00000000000033ef R15: 00007f243d37e570 [ 1313.129154] Mem-Info: [ 1313.131710] active_anon:1174847 inactive_anon:462 isolated_anon:0 [ 1313.131710] active_file:34 inactive_file:94 isolated_file:23 [ 1313.131710] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1313.131710] slab_reclaimable:21716 slab_unreclaimable:179721 [ 1313.131710] mapped:52290 shmem:517 pagetables:86225 bounce:0 [ 1313.131710] free:23074 free_pcp:60 free_cma:0 [ 1313.165099] Node 0 active_anon:1651916kB inactive_anon:1828kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1313.192768] Node 1 active_anon:3047472kB inactive_anon:20kB active_file:84kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:252kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1313.220122] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.268863] lowmem_reserve[]: 0 2580 2580 2580 [ 1313.273572] Node 0 DMA32 free:28308kB min:36468kB low:45584kB high:54700kB active_anon:1649304kB inactive_anon:1828kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.302296] lowmem_reserve[]: 0 0 0 0 [ 1313.306116] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.331500] lowmem_reserve[]: 0 0 0 0 [ 1313.335330] Node 1 Normal free:54080kB min:53420kB low:66772kB high:80124kB active_anon:3047472kB inactive_anon:20kB active_file:56kB inactive_file:72kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98400kB pagetables:260364kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1313.364921] lowmem_reserve[]: 0 0 0 0 [ 1313.368750] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1313.386059] Node 0 DMA32: 47*4kB (UME) 828*8kB (UME) 910*16kB (UE) 213*32kB (UME) 3*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28380kB [ 1313.401780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.412607] Node 1 Normal: 300*4kB (UME) 306*8kB (UME) 45*16kB (UME) 652*32kB (UME) 284*64kB (UME) 68*128kB (UM) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54160kB [ 1313.428371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.437332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.446020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.454978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.463698] 590 total pagecache pages [ 1313.467505] 0 pages in swap cache [ 1313.471032] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.476385] Free swap = 0kB [ 1313.479391] Total swap = 0kB [ 1313.482470] 1965979 pages RAM [ 1313.485598] 0 pages HighMem/MovableOnly [ 1313.489568] 333229 pages reserved [ 1313.493128] 0 pages cma reserved [ 1313.496498] Out of memory: Kill process 32233 (syz-executor.3) score 1007 or sacrifice child [ 1313.505513] Killed process 32238 (syz-executor.3) total-vm:73380kB, anon-rss:16596kB, file-rss:34804kB, shmem-rss:0kB [ 1313.552237] oom_reaper: reaped process 32238 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 02:24:34 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="26643df7544fd7a234354d73c461ae4ff085d9977fdc2560838d2aee6e0e317359cf55c593bc1ea41e43151389b7f6d4e65f359564c1230c3cc0229ed74f5a44c10949d953359ee5e234272eb1114472082bfedc010814fa2a2cb25a54d240c674b7eb79ad427816905485d3f54d3ebfacbe2be1de8c331d48bf3aa1c6188f8440146b0e17c712a66f3441e543e92158e6ac6a5692", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0xb0195de48302b71e, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:34 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='vxcan1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1313.797234] bond0: Releasing backup interface bond_slave_1 02:24:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x377, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rooumode=0000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1313.844099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1313.853080] bond0: Releasing backup interface bond_slave_1 [ 1313.884004] devpts: called with bogus options [ 1313.895149] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:24:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000\x00\x00\x00\x00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYBLOB="cdbe770c9d91698501a3316e83217dd2b49b7325152588de708d68e3e01acbdfb7f78f146943820de1903128c73c529fc6c4c8fe5295537dad5f8c10929c0cf6e2d2b2d0bcb10f081fc37c76284b4db2e92487bc1e2f29ef1c0c308f948b82d764b6c6d9ec6f35184c0100f08abe734aeb76407e08e6cf220bdb9a4dcc9f987a513bdfdbc8f297a11565d8cf15eb1192a447a4c9c071"]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="bb5db5d59984b911c85eedb769ba751df41ed49e7a32758a3908d9dfeb", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1314.019872] audit: type=1800 audit(1572229475.211:3139): pid=32255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18462 res=0 [ 1314.045434] bond0: Error: Device is in use and cannot be enslaved [ 1314.759084] devpts: called with bogus options [ 1314.834916] devpts: called with bogus options [ 1314.981587] audit: type=1800 audit(1572229476.181:3140): pid=32271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18434 res=0 [ 1315.019976] bond0: Releasing backup interface bond_slave_1 [ 1315.080643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1315.092017] bond0: Releasing backup interface bond_slave_1 [ 1315.270125] net_ratelimit: 14 callbacks suppressed [ 1315.270132] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.283055] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.312108] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1315.368127] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1315.394067] CPU: 1 PID: 32253 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 1315.401128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.410486] Call Trace: [ 1315.413106] dump_stack+0x138/0x197 [ 1315.416735] dump_header+0x177/0x6cd [ 1315.420467] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1315.425573] ? ___ratelimit+0x55/0x537 [ 1315.429462] oom_kill_process.cold+0x10/0xadd [ 1315.433954] ? rcu_read_unlock_special+0x639/0xd40 [ 1315.438885] ? lock_downgrade+0x740/0x740 [ 1315.443033] out_of_memory+0x2ee/0x1180 [ 1315.447004] ? lock_acquire+0x16f/0x430 [ 1315.450978] ? oom_killer_disable+0x1d0/0x1d0 [ 1315.455467] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1315.460397] __alloc_pages_slowpath+0x2251/0x2930 [ 1315.465248] ? warn_alloc+0xf0/0xf0 [ 1315.468875] ? __might_sleep+0x93/0xb0 [ 1315.472754] __alloc_pages_nodemask+0x62c/0x7a0 [ 1315.477421] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1315.482434] ? rcu_read_lock_sched_held+0x110/0x130 [ 1315.487468] ? check_preemption_disabled+0x3c/0x250 [ 1315.492485] copy_process.part.0+0x26a/0x6a00 [ 1315.496992] ? __handle_mm_fault+0x1c49/0x3470 [ 1315.501581] ? lock_downgrade+0x740/0x740 [ 1315.505740] ? pud_val+0xe0/0xe0 [ 1315.509106] ? _raw_spin_unlock+0x2d/0x50 [ 1315.510117] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.513250] ? __cleanup_sighand+0x50/0x50 [ 1315.513269] ? __do_page_fault+0x4e9/0xb80 [ 1315.513283] ? find_held_lock+0x35/0x130 [ 1315.520262] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.522500] _do_fork+0x19e/0xce0 [ 1315.539200] ? fork_idle+0x280/0x280 [ 1315.542917] ? up_read+0x1a/0x40 [ 1315.546285] ? __do_page_fault+0x358/0xb80 [ 1315.550510] ? mprotect_fixup+0x920/0x920 [ 1315.554650] SyS_clone+0x37/0x50 [ 1315.558010] ? sys_vfork+0x30/0x30 [ 1315.561554] do_syscall_64+0x1e8/0x640 [ 1315.565437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1315.570286] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1315.575468] RIP: 0033:0x45c909 [ 1315.578642] RSP: 002b:00007ffec7d99dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1315.586339] RAX: ffffffffffffffda RBX: 00007f9d9386c700 RCX: 000000000045c909 [ 1315.593613] RDX: 00007f9d9386c9d0 RSI: 00007f9d9386bdb0 RDI: 00000000003d0f00 [ 1315.600891] RBP: 00007ffec7d99fe0 R08: 00007f9d9386c700 R09: 00007f9d9386c700 [ 1315.608159] R10: 00007f9d9386c9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1315.615448] R13: 00007ffec7d99e7f R14: 00007f9d9386c9c0 R15: 000000000075c07c [ 1315.727661] Mem-Info: [ 1315.730260] active_anon:1176480 inactive_anon:460 isolated_anon:0 [ 1315.730260] active_file:724 inactive_file:689 isolated_file:92 [ 1315.730260] unevictable:0 dirty:28 writeback:1 unstable:0 [ 1315.730260] slab_reclaimable:21795 slab_unreclaimable:179696 [ 1315.730260] mapped:53384 shmem:516 pagetables:86302 bounce:0 [ 1315.730260] free:19515 free_pcp:378 free_cma:0 [ 1315.770272] Node 0 active_anon:1652724kB inactive_anon:1828kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:4kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1315.844987] Node 1 active_anon:3053196kB inactive_anon:12kB active_file:2056kB inactive_file:2068kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:3328kB dirty:108kB writeback:4kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1315.954722] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.000144] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.007755] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.049129] lowmem_reserve[]: 0 2580 2580 2580 [ 1316.063163] Node 0 DMA32 free:27396kB min:36468kB low:45584kB high:54700kB active_anon:1650112kB inactive_anon:1828kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13376kB pagetables:84336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.125344] lowmem_reserve[]: 0 0 0 0 [ 1316.141183] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.211336] lowmem_reserve[]: 0 0 0 0 [ 1316.224070] Node 1 Normal free:44488kB min:53420kB low:66772kB high:80124kB active_anon:3053216kB inactive_anon:12kB active_file:1528kB inactive_file:1608kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98688kB pagetables:260704kB bounce:0kB free_pcp:904kB local_pcp:256kB free_cma:0kB [ 1316.260887] lowmem_reserve[]: 0 0 0 0 [ 1316.264927] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1316.284698] Node 0 DMA32: 30*4kB (M) 808*8kB (UE) 906*16kB (UE) 199*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27448kB [ 1316.298375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.315711] Node 1 Normal: 630*4kB (UME) 462*8kB (UME) 24*16kB (UME) 484*32kB (UME) 186*64kB (U) 64*128kB (UME) 9*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44488kB [ 1316.344425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.353604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.366080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.375276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.388261] 1089 total pagecache pages [ 1316.392646] 0 pages in swap cache [ 1316.396309] Swap cache stats: add 0, delete 0, find 0/0 [ 1316.406044] Free swap = 0kB [ 1316.409235] Total swap = 0kB [ 1316.412454] 1965979 pages RAM [ 1316.415683] 0 pages HighMem/MovableOnly [ 1316.419786] 333229 pages reserved [ 1316.427017] 0 pages cma reserved [ 1316.430567] Out of memory: Kill process 32261 (syz-executor.4) score 1007 or sacrifice child [ 1316.440451] Killed process 32261 (syz-executor.4) total-vm:73116kB, anon-rss:16280kB, file-rss:35596kB, shmem-rss:0kB [ 1316.470138] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.476819] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.553809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1316.576641] oom_reaper: reaped process 32261 (syz-executor.4), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB 02:24:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0xfffffffffffffe57, 0x2, 0x0, 0x40, 0x5, 0x0, 0x0, 0x1470}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c730b00000000000091c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1317.270171] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.277924] protocol 88fb is buggy, dev hsr_slave_1 02:24:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'hsr0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="68bf2c883e736747d199d0eaec33f4c21ab8f0e3f1d4c625cdb7da7aa795d2b7ae8ab689b39514c8c78f7d90eef4035c303f504e18c5cd37686fc4e58e36330004664b2f30c977f9c663982a0ba34bbb84c87fb626a64e6124bcdbac1a562c5fbfda00"/121, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1317.345250] devpts: called with bogus options [ 1317.379110] devpts: called with bogus options 02:24:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:38 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) write(r4, &(0x7f0000000500)='\x00\x00', 0xffffffffffffff3b) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8922, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x1}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1317.719907] devpts: called with bogus options [ 1317.923804] devpts: called with bogus options [ 1317.924943] devpts: called with bogus options [ 1318.025178] devpts: called with bogus options 02:24:39 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x40) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8934, &(0x7f00000002c0)={'ip_vti0\x00', @ifru_data=&(0x7f0000000380)="968074d9be32ba603bbe1dc5da11049691b1b9d5598e60eae6b1cf2e6a145dde"}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x0, &(0x7f0000000100), 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2de, 0x183000) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req={0x80000000, 0xffff, 0xd97d, 0x2}, 0x10) 02:24:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x3f) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c72d6e34ed46f64653d3030303030303030303030303030303030302c757365725f69643df20126e14f082b2ccaeaa0d74e38d490c9b110da666fb465816f5cec245ecb6facb1eb280000000000", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c203000500464fdbff0042a5c0754c2eeb1421fdac26af232661b1", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0xe, 0xc0000) ioctl$sock_ifreq(r11, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r13, 0x8921, &(0x7f0000000440)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_flags=0x2000}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="2830c9a7f2c193ebc74ed6cbc3cbcb41fb2639741c2d7d567a1fa101ad4054df6c2f782b062d3a5a924dd8c04b43388bbcb3bb7d8a0b3613a8b62b5d748094b6d9dcf979e9a77cc0f01e0beff862fe0cb75834e3e9141cd3e3d78a17467e3fdc096fdc", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1318.079931] audit: type=1800 audit(1572229479.271:3141): pid=32297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18634 res=0 [ 1318.112512] bond0: Error: Device is in use and cannot be enslaved [ 1318.123209] bond0: Releasing backup interface bond_slave_1 [ 1318.129541] audit: type=1800 audit(1572229479.311:3142): pid=32298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18799 res=0 [ 1318.193394] bond0: Error: Device is in use and cannot be enslaved [ 1318.202677] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1318.506071] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1318.557152] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1318.579401] CPU: 1 PID: 7003 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 1318.586364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.595717] Call Trace: [ 1318.598337] dump_stack+0x138/0x197 [ 1318.601961] ? post_init_entity_util_avg+0x320/0x450 [ 1318.607071] dump_header+0x177/0x6cd [ 1318.610786] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1318.615890] ? ___ratelimit+0x55/0x537 [ 1318.619778] oom_kill_process.cold+0x10/0xadd [ 1318.624280] ? rcu_read_unlock_special+0x895/0xd40 [ 1318.629213] ? lock_downgrade+0x740/0x740 [ 1318.633365] out_of_memory+0x2ee/0x1180 [ 1318.637346] ? lock_acquire+0x16f/0x430 [ 1318.641321] ? oom_killer_disable+0x1d0/0x1d0 [ 1318.645810] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1318.650738] __alloc_pages_slowpath+0x2251/0x2930 [ 1318.655592] ? warn_alloc+0xf0/0xf0 [ 1318.659223] ? __next_zones_zonelist+0x79/0x190 [ 1318.663888] __alloc_pages_nodemask+0x62c/0x7a0 [ 1318.668551] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1318.673562] ? retint_kernel+0x2d/0x2d [ 1318.677454] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1318.682214] alloc_pages_current+0xec/0x1e0 [ 1318.686536] __get_free_pages+0xf/0x40 [ 1318.690423] get_zeroed_page+0x11/0x20 [ 1318.694303] __pud_alloc+0x3b/0x200 [ 1318.697923] pud_alloc+0xc9/0x130 [ 1318.701372] copy_page_range+0x2de/0x1bd0 [ 1318.705519] ? preempt_schedule+0x4b/0x60 [ 1318.709685] ? ___preempt_schedule+0x16/0x18 [ 1318.714094] ? __pmd_alloc+0x410/0x410 [ 1318.717970] ? __vma_link_rb+0x247/0x340 [ 1318.722027] copy_process.part.0+0x4764/0x6a00 [ 1318.726618] ? __cleanup_sighand+0x50/0x50 [ 1318.730853] _do_fork+0x19e/0xce0 [ 1318.734308] ? fork_idle+0x280/0x280 [ 1318.738015] ? put_timespec64+0xb4/0x100 [ 1318.742069] ? nsecs_to_jiffies+0x30/0x30 [ 1318.746210] ? SyS_clock_gettime+0xf8/0x180 [ 1318.750528] SyS_clone+0x37/0x50 [ 1318.753886] ? sys_vfork+0x30/0x30 [ 1318.757421] do_syscall_64+0x1e8/0x640 [ 1318.761326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1318.766167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1318.771352] RIP: 0033:0x45850a [ 1318.774530] RSP: 002b:00007ffec7d9a060 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1318.782227] RAX: ffffffffffffffda RBX: 00007ffec7d9a060 RCX: 000000000045850a [ 1318.789594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1318.796856] RBP: 00007ffec7d9a0a0 R08: 0000000000000001 R09: 00000000025b6940 [ 1318.804114] R10: 00000000025b6c10 R11: 0000000000000246 R12: 0000000000000001 [ 1318.811374] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec7d9a0f0 [ 1318.823488] devpts: called with bogus options [ 1318.853414] devpts: called with bogus options 02:24:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0xaa006580, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d4ffd2ef959a08dcf815bd71797cde68a61b954280e2994fb7202cdfdac663a3c06f594772fa941479a04c666d43dfdc2d8f44d7f745176bb022c4abb43ed5cc0b9290c184c1da8e292491866d7767ada46630bf076f7db5c88887bd206fc4d64266d7a14e947bf9ac2b1dd88856aaafb19e1552b74c2bd9f667716738f99d5f4570089a40f1dbc61be08488d4fd62e24c4c41e352c10605ac0bc5101d6afdb8b4874cedee6349c96f314ba4ea2234ce8b92df85a110da333cb818050a3757f6830e42dd218a4196b88607b47", @ANYRESDEC=0x0, @ANYBLOB="00e30046cf00"/17, @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="f7476612480f22d2a41d8b7528b1b60981211bf9428e532d756a49ed11014fe7492608ddcc7767386b11df548e14d2b126d5b4767974af643110f7e9dc4a68d6cc1730cc2f46ed8bfa6ef7acde059b54d9471dd1993b571d2c55ad7adb99aef8537337a02d2de04c9190dd645d57ed29d6845754bd72455b8e8a53ab0b36a952c5d849d94fcaddd396db659d1a45fd60e5ae785933fdf39fdeebaeb1555d07ee2c9b164ea36196f87b057ed3ec37732ef83ecde78416cc9640c830ffec792e937d57ddbbefd4f051df316d68d41fb5fbfd0389b5db834dc82cdb3453729d2226ad", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:40 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf64766f807e2eed6827400b442ba29754ba982344ab17e0f334c8d921293184517894e5840ca00b75088ff36d0d9b050356e2a4159909d5e59d1d47a8ba9c90366cf15b8c8e9904b127c74693fba492d416c5c284871afc370000000000000000a3ba0868301c82e13e02b9314ae3042c8a4daf174250295f43f7d47dca83", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000380)={r11}) ioctl$sock_ifreq(r12, 0x0, &(0x7f0000000240)={'veth0_to_team\x00', @ifru_names='veth0_to_bridge\x00'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1319.240437] Mem-Info: [ 1319.250542] active_anon:1170920 inactive_anon:459 isolated_anon:0 [ 1319.250542] active_file:981 inactive_file:1002 isolated_file:63 [ 1319.250542] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1319.250542] slab_reclaimable:21889 slab_unreclaimable:179471 [ 1319.250542] mapped:53798 shmem:517 pagetables:86321 bounce:0 [ 1319.250542] free:24785 free_pcp:273 free_cma:0 [ 1319.410086] Node 0 active_anon:1649036kB inactive_anon:1828kB active_file:48kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1319.540698] Node 1 active_anon:3034688kB inactive_anon:8kB active_file:3548kB inactive_file:3236kB unevictable:0kB isolated(anon):0kB isolated(file):336kB mapped:5676kB dirty:212kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1319.572649] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1319.619710] lowmem_reserve[]: 0 2580 2580 2580 [ 1319.629347] Node 0 DMA32 free:30948kB min:36468kB low:45584kB high:54700kB active_anon:1646424kB inactive_anon:1828kB active_file:48kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84336kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1319.674576] devpts: called with bogus options [ 1319.717914] devpts: called with bogus options [ 1319.741316] devpts: called with bogus options [ 1319.818866] lowmem_reserve[]: 0 0 0 0 [ 1319.838746] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1319.972010] bond0: Releasing backup interface bond_slave_1 [ 1320.045621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1320.050092] lowmem_reserve[]: 0 0 0 0 [ 1320.175781] Node 1 Normal free:47044kB min:53420kB low:66772kB high:80124kB active_anon:3046740kB inactive_anon:16kB active_file:4236kB inactive_file:3352kB unevictable:0kB writepending:272kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98656kB pagetables:260864kB bounce:0kB free_pcp:328kB local_pcp:188kB free_cma:0kB [ 1320.337429] lowmem_reserve[]: 0 0 0 0 [ 1320.347852] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1320.394037] Node 0 DMA32: 36*4kB (UM) 829*8kB (UM) 902*16kB (UE) 195*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27448kB [ 1320.448447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1320.491757] Node 1 Normal: 578*4kB (UM) 788*8kB (UME) 232*16kB (UME) 636*32kB (UMEH) 261*64kB (UME) 68*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 60136kB [ 1320.538844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.630130] net_ratelimit: 16 callbacks suppressed [ 1320.630136] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.641150] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.642608] devpts: called with bogus options [ 1320.664546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1320.695540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.737928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1320.764524] 2236 total pagecache pages [ 1320.782141] 0 pages in swap cache [ 1320.793540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1320.797950] Swap cache stats: add 0, delete 0, find 0/0 [ 1320.828980] bond0: Error: Device is in use and cannot be enslaved [ 1320.862127] Free swap = 0kB [ 1320.877396] Total swap = 0kB [ 1320.902873] 1965979 pages RAM [ 1320.922128] 0 pages HighMem/MovableOnly [ 1320.947302] 333229 pages reserved [ 1320.968526] 0 pages cma reserved [ 1320.988526] Out of memory: Kill process 32285 (syz-executor.5) score 1007 or sacrifice child [ 1321.430219] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.438026] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.510165] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.518193] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.750144] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.757196] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.230137] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.237790] protocol 88fb is buggy, dev hsr_slave_1 [ 1323.138338] audit: type=1800 audit(1572229484.331:3143): pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18535 res=0 [ 1323.783831] devpts: called with bogus options 02:24:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:45 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a000)=[{{&(0x7f0000000380)=@alg, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/38}, {&(0x7f0000000400)=""/78}, {&(0x7f0000000480)=""/165}, {&(0x7f0000000540)=""/108}], 0x0, &(0x7f00000005c0)=""/229}, 0x8}, {{&(0x7f00000006c0)=@nfc_llcp, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/237}, {&(0x7f00000002c0)=""/48}], 0x0, &(0x7f0000000880)=""/253}, 0x4}, {{&(0x7f0000000980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a00)=""/4096}, {&(0x7f0000001a00)=""/121}, {&(0x7f0000001a80)=""/189}, {&(0x7f0000001b40)=""/5}, {&(0x7f0000001b80)=""/31}, {&(0x7f0000001bc0)=""/179}, {&(0x7f0000001c80)=""/82}], 0x0, &(0x7f0000001d80)=""/124}, 0x1f}, {{&(0x7f0000001e00)=@ethernet={0x0, @broadcast}, 0x0, &(0x7f0000003340)=[{&(0x7f0000001e80)=""/179}, {&(0x7f0000001f40)=""/118}, {&(0x7f0000001fc0)=""/87}, {&(0x7f0000002040)=""/4096}, {&(0x7f0000003040)=""/25}, {&(0x7f0000003080)=""/26}, {&(0x7f00000030c0)=""/148}, {&(0x7f0000003180)=""/158}, {&(0x7f0000003240)=""/242}], 0x0, &(0x7f0000003400)=""/16}, 0xd0}, {{&(0x7f0000003440)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000004a00)=[{&(0x7f00000034c0)=""/200}, {&(0x7f00000035c0)=""/40}, {&(0x7f0000003600)=""/118}, {&(0x7f0000003680)=""/70}, {&(0x7f0000003700)=""/201}, {&(0x7f0000003800)=""/250}, {&(0x7f000000a280)=""/251}, {&(0x7f0000003a00)=""/4096}], 0x0, &(0x7f0000004a80)=""/165}, 0x500c}, {{&(0x7f0000004b40)=@alg, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)}, {&(0x7f0000004c00)=""/59}, {&(0x7f0000004c40)=""/176}, {&(0x7f0000004d00)=""/177}, {&(0x7f0000004dc0)=""/252}], 0x0, &(0x7f0000004f40)=""/42}, 0x10001}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0, &(0x7f00000064c0)=[{&(0x7f0000005000)=""/174}, {&(0x7f00000050c0)=""/4096}, {&(0x7f00000060c0)=""/244}, {&(0x7f00000061c0)=""/129}, {&(0x7f0000006280)=""/159}, {&(0x7f0000006340)=""/98}, {&(0x7f00000063c0)=""/75}, {&(0x7f0000006440)=""/67}], 0x0, &(0x7f0000006540)=""/36}, 0x1a6a}, {{&(0x7f0000006580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000008880)=[{&(0x7f0000006600)=""/41}, {&(0x7f0000006640)=""/162}, {&(0x7f0000006700)=""/19}, {&(0x7f0000006740)=""/4096}, {&(0x7f0000007740)=""/90}, {&(0x7f00000077c0)=""/188}, {&(0x7f0000007880)=""/4096}], 0x0, &(0x7f0000008900)=""/69}, 0x9}, {{&(0x7f0000008980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000008c00)=[{&(0x7f0000008a00)=""/242, 0xb7}, {&(0x7f0000008b00)=""/234}], 0x0, &(0x7f0000008c40)=""/255}, 0x100}, {{&(0x7f0000008d40)=@caif=@dgm, 0x0, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/204}, {&(0x7f0000008ec0)=""/196}], 0x0, &(0x7f0000009000)=""/4096}, 0x400}], 0x3ffffffffffff5b, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000400)=[{&(0x7f0000000500)}], 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuqe\x00', 0x100c03d, &(0x7f0000000000)=ANY=[]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f00000005c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="9a4d0e5842ca1eaccb62188944c8c488fe30c7ffbc1bc48383b9f814d95cb0f2694c252c1d9da92a934e20ab74fcab2b8deb9eb18c0cbf360cc79e82a61abfe0fb786166fe3e95e99f40f0af60dac2c9da9e74472f9ded6b64914cdcd097b841d1ddfdc340841a217acab84a1649a4712e44918a008d52731edb5f56ab52171a55a2eff8934771f87ccdb21ce0f5c394eca564620a49ab40396fab954f94e96c07fe263a78c2277c29eed75db537a49401bf115fef784967371465", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000200)=0x3a8) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f63be00f544aa2d7bbeb9d8dd5b3a4faf525868cf86b59e5731ca64b15562f3ed5d2a7d9198ab409ee02a4eb579e90d61fb6a805f34479b8388d759a1caedd39de2e081d322b0fec0b9654ce1f7142068bdde3a2a53ea5a9331a87aea68d2a843f2e02c94e939c46e0c2d052902f23aa2641d3ebff4808aed0d76e27e7955743389a55af02cad1d7c80ee9015dbad50feef892690beee561266d73bf65e0f4cc7591bfd7a748b968d02bd850286608a87e9c3a58f3b9547536e3", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) getsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:45 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xfc53, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cb295219d5c54cf6401001b00e30046cf2c9a8138bd471d0677b57304e58c9b676d4a4e7c11ee1c6fdfad61fffdc7753eec000080426663166fd5de05eb30aa05fbba19", @ANYRESDEC=0x0]) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getpid() close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x6611, 0x0) [ 1324.398062] devpts: called with bogus options 02:24:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1324.449169] devpts: called with bogus options 02:24:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1324.541347] audit: type=1800 audit(1572229485.741:3144): pid=32371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18352 res=0 [ 1324.570295] bond0: Releasing backup interface bond_slave_1 [ 1324.578138] devpts: called with bogus options [ 1324.627706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1324.641403] bond0: Releasing backup interface bond_slave_1 [ 1324.695286] audit: type=1800 audit(1572229485.761:3145): pid=32372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18462 res=0 [ 1324.724183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1325.670188] net_ratelimit: 14 callbacks suppressed [ 1325.670196] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.683026] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.698032] devpts: called with bogus options [ 1325.910123] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.917115] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.400134] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.407802] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.686739] devpts: called with bogus options [ 1326.739443] devpts: called with bogus options 02:24:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0xf4750400fd7d82fc, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="660180", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303031303030303030303030303030833031343001000000000000005f69643d", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_ivalue=0xc34}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="1e5cd4bcce4d8720c019d0fa57c43226bec564624c4f8183628b5e2b760f433fc06febfd2c2d063f11864d01ebaaae9b5f383a0889f50e041891f6c3f4b8133402610d053aa54b5dd2f158453424add9f69c4033cb2bb3ea14c05903c2f4772d6ddf0a26f3976ce926f25fa49e5ee5f304f3275ad9b08af98f39484ad29568232aaf", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1326.870151] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.876799] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.965185] devpts: called with bogus options 02:24:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643d0b32139324b619", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1327.670160] protocol 88fb is buggy, dev hsr_slave_0 [ 1327.677967] protocol 88fb is buggy, dev hsr_slave_1 02:24:49 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x11, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffffffffffffcd}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x98}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) vmsplice(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)="f2f1d729c9c8dd97746f6186067a8ba9eecb5ed2c0b1515ce286ac54f7b979a817075c5fe98b6581c78a4ccfa737"}, {&(0x7f0000001400)="1e76e0df459530b18f457a68beb78b19e4aab1e5e4ec9edc5af77ebded7b7c97a09c86a6bd459b95ed43758debf872289621fb45c317f23737c20ede2236d8bc59587a116a6b83c384d8fa36107d066000f24d76dc5dd8023dc506c5667a0c98e837bb362101d3c416f1dc0ffbd3cbdaf99b0fef54efea4d73a0110691c9126b79a45c6769ebcda4f5de583683e4b1872509fbaa578397ecf75cb1016fd4953ba7263c9d77b97bc44b486e802412ca524b9057afa753fa94e6ae76922621931d9b77d3d39ab7483031dfbefcda49eff2030a451a251bf73dbf3d95f6c59117fbce2532f9778c39b3cb0b7196895cfcf603111340355cfb61dc09649127da13bc33d8f73886e2e55c45e6f4e4407859566196f573177f51bf568d53ac4ab7a9ec64564e3191d3338c7c41e0d2e1b899e4d1bf0aaf55e322940c343764454f3932a2bf2e65eff0f8fbca24865e7cc6768a02bbe99bee5944fb1e401445be1023436f83093ae33b22d454c835b93258559f79040e09e117961bf751367d2a210db615422b74dafd04433bf3bc123ed0a56553ede8685903a200b46bac85a74963f57b07eb9f533443db777bb36880c0be3a712ee37b0ae1286dae8b874b1ad0974422eef5ea9bdbb9e9aa84b43dc322a6d33a61e5f8c2624c857fff39cace08c4b304369a7a286ca98875dd5ab9aa88009d82c17df688a39ac6d5204e57cc973fbf49bf777a5cdd02d44642fa15c5e5148c365b6dab282e2323ed3cc5802dc752bd8f444106a42763e8fe987f9f72d332e61b5748255b5a9b1123f1b14259e732258ec08a6882159573f1eebbe4b83c08b3dabac78ac4d97c5e7d92afd32d24fd9c3de6da607bcd9fda2cd0d05abf26cfdace8968b4ebc91f0f7331222d37f045d11c11a5aa8f88d4dbb68c3e79f2b70d06283ed84d6f1fc11b36722a7f201cf3dc3e0f4740e26a6e0e8377f0857fdd5ae0fbdc07deedc910a1b47ab8796e4637394709171a364003294173a179282acc6b0ffce790f98a2fa8d3f7f7554fcab470e5a6da8a5529cb385324f51822048ca8648b5ca475d2c42d1f62d5b66aabf8d533be68a432251a54419a6b96c54cbc528a9b0b07d10b8555ceda28a98c580c352054f7e47efcc9db6c1e6ea43f2aa29cac82484b4bbf4d7fdf3b58bc346999c3fe16256d5854d2274ad7bcbcb3ef718f37a100c0c47d76727c5580e2beccf93b8bd1f24d6da935c1447176ef4b877a5f32335af1dfcd8cf668807c1a11691233311dbaf9871f569c51540304e5d1d5179026c0fa8eb21ce110eef084c82ceab0c656a3c83d681b8c40bcd1a74597a7f59828ab359a27668c4f98bcae96a321c9640516eb190f9e656ae934ebd1c4e6a13e5513f931cd5bfb7b77f1cc9a36e0e2ae3b71c28efece6b9c8f093525f52f075ece0e348ef7297fa3ffa99c6185fa08b0502aafd8b9ae3ba8d3cb557729e66904163972865a93c9dfc8e585675d91de407f86a6e38af42fda8218eccb322b4797054db946cb8249daa5e83cad03dda6d247fc70b8f547c35c3af4024535061b847b0cad11f21ba748982e8853f2afba4eae1c5c9ec651bcb4776b45c7d3592f97f87d1b7c90cd22fe0af2a4b79e440aa37339fe1943b58a8ee71feeee44502d8b7943155323307a8e02965ceb18f663d71b8f430f23250dd0cbd2a9c0d0dfc56a8de168a1b9c6981eef8fffcb4333e4dc728827033902925c1ff37cd5657def53ccb901b5391f11968d166cdc179502b2e300a38106a91287baf1e483a83c08208789e1e14f1904dec60e2a5218d16e17a50ff19ffd06adf69385297abb65f5e4b82e1778e95b62b6604d3a9c9e632e731c3170b38a84d43c81410eaf34c8a0db271080311233c827d1d767b67fa311ee7190a2e21204d56dcfbd0a4139ac41312eeb72437d22672632f15fae3d0b3adaec203fd32c475c42b32ff4d50f44395659b6ed67241c1f96dd20f79ed40979848eddfb17456b39416cae32ce593bf18cebbf84bd66c295c6e7a3545887074e44b0e79b6a254b7a514abe494c5da72e05d7dc53c08696a26250ad9176ba0c6b975cdb4e11d77b0b0a94dfdb8646a26617366368f490306a12d93a05e6e799af0d0dc540200bd670669a91fc3db12e262973de8e559ee8b901783eb9106e58025fc44fc649fddb5ac1af6e54c1fa0e6996c2dba91905895546b3421bcc9b85c9fbfaa44727164fc54bea4c1efe8240a2838615633d0f85004c2e4ddc44901676dc4ce99e7eff7ecf573107fd5ce68602dffda51e9a0c91a7d5176c1f8f3b415d925cdec42bf1b9ca3af188688994a70f51135fa69a66f626252839975266ee84b9dd0099785c54f6a2afc9eb2ac91ca07fd14724c79a8e46df29a95b36ac000d38895b7879052a1fcfbbe9e88a5ea38cca515ef88e85cd931380d3123cfc18f6dc21347b1911434a19ce967564cfeaa363147757dfdff97a15fd38977acb5045da51357cacaa1bbf5232c82849371524285123196451856472fcf77d1534150642b8b6eeb27aacb885d421ff8af033c290412cf1800f96fa4a51ae3a97f5deeadc1fe9dee31c97e675393017804a8bd895b4fc59814728e652625628369485f28684299769e7210dba3d12d184809937fd652dcbee98045c96665c5a162e549da7eeee441ba0ba883b5a41e7dbf5312515c07456ae87536f2a872b2407edc21b2b828312301e3a32a86736e9cb1a07c9acc95d31acab247bc87a16806acddb0a110f732936cb6ffb169d33ea94e3ee323c24fb9ff59c6c5051c01b972695997d79ea903124d5e20f464374a92280356e4f930f9c9f3531da283ac5344a6d486e3140108f9d4a183be7c32f07f1b5bcdc309ad6f2e36f3fe1a6f68620af51855ad510ed8e3eafcbd7af314643dabc621add1f0c7775481d0f09336597b9965bca1e6b8f3ec8fc1aa08f292d3581395cf6213f88dd6f1386aac0af3e17fe19fa99e65bf51d6557b78e80e45e94d965bbaf6664127f3552a12385f8f6223fdc83f8fc4d2b76c9caf2c60c04ba1e552498eb5f8398084aa5f6003c7d750e8361be2c20ba079c6dfd4c9f5976a62aa6478f46a141e6c121b61f8661f5447a79e291e3169668db312a7b7cadd0777366f1cfbb07b72e0d36c773451382bcc326d540808e1ae92790af66a741da29a42ccea5ea91d8912a971afc073780dac70f1005ee4b502c87f8f32cd489f225effe660ec8407864d7292b90f864901e65b3f1c3f5668b1350f80d8f0f9d8fde117f53dd4fab33087c140c42df578244823ff3b33f3c129a2588b89336dd9fa8ca67a439bfde96c36e1dc2762f9ec7c1a800d17e364756bc35878ad2d9dc88d7884e143e23eb0a74596eeabb2a8b786174c8ef6bfe671d53c5f9e20b26f7a7f88113729f1339283fac865fc43c17bb3f5213340f740b49627b24e18c6b3a6c94f6580e3954e11c1388e396e49f01af9edcbe2c3a15cacbd850a843c3d9c473c6c9fa121a8f4844625673358711e3092b8ea1bb8e77a9f6fc4aaef050ae9f546a98b857fb5640037197aee41e912e6dfe3091efe9d16d15ebc249d24da46f6d69a6e117dab2b8a881d9331d6ff44e9f7290bdd9701fd8b3a29ba39927a695977bb348a123001a612a08ec645ee1d0b82605a618d0573a3b642d52f61c8923cc2b6603756103d24bae3a5bba92bc70a2d4f338b0126b00ee2660b936fd5ef3cdcfb25ebdaeaed01d49a0a4c76c78cf63a887d9d36e1333d898b2083ac16a5cd1bc3c312b09491d7394c80d16f114595d3fb1176f3cbd7ec96708a8a100536645f0c08b6f2a31b49327d18fab8b4c1a7984931053a820afd73978e09b246583604478417adba079dd4a0ea2496748d2ba9506a67d0b16dc74bb2b2166fb93169e2780b23aa6eefb42fe47f0a4f18c2c1562edf976841b10479fdf95fb837708d597a57820358b1253d60d786858ae9ab3e8e28973faf0482084b303af9a1cc5c613d8828d9478d707c1d96216df3a29525aa1888921b21b0389bbb8520ba0bbfa5c53d34c026230cb65fc484efe5309fd933b760864ad53ffd3a72e888e1cae9691d259467852e365c6508b4a2e62ef123382a421b2143ae36e41ad34d70908ae7427dbb7231a473b55adbf4b1a19eda053fc2fe46b465bb8991d80a14dceb40228a656512e1b54413885cb1fd19e1b27edf19109a6728771c9ae5b628468d5f201d2a84e76932a2331a8639bc6afdde5d40d67ac7843becca244f1ad705fefca3ca9784590453f1c21418ae6a2134f55f03bb4c2aeb1385dbe23287d0f2cf9c10cbbfc32cb653724d08375799a8427a7b156d1b2360056eba37f513b411d21607ce2f5a3024335aa77f8e88bc07d26f054b49310043e6ed45170c9b2c57f8e93ea13f983df61b58c9a379fd6e33a0db92aee42bd1d6f771b8daece95f36ec172a4755251ba1c56d4d807c49d7dddbc21274facca665006860069eab3f1c4fa6ac57c24c822cc7565ec5aa60c15a8c12fb31b3fab0e5d55ac69a7a4dbd43de51906577191e73d920af2f5d8135dbe7089f5615668bd2f097ba2f2bbc97dc46beada4cae40b87790d0116d76c8db53cb7d7adba61762a96cc3d63ae2240622819921053871f696b75295b05be2c2cabc2f7b5318b5030f0ea724c9e28a3909593f167caadff363455f2e4dceb4c92aa57d551c0ea4537a3c719cb01e9ade1de46c1ff3d1ad53b0dea1fa45c8b88313d7b766226000b9dfb8f0d6995ee41fd61c4e7006ef3affff816d1b4214bb3ff194f181e38a7d9ff0a9556b3032224eeb0fa55fa30f78482fc24d29061727448d21a9552de84d41033dda88dcb65fba42a3cff9a9dc41423e58c85f637fc9ed1a16550c4e05457a3dcfff20a4acb1acd1a21d828767420e3e29bba8b1f5a22edd3a79547d60d63e3a3c65b1207d662f0b55025b4fa7cfbba094cfcb2e3cea2b6cd69f6d7f6d6154f35afe12bfa24ed1e30140a55592c931a9e5c1709585fc3ef3c2d49550e9a3b8514e51701552a8b077cce5d5d1a547d05751472cf0e9b32955314631a88551517ad40e0e8ab0531c9e1ca74ffd6b85387d9e6d19ff4ce44abc02b879879f4af0127d81e5ebf2391773dd1361df67f146f9fbd931617f01f86e2c0c8925c99eeb375d3f9044bf24e838b3a0ac7d1655e3d6147ad8e1a9cca77592c0fc315545799e1b65cc7a41594466ed9e8c4ad0eb9077aeb5d3706776dde032f7848dbae180b113aa38291645487cae006805d2e4a730c96a36c07b90ebba8bcd0cc54484b1855ab76a7747e810f04fdfeea7ce1bf3950f156d76befa44ec2c7d51071a0e20c2279439b5e12dae25d79c1b9247902dca584758b8cbb8f69213b55be501a02786564e6815705939240cc92c07e2d0e14a5b41464829af672100c2462c3a6276dad2f339e7b9667895400c92dfe83ec8e24be57c85538ba7e81c9782f514ce2ea44175a7fc245207cb5524bdb1f996e0a864123240ceb503d4a3596779956b0155a020a314ecb90b51ad42883404bc0131978c8c5ff8894e8eb508bdbb2269d01f48b02af77b88ea8be2b2b3cddea9f5574015ab9533c56c1c1e54c0ed4b8aca4967844e3155864df92ea3fe73c8bae1011f2fec4de55537dd6d30e4f28371d55185359b69e2c97cfb5fea701c3d8cb474d283bd819e8b75329aa50cd7f4101e306f97f123d5783de7bb26262e495d4c788b86f7b87ece48c47ae3eb20d7c2cdfdc979ec0569778998b0953cc3270fde5042fe005eb89f37749d61478cdd200a1eb00c62"}], 0x1a9, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1328.165683] devpts: called with bogus options 02:24:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x2000000000000}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666439bda325aa06000000000000009d3f1aee3669759ed4a23c6b4c69381fbe44ffe2afbe6a325d600af91af91ee5d0e779bbb43c72", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:49 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xab) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ade02, 0x182) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1328.488426] devpts: called with bogus options 02:24:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0xfffffffffffffff4, 0x2, 0x0, 0x0, 0x4000005}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_settings={0x10001, 0x9, @fr_pvc_info=&(0x7f0000000400)={0x800, 'vxcan1\x00'}}}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="7c521bf67e51be31df230cff5442ee04192aefff979a1aa9ce4011c520e1fa6b25caebac382fd1ea535000fedb8d43989826c9f9b55dffa06b645e932c45d4fb258df29b0a895e2913d87cd0", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1329.226900] devpts: called with bogus options [ 1329.277994] devpts: called with bogus options [ 1329.286512] audit: type=1800 audit(1572229490.481:3146): pid=32421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18878 res=0 [ 1329.316709] bond0: Releasing backup interface bond_slave_1 [ 1329.325899] devpts: called with bogus options [ 1329.732990] devpts: called with bogus options [ 1329.887792] audit: type=1800 audit(1572229491.081:3147): pid=32430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19119 res=0 [ 1329.953025] audit: type=1800 audit(1572229491.151:3148): pid=32431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19113 res=0 [ 1329.960545] devpts: called with bogus options [ 1329.983825] bond0: Releasing backup interface bond_slave_1 [ 1330.035798] bond0: Releasing backup interface bond_slave_1 [ 1330.101107] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1330.132263] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1330.143615] bond0: Releasing backup interface bond_slave_1 [ 1330.377058] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1330.390443] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1330.396549] CPU: 1 PID: 7699 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 1330.403487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.412984] Call Trace: [ 1330.415587] dump_stack+0x138/0x197 [ 1330.419222] ? adf_copy_key_value_data+0x368/0x510 [ 1330.424180] dump_header+0x177/0x6cd [ 1330.427902] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1330.433011] ? ___ratelimit+0x55/0x537 [ 1330.436905] oom_kill_process.cold+0x10/0xadd [ 1330.441408] ? rcu_read_unlock_special+0x895/0xd40 [ 1330.446348] ? lock_downgrade+0x740/0x740 [ 1330.450517] out_of_memory+0x2ee/0x1180 [ 1330.454502] ? lock_acquire+0x16f/0x430 [ 1330.458478] ? oom_killer_disable+0x1d0/0x1d0 [ 1330.462981] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1330.467935] __alloc_pages_slowpath+0x2251/0x2930 [ 1330.472784] ? warn_alloc+0xf0/0xf0 [ 1330.476415] ? __might_sleep+0x93/0xb0 [ 1330.480306] __alloc_pages_nodemask+0x62c/0x7a0 [ 1330.484975] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1330.489986] ? ____cache_alloc_node+0x1be/0x1d0 [ 1330.494654] ? cache_grow_begin+0x335/0x400 [ 1330.498973] cache_grow_begin+0x80/0x400 [ 1330.503032] ? __cpuset_node_allowed+0xff/0x450 [ 1330.507699] fallback_alloc+0x1fd/0x2c0 [ 1330.511673] ____cache_alloc_node+0x1be/0x1d0 [ 1330.516168] kmem_cache_alloc+0x1f3/0x780 [ 1330.520329] getname_flags+0xcb/0x580 [ 1330.524128] user_path_mountpoint_at+0x29/0x50 [ 1330.528708] SyS_umount+0x10c/0x380 [ 1330.532339] ? __do_page_fault+0x358/0xb80 [ 1330.536572] ? __detach_mounts+0x2f0/0x2f0 [ 1330.540801] ? do_syscall_64+0x53/0x640 [ 1330.544774] ? __detach_mounts+0x2f0/0x2f0 [ 1330.549004] do_syscall_64+0x1e8/0x640 [ 1330.552884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.557726] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1330.562906] RIP: 0033:0x45c967 [ 1330.566084] RSP: 002b:00007fff36252818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1330.575260] RAX: ffffffffffffffda RBX: 0000000000144b64 RCX: 000000000045c967 [ 1330.582522] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff36253950 [ 1330.589787] RBP: 0000000000001d41 R08: 0000000000000001 R09: 0000000001604940 [ 1330.597050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36253950 [ 1330.604317] R13: 00007fff36253940 R14: 0000000000000000 R15: 00007fff36253950 [ 1330.854401] Mem-Info: [ 1330.859657] active_anon:1175331 inactive_anon:464 isolated_anon:0 [ 1330.859657] active_file:502 inactive_file:497 isolated_file:81 [ 1330.859657] unevictable:0 dirty:45 writeback:0 unstable:0 [ 1330.859657] slab_reclaimable:22141 slab_unreclaimable:179156 [ 1330.859657] mapped:53097 shmem:517 pagetables:86551 bounce:0 [ 1330.859657] free:21009 free_pcp:237 free_cma:0 [ 1330.945425] Node 0 active_anon:1652452kB inactive_anon:1828kB active_file:80kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208992kB dirty:84kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1331.013209] Node 1 active_anon:3048872kB inactive_anon:28kB active_file:1680kB inactive_file:1788kB unevictable:0kB isolated(anon):0kB isolated(file):412kB mapped:3096kB dirty:96kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1331.030184] net_ratelimit: 16 callbacks suppressed [ 1331.030191] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.052516] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.087160] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.165156] lowmem_reserve[]: 0 2580 2580 2580 [ 1331.180162] Node 0 DMA32 free:28000kB min:36468kB low:45584kB high:54700kB active_anon:1649840kB inactive_anon:1828kB active_file:72kB inactive_file:76kB unevictable:0kB writepending:88kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13344kB pagetables:84340kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 1331.321812] lowmem_reserve[]: 0 0 0 0 [ 1331.334056] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.397917] lowmem_reserve[]: 0 0 0 0 [ 1331.409731] Node 1 Normal free:47472kB min:53420kB low:66772kB high:80124kB active_anon:3048872kB inactive_anon:28kB active_file:1616kB inactive_file:1616kB unevictable:0kB writepending:92kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98752kB pagetables:261572kB bounce:0kB free_pcp:924kB local_pcp:520kB free_cma:0kB [ 1331.520731] lowmem_reserve[]: 0 0 0 0 [ 1331.529381] Node 0 DMA: 3*4kB (UM) 35*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10484kB [ 1331.571885] Node 0 DMA32: 60*4kB (UME) 886*8kB (UME) 904*16kB (UME) 192*32kB (UM) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28000kB [ 1331.620098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1331.652017] Node 1 Normal: 660*4kB (UME) 613*8kB (UME) 14*16kB (UME) 435*32kB (UME) 266*64kB (UME) 68*128kB (UME) 7*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49208kB [ 1331.695072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.719033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.743242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.763673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.786629] 1037 total pagecache pages [ 1331.798835] 0 pages in swap cache [ 1331.806918] Swap cache stats: add 0, delete 0, find 0/0 [ 1331.822054] Free swap = 0kB [ 1331.828716] Total swap = 0kB [ 1331.831914] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.834586] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.864927] 1965979 pages RAM [ 1331.875163] 0 pages HighMem/MovableOnly [ 1331.883968] 333229 pages reserved [ 1331.896538] 0 pages cma reserved [ 1331.903586] Out of memory: Kill process 32409 (syz-executor.5) score 1007 or sacrifice child [ 1331.910151] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.919921] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.926330] Killed process 32430 (syz-executor.5) total-vm:73248kB, anon-rss:16576kB, file-rss:35212kB, shmem-rss:0kB [ 1332.021578] oom_reaper: reaped process 32430 (syz-executor.5), now anon-rss:0kB, file-rss:92kB, shmem-rss:0kB [ 1332.060180] oom_reaper: reaped process 32411 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1332.150127] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.157187] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.630147] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.637857] protocol 88fb is buggy, dev hsr_slave_1 02:24:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="cf6491c20600df356318a0ca458734ad15eb2aec5855822c56ba3fdab699dfccbe3cbbd3a5d0000000010000ea000000000000000000", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:53 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1333.091832] devpts: called with bogus options [ 1333.262737] audit: type=1800 audit(1572229494.461:3149): pid=32450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18422 res=0 [ 1333.521895] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1333.566138] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 1333.583639] CPU: 1 PID: 32447 Comm: syz-executor.1 Not tainted 4.14.150 #0 [ 1333.590683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.600045] Call Trace: [ 1333.602644] dump_stack+0x138/0x197 [ 1333.606278] dump_header+0x177/0x6cd [ 1333.609995] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1333.615097] ? ___ratelimit+0x55/0x537 [ 1333.618984] oom_kill_process.cold+0x10/0xadd [ 1333.623477] ? rcu_read_unlock_special+0x639/0xd40 [ 1333.628410] ? lock_downgrade+0x740/0x740 [ 1333.632565] out_of_memory+0x2ee/0x1180 [ 1333.636542] ? lock_acquire+0x16f/0x430 [ 1333.640520] ? oom_killer_disable+0x1d0/0x1d0 [ 1333.645013] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1333.649946] __alloc_pages_slowpath+0x2251/0x2930 [ 1333.654793] ? warn_alloc+0xf0/0xf0 [ 1333.658419] ? __might_sleep+0x93/0xb0 [ 1333.662296] __alloc_pages_nodemask+0x62c/0x7a0 [ 1333.666960] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1333.671978] ? rcu_read_lock_sched_held+0x110/0x130 [ 1333.676996] ? check_preemption_disabled+0x3c/0x250 [ 1333.682009] copy_process.part.0+0x26a/0x6a00 [ 1333.686499] ? __handle_mm_fault+0x1c49/0x3470 [ 1333.691086] ? lock_downgrade+0x740/0x740 [ 1333.695230] ? pud_val+0xe0/0xe0 [ 1333.698593] ? _raw_spin_unlock+0x2d/0x50 [ 1333.702738] ? __cleanup_sighand+0x50/0x50 [ 1333.706980] ? __do_page_fault+0x4e9/0xb80 [ 1333.711215] ? find_held_lock+0x35/0x130 [ 1333.715277] _do_fork+0x19e/0xce0 [ 1333.718731] ? fork_idle+0x280/0x280 [ 1333.722443] ? up_read+0x1a/0x40 [ 1333.725801] ? __do_page_fault+0x358/0xb80 [ 1333.730027] ? mprotect_fixup+0x920/0x920 [ 1333.734183] SyS_clone+0x37/0x50 [ 1333.737543] ? sys_vfork+0x30/0x30 [ 1333.741079] do_syscall_64+0x1e8/0x640 [ 1333.744956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.749804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1333.754985] RIP: 0033:0x45c909 [ 1333.758164] RSP: 002b:00007ffd93531178 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1333.765863] RAX: ffffffffffffffda RBX: 00007f00ea685700 RCX: 000000000045c909 [ 1333.773125] RDX: 00007f00ea6859d0 RSI: 00007f00ea684db0 RDI: 00000000003d0f00 [ 1333.780390] RBP: 00007ffd93531390 R08: 00007f00ea685700 R09: 00007f00ea685700 [ 1333.787653] R10: 00007f00ea6859d0 R11: 0000000000000202 R12: 0000000000000000 [ 1333.794914] R13: 00007ffd9353122f R14: 00007f00ea6859c0 R15: 000000000075bf2c [ 1333.875788] devpts: called with bogus options [ 1334.097056] Mem-Info: [ 1334.102019] active_anon:1175321 inactive_anon:461 isolated_anon:0 [ 1334.102019] active_file:524 inactive_file:423 isolated_file:64 [ 1334.102019] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1334.102019] slab_reclaimable:22214 slab_unreclaimable:179047 [ 1334.102019] mapped:53027 shmem:517 pagetables:86519 bounce:0 [ 1334.102019] free:20982 free_pcp:425 free_cma:0 [ 1334.173971] Node 0 active_anon:1652828kB inactive_anon:1828kB active_file:4kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208924kB dirty:0kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.202960] Node 1 active_anon:3048544kB inactive_anon:16kB active_file:1656kB inactive_file:1780kB unevictable:0kB isolated(anon):0kB isolated(file):252kB mapped:3120kB dirty:204kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.273237] Node 0 DMA free:10492kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.340102] lowmem_reserve[]: 0 2580 2580 2580 [ 1334.344738] Node 0 DMA32 free:27544kB min:36468kB low:45584kB high:54700kB active_anon:1650216kB inactive_anon:1828kB active_file:4kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13376kB pagetables:84344kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1334.395111] lowmem_reserve[]: 0 0 0 0 [ 1334.399137] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.428477] lowmem_reserve[]: 0 0 0 0 [ 1334.433304] Node 1 Normal free:47316kB min:53420kB low:66772kB high:80124kB active_anon:3048544kB inactive_anon:16kB active_file:1408kB inactive_file:1780kB unevictable:0kB writepending:204kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98784kB pagetables:261572kB bounce:0kB free_pcp:1204kB local_pcp:528kB free_cma:0kB [ 1334.467995] lowmem_reserve[]: 0 0 0 0 [ 1334.472843] Node 0 DMA: 3*4kB (UM) 36*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10492kB [ 1334.493923] Node 0 DMA32: 30*4kB (UME) 866*8kB (UE) 899*16kB (UE) 189*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27544kB [ 1334.508282] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1334.530547] Node 1 Normal: 440*4kB (UME) 627*8kB (UMEH) 20*16kB (UME) 424*32kB (UME) 266*64kB (UMEH) 68*128kB (UME) 7*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48184kB [ 1334.590517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1334.610314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1334.629852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1334.650077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1334.658682] 1091 total pagecache pages [ 1334.680084] 0 pages in swap cache [ 1334.683563] Swap cache stats: add 0, delete 0, find 0/0 [ 1334.700118] Free swap = 0kB [ 1334.703170] Total swap = 0kB [ 1334.706201] 1965979 pages RAM [ 1334.709294] 0 pages HighMem/MovableOnly [ 1334.721155] 333229 pages reserved [ 1334.724618] 0 pages cma reserved [ 1334.727975] Out of memory: Kill process 32441 (syz-executor.4) score 1007 or sacrifice child [ 1334.736746] Killed process 32450 (syz-executor.4) total-vm:73512kB, anon-rss:16596kB, file-rss:35384kB, shmem-rss:0kB [ 1334.792174] oom_reaper: reaped process 32450 (syz-executor.4), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1335.176583] devpts: called with bogus options [ 1335.197922] devpts: called with bogus options 02:24:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1335.316289] audit: type=1800 audit(1572229496.511:3150): pid=32465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18546 res=0 [ 1335.732500] devpts: called with bogus options [ 1335.915499] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1335.924381] bond0: Releasing backup interface bond_slave_1 [ 1335.983751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1336.000895] bond0: Releasing backup interface bond_slave_1 [ 1336.059099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1336.068641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1336.076384] net_ratelimit: 14 callbacks suppressed [ 1336.076390] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.079119] protocol 88fb is buggy, dev hsr_slave_1 02:24:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='devpt\x1d\x1c\x92\xd7\x12\xb9y?P\x81\xbf\xc3\x8c\xc0\xb0\x96\x97\xb5\"\xaf\x12\xde5\x1f\x02bk\xce\xc3\xf4\xb0\x82\xeb\x1d$c\by Xg\xeb{\x95[f9%\xc4L\xc1\ak\xc7\xf3\xba\x13\x8c@\x13\xefk\x90k<\x18\x80 \xac\x8f\x9b\x99\x1d-tK[n)<5\xa0-\xa8H_\x01\x95\xa9]\r{Y\xc2\x88\xfd\xc1\xbfSw\xeb\x00\x00\x00\x00\x8bcz{\xaa\xaa', 0x1100820, &(0x7f0000000600)='/\xf3e\xfainux/poJicy\x00T\x99\xa9\xc7\xae\xe9J\xc7:+hJ\xbf\x99\xb3FS\xda\xdb*a\f\x91ZK\xe5w\xa8\x06\x97\x815\xfb\x1ea\xaf\xd776\x93\xad6$\xf9*\xc9\xf6\x9f\a\x9c^\xa1\xaa\xce\xd4T\xfb:`S/\x82\xbf\x9c}\xa9%Zp\xf4X\xe5I>i\x193\xf9\v\xb4\x1b~j%40\xe9\xb2\x02@u(\xcd\xf7K\xd1u\xd7\xf1\xed\xd2\xc4C\x82\x1b\x1a\xdf\xea\x94\x11\xf0\x86\x7fk\r\xd1_r\xd4\xc6b\xc3\x1eP\x92\xb1\x19\xe2\x8b\xc8\x83 \xe0R7\x88\xa09\r\xe0\xb6\x03\xc1\xafM\xc2\xba\x1daU\x93\xc38\xaa\xb6\x8c\xa4\xd0') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac80}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000240)='fuse\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i$=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES16=r2, @ANYBLOB="c4ad25c0107c87d5b0bd343db190b5b5f1937548eb6008070000000000000001d8c6ff51f5c72208a3d089f5833f", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1336.310148] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.316302] protocol 88fb is buggy, dev hsr_slave_1 02:24:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000400)={0x19, 0x0, 0x0, 0x0, 0x6, 0x50dd, 0x1, 0x200}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea446115cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50003}, 0xfd12) [ 1336.542612] devpts: called with bogus options [ 1336.543851] devpts: called with bogus options 02:24:57 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x82) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext3\x00', 0x1000022, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r3, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:24:57 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1336.714446] bond0: Releasing backup interface bond_slave_1 [ 1336.800192] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.807670] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.001380] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1337.072844] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1337.092771] CPU: 0 PID: 7004 Comm: syz-executor.5 Not tainted 4.14.150 #0 [ 1337.099742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.109116] Call Trace: [ 1337.111712] dump_stack+0x138/0x197 [ 1337.115339] dump_header+0x177/0x6cd [ 1337.119047] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1337.124148] ? ___ratelimit+0x55/0x537 [ 1337.128035] oom_kill_process.cold+0x10/0xadd [ 1337.132523] ? rcu_read_unlock_special+0x639/0xd40 [ 1337.137458] ? lock_downgrade+0x740/0x740 [ 1337.141603] out_of_memory+0x2ee/0x1180 [ 1337.145573] ? lock_acquire+0x16f/0x430 [ 1337.149550] ? oom_killer_disable+0x1d0/0x1d0 [ 1337.154070] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1337.158994] __alloc_pages_slowpath+0x2251/0x2930 [ 1337.163840] ? warn_alloc+0xf0/0xf0 [ 1337.167468] ? __might_sleep+0x93/0xb0 [ 1337.171352] __alloc_pages_nodemask+0x62c/0x7a0 [ 1337.176016] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1337.181027] ? ____cache_alloc_node+0x1be/0x1d0 [ 1337.185692] ? cache_grow_begin+0x335/0x400 [ 1337.190357] cache_grow_begin+0x80/0x400 [ 1337.194415] ? __cpuset_node_allowed+0xff/0x450 [ 1337.199074] fallback_alloc+0x1fd/0x2c0 [ 1337.203045] ____cache_alloc_node+0x1be/0x1d0 [ 1337.207539] kmem_cache_alloc+0x1f3/0x780 [ 1337.211685] getname_flags+0xcb/0x580 [ 1337.215484] user_path_mountpoint_at+0x29/0x50 [ 1337.220150] SyS_umount+0x10c/0x380 [ 1337.223768] ? __do_page_fault+0x358/0xb80 [ 1337.228000] ? __detach_mounts+0x2f0/0x2f0 [ 1337.232234] ? do_syscall_64+0x53/0x640 [ 1337.236202] ? __detach_mounts+0x2f0/0x2f0 [ 1337.240432] do_syscall_64+0x1e8/0x640 [ 1337.244309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1337.249149] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1337.254328] RIP: 0033:0x45c967 [ 1337.257505] RSP: 002b:00007fff9bd147f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1337.265222] RAX: ffffffffffffffda RBX: 0000000001284940 RCX: 000000000045c967 [ 1337.272482] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff9bd15930 [ 1337.279747] RBP: 0000000000001bd9 R08: 0000000000000001 R09: 0000000000000001 [ 1337.287015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9bd15930 [ 1337.294278] R13: 00007fff9bd15920 R14: 0000000000000000 R15: 00007fff9bd15930 [ 1337.304758] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.311360] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.452956] Mem-Info: [ 1337.455704] active_anon:1175298 inactive_anon:461 isolated_anon:0 [ 1337.455704] active_file:442 inactive_file:479 isolated_file:93 [ 1337.455704] unevictable:0 dirty:72 writeback:17 unstable:0 [ 1337.455704] slab_reclaimable:22283 slab_unreclaimable:178768 [ 1337.455704] mapped:53088 shmem:517 pagetables:86476 bounce:0 [ 1337.455704] free:21863 free_pcp:0 free_cma:0 [ 1337.492381] Node 0 active_anon:1653304kB inactive_anon:1828kB active_file:116kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208960kB dirty:0kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1337.522210] Node 1 active_anon:3047888kB inactive_anon:16kB active_file:1652kB inactive_file:1796kB unevictable:0kB isolated(anon):0kB isolated(file):372kB mapped:3292kB dirty:288kB writeback:68kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1337.550972] Node 0 DMA free:10472kB min:216kB low:268kB high:320kB active_anon:2632kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.579210] lowmem_reserve[]: 0 2580 2580 2580 [ 1337.584655] Node 0 DMA32 free:27448kB min:36468kB low:45584kB high:54700kB active_anon:1650672kB inactive_anon:1828kB active_file:116kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.648043] lowmem_reserve[]: 0 0 0 0 [ 1337.656837] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.682896] lowmem_reserve[]: 0 0 0 0 [ 1337.687259] Node 1 Normal free:49532kB min:53420kB low:66772kB high:80124kB active_anon:3047888kB inactive_anon:16kB active_file:1640kB inactive_file:1532kB unevictable:0kB writepending:256kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98720kB pagetables:261372kB bounce:0kB free_pcp:412kB local_pcp:128kB free_cma:0kB [ 1337.749648] lowmem_reserve[]: 0 0 0 0 [ 1337.761132] Node 0 DMA: 2*4kB (U) 36*8kB (UMH) 32*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10472kB [ 1337.825063] Node 0 DMA32: 28*4kB (UM) 905*8kB (UM) 885*16kB (UE) 189*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27560kB [ 1337.871199] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1337.899095] Node 1 Normal: 817*4kB (UME) 1039*8kB (UM) 54*16kB (UME) 423*32kB (UME) 229*64kB (UME) 68*128kB (UME) 7*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51132kB [ 1337.919707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.929637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.943283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.964386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.998082] 1042 total pagecache pages [ 1338.016931] 0 pages in swap cache [ 1338.024248] Swap cache stats: add 0, delete 0, find 0/0 [ 1338.036989] Free swap = 0kB [ 1338.043903] Total swap = 0kB [ 1338.051059] 1965979 pages RAM [ 1338.057887] 0 pages HighMem/MovableOnly [ 1338.068015] 333229 pages reserved [ 1338.071746] 0 pages cma reserved [ 1338.075373] Out of memory: Kill process 32471 (syz-executor.3) score 1007 or sacrifice child [ 1338.080208] protocol 88fb is buggy, dev hsr_slave_0 [ 1338.084678] Killed process 32480 (syz-executor.3) total-vm:73116kB, anon-rss:16576kB, file-rss:35304kB, shmem-rss:0kB [ 1338.091884] protocol 88fb is buggy, dev hsr_slave_1 [ 1338.278333] oom_reaper: reaped process 32480 (syz-executor.3), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1339.013987] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:25:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1340.340886] devpts: called with bogus options [ 1341.396215] devpts: called with bogus options [ 1341.430157] net_ratelimit: 16 callbacks suppressed [ 1341.430163] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.441520] devpts: called with bogus options [ 1341.442148] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.663662] bond0: Releasing backup interface bond_slave_1 [ 1341.771809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1342.030154] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1342.079043] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1342.096050] CPU: 1 PID: 6832 Comm: rs:main Q:Reg Not tainted 4.14.150 #0 [ 1342.102937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.112429] Call Trace: [ 1342.115037] dump_stack+0x138/0x197 [ 1342.118691] dump_header+0x177/0x6cd [ 1342.122415] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1342.127532] ? ___ratelimit+0x55/0x537 [ 1342.131450] oom_kill_process.cold+0x10/0xadd [ 1342.135951] ? rcu_read_unlock_special+0x895/0xd40 [ 1342.140975] ? lock_downgrade+0x740/0x740 [ 1342.145262] out_of_memory+0x2ee/0x1180 [ 1342.149242] ? lock_acquire+0x16f/0x430 [ 1342.153223] ? oom_killer_disable+0x1d0/0x1d0 [ 1342.157725] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1342.162658] __alloc_pages_slowpath+0x2251/0x2930 [ 1342.167537] ? warn_alloc+0xf0/0xf0 [ 1342.171188] ? __might_sleep+0x93/0xb0 [ 1342.175079] __alloc_pages_nodemask+0x62c/0x7a0 [ 1342.179752] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1342.184778] ? lock_downgrade+0x740/0x740 [ 1342.189046] alloc_pages_current+0xec/0x1e0 [ 1342.193477] __page_cache_alloc+0x248/0x3e0 [ 1342.197802] pagecache_get_page+0x17c/0x750 [ 1342.202119] grab_cache_page_write_begin+0x74/0xa0 [ 1342.207040] ext4_da_write_begin+0x24c/0xc30 [ 1342.211552] ? ext4_write_begin+0x1030/0x1030 [ 1342.216039] ? balance_dirty_pages_ratelimited+0xc5/0x17f0 [ 1342.221654] generic_perform_write+0x1f8/0x480 [ 1342.226253] ? page_endio+0x530/0x530 [ 1342.230047] ? current_time+0xb0/0xb0 [ 1342.233838] ? ext4_file_write_iter+0x1f4/0xe90 [ 1342.238533] __generic_file_write_iter+0x239/0x5b0 [ 1342.243456] ext4_file_write_iter+0x2ac/0xe90 [ 1342.247942] ? ext4_file_mmap+0x2c0/0x2c0 [ 1342.252098] ? trace_hardirqs_on+0x10/0x10 [ 1342.256343] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 1342.261094] ? save_trace+0x290/0x290 [ 1342.264894] ? iov_iter_init+0xaf/0x1d0 [ 1342.268870] __vfs_write+0x4a7/0x6b0 [ 1342.272585] ? kernel_read+0x120/0x120 [ 1342.276468] ? check_preemption_disabled+0x3c/0x250 [ 1342.281480] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1342.288093] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1342.292841] ? __sb_start_write+0x153/0x2f0 [ 1342.297200] vfs_write+0x198/0x500 [ 1342.300732] SyS_write+0xfd/0x230 [ 1342.304298] ? SyS_read+0x230/0x230 [ 1342.307914] ? do_syscall_64+0x53/0x640 [ 1342.310154] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.311881] ? SyS_read+0x230/0x230 [ 1342.319854] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.320519] do_syscall_64+0x1e8/0x640 [ 1342.320526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1342.320540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1342.320547] RIP: 0033:0x7f4f8f6cd19d [ 1342.320550] RSP: 002b:00007f4f8dc6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1342.320558] RAX: ffffffffffffffda RBX: 0000000000000110 RCX: 00007f4f8f6cd19d [ 1342.320563] RDX: 0000000000000110 RSI: 000000000182ca90 RDI: 0000000000000005 [ 1342.320566] RBP: 000000000182ca90 R08: 000000000182cb90 R09: 656c6c616b7a7973 [ 1342.320570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1342.320574] R13: 00007f4f8dc6e480 R14: 0000000000000002 R15: 000000000182c890 [ 1342.320861] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.395588] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.489820] Mem-Info: [ 1342.493217] active_anon:1171246 inactive_anon:462 isolated_anon:0 [ 1342.493217] active_file:640 inactive_file:687 isolated_file:104 [ 1342.493217] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1342.493217] slab_reclaimable:22402 slab_unreclaimable:178560 [ 1342.493217] mapped:53353 shmem:517 pagetables:86526 bounce:0 [ 1342.493217] free:25045 free_pcp:448 free_cma:0 [ 1342.533581] Node 0 active_anon:1649116kB inactive_anon:1828kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208940kB dirty:0kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.550179] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.567087] Node 1 active_anon:3035868kB inactive_anon:20kB active_file:2232kB inactive_file:2800kB unevictable:0kB isolated(anon):0kB isolated(file):580kB mapped:4472kB dirty:124kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.568592] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.602184] audit: type=1800 audit(1572229503.801:3151): pid=32506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18548 res=0 [ 1342.627934] bond0: Releasing backup interface bond_slave_1 [ 1342.664556] Node 0 DMA free:10492kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.694391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1342.707905] bond0: Releasing backup interface bond_slave_1 [ 1342.744932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1342.832732] lowmem_reserve[]: 0 2580 2580 2580 [ 1342.862497] devpts: called with bogus options [ 1342.891996] Node 0 DMA32 free:31712kB min:36468kB low:45584kB high:54700kB active_anon:1646484kB inactive_anon:1828kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84348kB bounce:0kB free_pcp:792kB local_pcp:648kB free_cma:0kB [ 1342.960533] lowmem_reserve[]: 0 0 0 0 [ 1342.964735] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:25:04 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="ca643d34c12919fe207dcfd94d941ec70a5d3c4915893e3a82b9783a08dfe8ed27fd2090eaae1814258643d0b0039c848563bb1b8188e67cd474a5be669bc42f703bbb383bff814e5cebb12b2974ebd52d65859abb7697069fdb61628d659627ae12c96a302afae0745a1a1d5ed2ed693ec3d85eae15cb3b87bdcf4127803ff4b8549e8a984253f0f9c7f342eb541dd0fe708d10", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1343.030154] protocol 88fb is buggy, dev hsr_slave_0 [ 1343.037754] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.100636] lowmem_reserve[]: 0 0 0 0 [ 1343.123105] Node 1 Normal free:54520kB min:53420kB low:66772kB high:80124kB active_anon:3035992kB inactive_anon:20kB active_file:3228kB inactive_file:6240kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98656kB pagetables:261464kB bounce:0kB free_pcp:740kB local_pcp:492kB free_cma:0kB [ 1343.282769] lowmem_reserve[]: 0 0 0 0 02:25:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000380)="1acc69183935184e36e50c1b433a58d3ed55fb1b877f134381db1a081be82cc9938033783c858a49636084cfb4fbea23edf2a3d5087c1c59c604ff8e34655740be3cd69dbf2567ac8d692fde87821914db447e43fbb6f09e856c1d1e655eabae8ab6b19766777d4b9f136c4478e5e9f474489e866530fe0536fff509cfe074a581838867c44f374ac0ef1b1f122fc82fb47a43dd63c3e66bbe2300113ecde522e8aed3aa53fa1cee26d18ec588881e9b6ceb7648a6", 0xb5}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r12 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r12}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r14, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r14, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$sock_ifreq(r14, 0x8910, &(0x7f0000000240)={'bond0\x00\xe1\xc0\xff\xff\xff!\x00\x01\x00', @ifru_ivalue=0x1f}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r15, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r15, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32=r9, @ANYPTR64, @ANYRES16=r9, @ANYRES16=r15, @ANYRES64, @ANYRES32, @ANYBLOB="1f72ec6a32dd09d2a7e8472fb82b168251b7cdda52159b388df18e6e8a46fdd314f8c71f55be3c05cb2878ba3d1ac650306f154f2ff1571d2846b2adf918e92eeb523682c8a1a76ef6df67ef81408a1fe1fd949569795b788ccf30478a8308f0366e61847d21a74f05a9d8427c56de762ee61189c78b260df414198292edaa0b4dbac79c8be05c5e0fdd23ff2b7ad5f2dc61d1a23721a216a01870aad2d3ead1a0a2fd35915b2254178a4653299acefaa55db460f3934123095b101eb755a2f5"]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000378f27d026fc588261a708c101003848edc3e730a5f9bce3ca17d446d98ecd9bb35545a6586039318461db1c2b3c39a7205ad705559f13f1a168c1cd40d4659c936870099ce75f1a9cf103b2fa4ba7caa15485adb2ddeebdfb06d0738f3e2c1d0ff8ac3267ddad5cab016f7d52ec429b1bd9db44230b3a3ffa071d664230ad05c346aa3819998fcfa9d1601447ae59e14c2f302c00", @ANYRESHEX, @ANYBLOB=',rootmod0000000000004+000,user_id=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r17, 0x8991, &(0x7f00000000c0)={'\xe2\xff\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r17, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r18, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r18, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000640)=ANY=[@ANYRES32=r17, @ANYRESHEX=r16, @ANYBLOB="8dffff000000000000490dabd1530ad9bf04e1a9776d2954dcbd079dae", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r18]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0xfffe, 0x100000001, 0x4, 0xffffffff, 0x1ffffffd}, 0x12) [ 1343.303978] Node 0 DMA: 3*4kB (UM) 36*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10492kB [ 1343.390158] Node 0 DMA32: 107*4kB (UM) 1127*8kB (UM) 964*16kB (UME) 224*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32292kB [ 1343.443804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1343.482734] Node 1 Normal: 284*4kB (UME) 689*8kB (UME) 192*16kB (UME) 579*32kB (UME) 263*64kB (UME) 69*128kB (UME) 7*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55704kB [ 1343.558910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.583771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.597736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.613733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.700066] 2409 total pagecache pages [ 1343.733939] 0 pages in swap cache [ 1343.758024] Swap cache stats: add 0, delete 0, find 0/0 02:25:05 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1343.819968] Free swap = 0kB [ 1343.836852] Total swap = 0kB [ 1343.847597] 1965979 pages RAM [ 1343.901339] 0 pages HighMem/MovableOnly [ 1343.922842] 333229 pages reserved [ 1343.937963] 0 pages cma reserved [ 1343.973702] Out of memory: Kill process 32496 (syz-executor.3) score 1007 or sacrifice child [ 1344.314627] devpts: called with bogus options 02:25:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1344.664215] devpts: called with bogus options 02:25:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt(r0, 0x8000000000000001, 0x10000000000009, &(0x7f0000000140)="890538e4", 0x4) setsockopt(r0, 0x8000000000000001, 0x10000000000009, &(0x7f0000000240)='\x00\x00\x00\x00', 0x4) 02:25:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) sched_setattr(r2, &(0x7f0000000340)={0x30, 0x7, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x181402, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1346.448345] devpts: called with bogus options [ 1346.470156] net_ratelimit: 12 callbacks suppressed [ 1346.470163] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.483116] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.529934] devpts: called with bogus options [ 1346.560146] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.568038] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.710152] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.717414] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.190151] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.197881] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.670139] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.676830] protocol 88fb is buggy, dev hsr_slave_1 02:25:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:08 executing program 1: socket$packet(0x11, 0x0, 0x300) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0xaaf760b) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="3d08ab54d69ed87a0df355e894eb006880d3ed082d9c27beb58c523b18f50ec4ac5bacdd0f239674dbbbab86e59fe9ae859f8f43e78946cb707acf63580be2deb22ea95cfe6f098b1bfabf064e5303fcd94ab19b7c83d6", 0xfffffffffffffe95}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1348.352356] devpts: called with bogus options [ 1348.590654] devpts: called with bogus options [ 1348.675498] audit: type=1800 audit(1572229509.871:3152): pid=32567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18548 res=0 [ 1348.702171] bond0: Releasing backup interface bond_slave_1 [ 1348.747841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1348.793725] devpts: called with bogus options 02:25:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c736f6f746d6f64651f303030303030303030303030303030757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000340)={'dummy0\x00', @ifru_data=&(0x7f00000002c0)="aaa5eb059992af9b99396e0f2a68898cfe2312f83a6dbbb02e503afe6ba69838"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0xfce3992b101189d, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRESHEX=r9, @ANYBLOB="30a510358f804907948e14388bc67c4efa8843d9a1ec2c16b8683587ec78e130efd15d55b0cac7685f1ae12ab558f769da75f3f34dc3400b320b1692bedf69c1ee41015c3ab7fd80131fea5a161afb27bd2da1eff613082ab8b3fac2f92fe9519d3087b36d647b1bc27ce915329fe60fd09102a6f221bb8921e462f5f488b3f9a8819ba122069530546ed19b2a52232d7df3abc1ff720458ed24f0adff64", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000400)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:11 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100, 0x100000001, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x12, 0xffffffffffffffff, 0x40) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x14b191b8760ae76d, 0x4, 0x4, 0x4000004, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xfffffffffffffe75) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000440), 0x0}, 0x20) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800990000000000000000971c040000002c97bd00000000ff000000000000001b1161"], &(0x7f0000f6bffb), 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000e00)=r3, 0x1e9) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xbfffffffffffffff, r4, 0x8) socket$kcm(0xa, 0x100000000000001, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x800000000006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x12', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x3) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/232, 0xe8}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000ec0)=""/240, 0xf0}], 0x7, &(0x7f0000000bc0)=""/25, 0x19}, 0x40) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000c40)=0x4) close(r5) r6 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000380)={0x0, 0xffffff92, 0x0, 0x0, 0x0, 0xfffffffffffffe2c}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000c00)='cgroup.stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) [ 1351.338811] devpts: called with bogus options [ 1351.606710] audit: type=1800 audit(1572229512.801:3153): pid=32593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=18702 res=0 [ 1351.637232] bond0: Releasing backup interface bond_slave_1 [ 1351.683476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1351.830166] net_ratelimit: 18 callbacks suppressed [ 1351.830172] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.841740] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.183247] devpts: called with bogus options [ 1352.382346] devpts: called with bogus options [ 1352.394800] devpts: called with bogus options [ 1352.710149] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.718023] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.790200] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.798163] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.950138] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.957196] protocol 88fb is buggy, dev hsr_slave_1 [ 1353.430197] protocol 88fb is buggy, dev hsr_slave_0 [ 1353.437951] protocol 88fb is buggy, dev hsr_slave_1 02:25:15 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r7, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r8]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:17 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008540)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/207}, {&(0x7f0000000500)=""/230}, {&(0x7f0000000600)=""/126}], 0x0, &(0x7f0000000680)=""/4096}, 0x5953}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/128}], 0x0, &(0x7f0000001780)=""/43}, 0xfff}, {{&(0x7f00000017c0)=@ax25={{}, [@remote, @remote, @bcast, @bcast, @null, @netrom, @bcast, @netrom]}, 0x0, &(0x7f0000004980)=[{&(0x7f0000001840)=""/236}, {&(0x7f0000001940)=""/4096}, {&(0x7f0000002940)=""/10}, {&(0x7f0000002980)=""/4096}, {&(0x7f0000003980)=""/4096}], 0x0, &(0x7f0000004a00)=""/206}, 0x9}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004b80)=""/4096}, {&(0x7f0000005b80)=""/140}], 0x0, &(0x7f0000005c80)=""/230}, 0x2da6}, {{&(0x7f0000005d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000008400)=[{&(0x7f0000005e00)=""/196}, {&(0x7f0000005f00)=""/4096}, {&(0x7f0000006f00)=""/232}, {&(0x7f0000007000)=""/4096}, {&(0x7f0000008000)=""/222}, {&(0x7f0000008100)=""/170}, {&(0x7f00000081c0)=""/252}, {&(0x7f00000082c0)=""/61}, {&(0x7f0000008300)=""/242}], 0x0, &(0x7f00000084c0)=""/124}, 0x46}], 0x13907d7c38ff56d, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_procfs(r1, &(0x7f0000008680)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x6, 0x9, 0xffffffff}, 0xfef4) [ 1356.686156] devpts: called with bogus options [ 1356.819785] devpts: called with bogus options [ 1356.870248] net_ratelimit: 12 callbacks suppressed [ 1356.870253] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.883209] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.960142] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.967862] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.110177] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.117226] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.590125] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.597888] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.070140] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.076735] protocol 88fb is buggy, dev hsr_slave_1 02:25:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) 02:25:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f01800000653d30301759d99b03303030304e8ac59fcaab0dbc3030303034303030302c757365", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r13}, 0xc) r14 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r14, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="89272dbecb9d944485ffdd2297fa8e36721016f262274ee2133d78adced6d908bb6baebe6068e32e93c738a37e5919169775e7ddb6690174887a0f99ff99603535ab2a0b81031c39264dbc2feb90f32f818057f29899ec8faaf29714ec8399ce71ee06d6ae1482d44d95d050198a51d3d54a95e71ef98d21ad0e8eb946a5dffb72b6457f5dbab8f6b71652bbb559eacdea2d9da203643e33d2fbcbc418b40cc767bda714efeaf8ba43cbefae4e7b7905052a57", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESHEX=r5, @ANYBLOB="434b68a9cabd21c4fdc81494ab49b9070d01ce8ffbb6d083b58be27e803475443166ceff3b03929df2aa2a15da3fc063bc7944748f9f0703f3fa79468af384efe85ba6449bb09f8bd57f190ec56f2aeb5cdc7884304c0454cdfb93261f02d6", @ANYRES64=r6, @ANYRESHEX, @ANYRES32=r12, @ANYRES32=r6, @ANYRES32=r13], @ANYRES64, @ANYRES16=r14, @ANYPTR64, @ANYBLOB="30a8c36d34e12cebe6e7b56383d64cfe7e01665f55d215149807876429773f3fa75db5245b2b1544cb459debd48e5ae34f66552c8120076ae2000476eb0be93dfbba7b2472a52cccffc0ca2f1005bdeb5b02d5a5248455218b2a7269abc8bbfc3fe72f20de1a4e4b92aa2745935fa448736d81de49e2648717d5d3e94bb21dc054679db81cb473fbcc7402d9597e17094e3f52a4704805a8f85ef1185b1ed3b791f3c923a8abcb72418ce9ee61123953a0e08657a3d413687d56ebf0b8ccd42aaeb41e4a"], @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1359.903399] devpts: called with bogus options 02:25:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="230000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @val, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 02:25:22 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x2, 0x0, 0xfffffffa, 0x10001, 0xf, 0x6, 0x200000000000}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:22 executing program 2: socket$packet(0x11, 0x5d76053225edfb83, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/186, 0x4f0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/186, 0x4f0) rmdir(&(0x7f0000000640)='./file0/file0\x00') r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x203}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) [ 1362.218679] devpts: called with bogus options [ 1362.230182] net_ratelimit: 18 callbacks suppressed [ 1362.230187] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.242109] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.656351] devpts: called with bogus options [ 1362.670121] devpts: called with bogus options [ 1363.110222] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.118163] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.190173] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.198066] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.350147] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.357366] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.830167] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.837738] protocol 88fb is buggy, dev hsr_slave_1 [ 1364.193444] devpts: called with bogus options 02:25:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f0000000340)='./file0\x00', 0xace43, 0x0) ftruncate(r7, 0x28007d) syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1366.320246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1366.339569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:25:26 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1367.270202] net_ratelimit: 13 callbacks suppressed [ 1367.270208] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.282979] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.350181] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.358216] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.513216] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.520173] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.531254] devpts: called with bogus options [ 1367.549183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1367.690165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1367.783797] syz-executor.4 (32678) used greatest stack depth: 23184 bytes left [ 1367.990190] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.997860] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.470188] protocol 88fb is buggy, dev hsr_slave_0 [ 1369.162471] devpts: called with bogus options 02:25:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f00000006c0)='jfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@discard='discard'}], [{@fsname={'fsname', 0x3d, 'md5sum)wlan0&*'}}]}) [ 1371.067618] devpts: called with bogus options [ 1371.074856] JFS: discard option not supported on device [ 1371.133190] jfs: Unrecognized mount option "fsname=md5sum)wlan0&*" or missing value [ 1372.630135] net_ratelimit: 19 callbacks suppressed [ 1372.630140] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.641629] protocol 88fb is buggy, dev hsr_slave_1 02:25:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66a8641d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="520f1e2a2646f243a9ad1c6a7cd1b7", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:33 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x15b6e1, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r7, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=r0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:34 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x500a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1373.510128] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.517934] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.600161] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.607918] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.750156] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.757241] protocol 88fb is buggy, dev hsr_slave_1 [ 1374.230179] protocol 88fb is buggy, dev hsr_slave_0 [ 1374.237790] protocol 88fb is buggy, dev hsr_slave_1 [ 1374.312311] devpts: called with bogus options [ 1374.433268] bond0: Releasing backup interface bond_slave_1 [ 1374.483834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1374.495033] bond0: Releasing backup interface bond_slave_1 [ 1374.544653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1374.554367] bond0: Error: Device is in use and cannot be enslaved [ 1374.565288] devpts: called with bogus options [ 1374.732909] bond0: Releasing backup interface bond_slave_1 [ 1374.791770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1375.091747] devpts: called with bogus options [ 1375.252120] oom_reaper: reaped process 32713 (syz-executor.1), now anon-rss:0kB, file-rss:84kB, shmem-rss:0kB [ 1376.024486] devpts: called with bogus options 02:25:38 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/\xf6\x00\x00\x00f\xf4\xac\xb4S', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0xf2d6ee0b2edba515, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1377.670131] net_ratelimit: 12 callbacks suppressed [ 1377.670137] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.682981] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.750233] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.758075] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.910138] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.917436] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.400160] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.407975] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.870142] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.876826] protocol 88fb is buggy, dev hsr_slave_1 02:25:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB="2cc395ea5d956106c6fd8a88b2e30046cb", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendfile(r0, r1, 0x0, 0x639) 02:25:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:43 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xf, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1383.030127] net_ratelimit: 18 callbacks suppressed [ 1383.030133] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.041929] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.867154] devpts: called with bogus options [ 1383.910141] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.917892] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.959079] devpts: called with bogus options [ 1383.990172] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.998104] protocol 88fb is buggy, dev hsr_slave_1 [ 1384.160405] protocol 88fb is buggy, dev hsr_slave_0 [ 1384.167316] protocol 88fb is buggy, dev hsr_slave_1 [ 1384.225387] audit: type=1800 audit(1572229545.421:3154): pid=32767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18799 res=0 [ 1384.341540] bond0: Releasing backup interface bond_slave_1 [ 1384.434171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1384.445853] bond0: Releasing backup interface bond_slave_1 [ 1384.579613] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1384.610625] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1384.625675] CPU: 0 PID: 6980 Comm: syz-fuzzer Not tainted 4.14.150 #0 [ 1384.632296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.641740] Call Trace: [ 1384.644317] dump_stack+0x138/0x197 [ 1384.647930] dump_header+0x177/0x6cd [ 1384.651623] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1384.656709] ? ___ratelimit+0x55/0x537 [ 1384.660577] oom_kill_process.cold+0x10/0xadd [ 1384.665049] ? rcu_read_unlock_special+0x895/0xd40 [ 1384.669967] ? lock_downgrade+0x740/0x740 [ 1384.674099] out_of_memory+0x2ee/0x1180 [ 1384.678066] ? lock_acquire+0x16f/0x430 [ 1384.682031] ? oom_killer_disable+0x1d0/0x1d0 [ 1384.686505] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1384.691414] __alloc_pages_slowpath+0x2251/0x2930 [ 1384.696239] ? __alloc_pages_nodemask+0x639/0x7a0 [ 1384.701065] ? warn_alloc+0xf0/0xf0 [ 1384.704678] ? __might_sleep+0x93/0xb0 [ 1384.708544] __alloc_pages_nodemask+0x62c/0x7a0 [ 1384.713192] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1384.718185] ? lock_downgrade+0x740/0x740 [ 1384.722324] ? find_get_entry+0x23c/0x520 [ 1384.726452] alloc_pages_current+0xec/0x1e0 [ 1384.730752] __page_cache_alloc+0x248/0x3e0 [ 1384.735051] filemap_fault+0xcc9/0x19a0 [ 1384.739008] ? switch_mm_irqs_off+0x5e1/0xec0 [ 1384.743487] ? __lock_page_or_retry+0x8d0/0x8d0 [ 1384.748135] ? lock_acquire+0x16f/0x430 [ 1384.752092] ? ext4_filemap_fault+0x7b/0xb0 [ 1384.756399] ext4_filemap_fault+0x83/0xb0 [ 1384.760537] __do_fault+0x104/0x390 [ 1384.764145] __handle_mm_fault+0x2460/0x3470 [ 1384.768534] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1384.773291] ? find_held_lock+0x35/0x130 [ 1384.777341] ? handle_mm_fault+0x1b6/0x7c0 [ 1384.781565] handle_mm_fault+0x293/0x7c0 [ 1384.785613] __do_page_fault+0x4c1/0xb80 [ 1384.789661] ? pci_mmcfg_check_reserved+0x150/0x150 [ 1384.794671] ? vmalloc_fault+0xe30/0xe30 [ 1384.798721] ? page_fault+0x2f/0x50 [ 1384.802349] do_page_fault+0x71/0x511 [ 1384.806129] ? page_fault+0x2f/0x50 [ 1384.809736] page_fault+0x45/0x50 [ 1384.813169] RIP: 0033:0x43c3e0 [ 1384.816354] RSP: 002b:000000c434104530 EFLAGS: 00010206 [ 1384.821709] RAX: 0000000000000000 RBX: 000000000042c72a RCX: 000000c434104000 [ 1384.828956] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000c4246c2630 [ 1384.836204] RBP: 000000c4341046f8 R08: 000000c420085708 R09: 0000000000000000 [ 1384.843467] R10: 000000c42e019ba0 R11: 000000c445bd1038 R12: 000000c42e019b98 [ 1384.850715] R13: 0000000000000011 R14: 0000000000000013 R15: 0000000000000100 [ 1384.860131] protocol 88fb is buggy, dev hsr_slave_0 [ 1384.867774] protocol 88fb is buggy, dev hsr_slave_1 [ 1384.879739] Mem-Info: [ 1384.882414] active_anon:1175585 inactive_anon:462 isolated_anon:0 [ 1384.882414] active_file:274 inactive_file:180 isolated_file:32 [ 1384.882414] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1384.882414] slab_reclaimable:23469 slab_unreclaimable:176942 [ 1384.882414] mapped:52659 shmem:517 pagetables:86748 bounce:0 [ 1384.882414] free:22021 free_pcp:109 free_cma:0 [ 1384.917935] devpts: called with bogus options [ 1384.924340] Node 0 active_anon:1656980kB inactive_anon:1828kB active_file:172kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209180kB dirty:8kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 739328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1384.952894] Node 1 active_anon:3045360kB inactive_anon:20kB active_file:924kB inactive_file:708kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1356kB dirty:28kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1384.984805] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.016140] lowmem_reserve[]: 0 2580 2580 2580 [ 1385.021106] Node 0 DMA32 free:27824kB min:36468kB low:45584kB high:54700kB active_anon:1654328kB inactive_anon:1828kB active_file:172kB inactive_file:112kB unevictable:0kB writepending:8kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13344kB pagetables:84348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.066526] lowmem_reserve[]: 0 0 0 0 [ 1385.075608] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.101948] lowmem_reserve[]: 0 0 0 0 [ 1385.108692] Node 1 Normal free:50684kB min:53420kB low:66772kB high:80124kB active_anon:3045084kB inactive_anon:20kB active_file:664kB inactive_file:900kB unevictable:0kB writepending:28kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:99008kB pagetables:262456kB bounce:0kB free_pcp:484kB local_pcp:24kB free_cma:0kB [ 1385.143464] lowmem_reserve[]: 0 0 0 0 [ 1385.147528] Node 0 DMA: 3*4kB (UM) 37*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10468kB [ 1385.164130] Node 0 DMA32: 32*4kB (UME) 989*8kB (UME) 880*16kB (UME) 182*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27944kB [ 1385.178462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1385.193499] Node 1 Normal: 692*4kB (UMEH) 916*8kB (UMEH) 15*16kB (UMEH) 454*32kB (UMEH) 275*64kB (UMEH) 62*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51424kB [ 1385.214366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.227095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1385.240454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.249808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1385.258951] 706 total pagecache pages [ 1385.263879] 0 pages in swap cache [ 1385.267667] Swap cache stats: add 0, delete 0, find 0/0 [ 1385.274229] Free swap = 0kB [ 1385.278744] Total swap = 0kB [ 1385.289810] 1965979 pages RAM [ 1385.296401] 0 pages HighMem/MovableOnly [ 1385.309637] 333229 pages reserved [ 1385.331186] 0 pages cma reserved [ 1385.339585] Out of memory: Kill process 25228 (syz-executor.2) score 1007 or sacrifice child [ 1385.369103] Killed process 25228 (syz-executor.2) total-vm:73512kB, anon-rss:16608kB, file-rss:34816kB, shmem-rss:0kB [ 1385.487606] kworker/1:4 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1385.507086] kworker/1:4 cpuset=/ mems_allowed=0-1 [ 1385.512730] CPU: 1 PID: 25035 Comm: kworker/1:4 Not tainted 4.14.150 #0 [ 1385.519523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.528886] Workqueue: events linkwatch_event [ 1385.533395] Call Trace: [ 1385.535992] dump_stack+0x138/0x197 [ 1385.539624] dump_header+0x177/0x6cd [ 1385.543342] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1385.548448] ? ___ratelimit+0x55/0x537 [ 1385.552339] oom_kill_process.cold+0x10/0xadd [ 1385.557012] ? rcu_read_unlock_special+0x895/0xd40 [ 1385.561959] ? lock_downgrade+0x740/0x740 [ 1385.566121] out_of_memory+0x2ee/0x1180 [ 1385.570095] ? lock_acquire+0x16f/0x430 [ 1385.574072] ? oom_killer_disable+0x1d0/0x1d0 [ 1385.578560] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1385.583488] __alloc_pages_slowpath+0x2251/0x2930 [ 1385.588353] ? warn_alloc+0xf0/0xf0 [ 1385.592021] ? __might_sleep+0x93/0xb0 [ 1385.595911] __alloc_pages_nodemask+0x62c/0x7a0 [ 1385.600592] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1385.605620] ? cache_grow_begin+0x335/0x400 [ 1385.609950] cache_grow_begin+0x80/0x400 [ 1385.614014] ? __cpuset_node_allowed+0xff/0x450 [ 1385.618699] fallback_alloc+0x1fd/0x2c0 [ 1385.622681] ____cache_alloc_node+0x1be/0x1d0 [ 1385.627181] kmem_cache_alloc_node_trace+0xec/0x770 [ 1385.632205] __kmalloc_node_track_caller+0x3d/0x80 [ 1385.637131] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1385.641786] __alloc_skb+0xcf/0x500 [ 1385.645400] ? skb_scrub_packet+0x4b0/0x4b0 [ 1385.649814] ? if_nlmsg_size+0x38f/0x810 [ 1385.653884] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1385.658465] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1385.663222] rtmsg_ifinfo+0x6f/0x90 [ 1385.666851] netdev_state_change+0xd3/0xe0 [ 1385.671086] ? dev_valid_name+0x1b0/0x1b0 [ 1385.675303] linkwatch_do_dev+0x8d/0xf0 [ 1385.679282] __linkwatch_run_queue+0x271/0x4b0 [ 1385.683873] ? linkwatch_schedule_work+0x130/0x130 [ 1385.688813] linkwatch_event+0x40/0x60 [ 1385.692709] process_one_work+0x863/0x1600 [ 1385.696955] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1385.701638] worker_thread+0x5d9/0x1050 [ 1385.705633] kthread+0x319/0x430 [ 1385.709004] ? process_one_work+0x1600/0x1600 [ 1385.713500] ? kthread_create_on_node+0xd0/0xd0 [ 1385.718174] ret_from_fork+0x24/0x30 [ 1385.750108] Mem-Info: [ 1385.752581] active_anon:1171468 inactive_anon:462 isolated_anon:0 [ 1385.752581] active_file:641 inactive_file:1164 isolated_file:4 [ 1385.752581] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1385.752581] slab_reclaimable:23497 slab_unreclaimable:176801 [ 1385.752581] mapped:53497 shmem:517 pagetables:86709 bounce:0 [ 1385.752581] free:24992 free_pcp:266 free_cma:0 [ 1385.900105] Node 0 active_anon:1640484kB inactive_anon:1828kB active_file:1952kB inactive_file:2748kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:212788kB dirty:28kB writeback:0kB shmem:2036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 724992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1385.971572] Node 1 active_anon:3045388kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1386.016598] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.043702] lowmem_reserve[]: 0 2580 2580 2580 [ 1386.048514] Node 0 DMA32 free:40228kB min:36468kB low:45584kB high:54700kB active_anon:1637832kB inactive_anon:1828kB active_file:1408kB inactive_file:1880kB unevictable:0kB writepending:28kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:84236kB bounce:0kB free_pcp:1072kB local_pcp:740kB free_cma:0kB [ 1386.112786] lowmem_reserve[]: 0 0 0 0 [ 1386.116662] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.142500] lowmem_reserve[]: 0 0 0 0 [ 1386.146333] Node 1 Normal free:53132kB min:53420kB low:66772kB high:80124kB active_anon:3045388kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:98944kB pagetables:262412kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 1386.180080] lowmem_reserve[]: 0 0 0 0 [ 1386.183956] Node 0 DMA: 3*4kB (UM) 37*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10468kB [ 1386.204139] Node 0 DMA32: 82*4kB (UME) 1113*8kB (UM) 925*16kB (UME) 200*32kB (UME) 3*64kB (M) 2*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 2*2048kB (M) 1*4096kB (E) = 39840kB [ 1386.270079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.280911] Node 1 Normal: 828*4kB (UMEH) 1061*8kB (UMEH) 17*16kB (UMEH) 454*32kB (UMEH) 275*64kB (UMEH) 62*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53160kB [ 1386.320085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.328992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.348398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.357386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.384026] 681 total pagecache pages [ 1386.387893] 0 pages in swap cache [ 1386.391888] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.397260] Free swap = 0kB [ 1386.404047] Total swap = 0kB [ 1386.407777] 1965979 pages RAM [ 1386.411269] 0 pages HighMem/MovableOnly [ 1386.415246] 333229 pages reserved [ 1386.418690] 0 pages cma reserved [ 1386.422577] Out of memory: Kill process 8962 (syz-executor.0) score 1007 or sacrifice child [ 1386.432031] Killed process 8962 (syz-executor.0) total-vm:73380kB, anon-rss:16600kB, file-rss:34816kB, shmem-rss:0kB [ 1386.471285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1386.533950] oom_reaper: reaped process 8962 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1386.597321] devpts: called with bogus options [ 1388.070197] net_ratelimit: 12 callbacks suppressed [ 1388.070204] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.083751] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.122267] devpts: called with bogus options [ 1388.150176] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.157864] protocol 88fb is buggy, dev hsr_slave_1 02:25:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000a000)=[{{&(0x7f0000000380)=@alg, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/38}, {&(0x7f0000000400)=""/78}, {&(0x7f0000000480)=""/165}, {&(0x7f0000000540)=""/108}], 0x0, &(0x7f00000005c0)=""/229}, 0x8}, {{&(0x7f00000006c0)=@nfc_llcp, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/237}, {&(0x7f00000002c0)=""/48}], 0x0, &(0x7f0000000880)=""/253}, 0x4}, {{&(0x7f0000000980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a00)=""/4096}, {&(0x7f0000001a00)=""/121}, {&(0x7f0000001a80)=""/189}, {&(0x7f0000001b40)=""/5}, {&(0x7f0000001b80)=""/31}, {&(0x7f0000001bc0)=""/179}, {&(0x7f0000001c80)=""/82}], 0x0, &(0x7f0000001d80)=""/124}, 0x1f}, {{&(0x7f0000001e00)=@ethernet={0x0, @broadcast}, 0x0, &(0x7f0000003340)=[{&(0x7f0000001e80)=""/179}, {&(0x7f0000001f40)=""/118}, {&(0x7f0000001fc0)=""/87}, {&(0x7f0000002040)=""/4096}, {&(0x7f0000003040)=""/25}, {&(0x7f0000003080)=""/26}, {&(0x7f00000030c0)=""/148}, {&(0x7f0000003180)=""/158}, {&(0x7f0000003240)=""/242}], 0x0, &(0x7f0000003400)=""/16}, 0xd0}, {{&(0x7f0000003440)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000004a00)=[{&(0x7f00000034c0)=""/200}, {&(0x7f00000035c0)=""/40}, {&(0x7f0000003600)=""/118}, {&(0x7f0000003680)=""/70}, {&(0x7f0000003700)=""/201}, {&(0x7f0000003800)=""/250}, {&(0x7f000000a280)=""/251}, {&(0x7f0000003a00)=""/4096}], 0x0, &(0x7f0000004a80)=""/165}, 0x500c}, {{&(0x7f0000004b40)=@alg, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)}, {&(0x7f0000004c00)=""/59}, {&(0x7f0000004c40)=""/176}, {&(0x7f0000004d00)=""/177}, {&(0x7f0000004dc0)=""/252}], 0x0, &(0x7f0000004f40)=""/42}, 0x10001}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0, &(0x7f00000064c0)=[{&(0x7f0000005000)=""/174}, {&(0x7f00000050c0)=""/4096}, {&(0x7f00000060c0)=""/244}, {&(0x7f00000061c0)=""/129}, {&(0x7f0000006280)=""/159}, {&(0x7f0000006340)=""/98}, {&(0x7f00000063c0)=""/75}, {&(0x7f0000006440)=""/67}], 0x0, &(0x7f0000006540)=""/36}, 0x1a6a}, {{&(0x7f0000006580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000008880)=[{&(0x7f0000006600)=""/41}, {&(0x7f0000006640)=""/162}, {&(0x7f0000006700)=""/19}, {&(0x7f0000006740)=""/4096}, {&(0x7f0000007740)=""/90}, {&(0x7f00000077c0)=""/188}, {&(0x7f0000007880)=""/4096}], 0x0, &(0x7f0000008900)=""/69}, 0x9}, {{&(0x7f0000008980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000008c00)=[{&(0x7f0000008a00)=""/242, 0xb7}, {&(0x7f0000008b00)=""/234}], 0x0, &(0x7f0000008c40)=""/255}, 0x100}, {{&(0x7f0000008d40)=@caif=@dgm, 0x0, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/204}, {&(0x7f0000008ec0)=""/196}], 0x0, &(0x7f0000009000)=""/4096}, 0x400}], 0x3ffffffffffff5b, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b9663b", @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=r7, @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'nlmon0\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000480)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x89b1, &(0x7f0000000240)={'ip_vti0\x00', @ifru_map={0x34d, 0x80000001, 0x20, 0xb0, 0x7, 0x80}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="b35dd45ea80646f696472a1ee74d5d8c3c1edfd694b57196dd0d7d0890a9fde38ad9103a7d3815096e604517954277f266544f5c1a9c6ca09853739c97400367e4c6c2415adfa9a0c7f43faf", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) recvmmsg(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/247, 0xf7}], 0x8, &(0x7f00000009c0)=""/218, 0xda}}, {{&(0x7f0000000ac0)=@generic, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000b40)=""/178, 0xb2}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/144, 0x90}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/254, 0xfe}], 0x6, &(0x7f0000000000)=""/31, 0x1f}, 0x101}, {{&(0x7f0000002ec0)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000002f40)=""/178, 0xb2}], 0x1, &(0x7f0000003000)=""/106, 0x6a}, 0x5}, {{&(0x7f0000003080)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f0000003100)=""/172, 0xac}], 0x1}, 0x4}, {{&(0x7f00000031c0)=@ax25={{}, [@remote, @remote, @null, @rose, @rose, @bcast, @netrom]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003240)=""/11, 0xb}, {&(0x7f0000003280)=""/105, 0x69}], 0x2}, 0xff}, {{&(0x7f0000003340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003980)=[{&(0x7f00000033c0)=""/102, 0x66}, {&(0x7f0000003440)=""/86, 0x16e}, {&(0x7f00000034c0)=""/125, 0x7d}, {&(0x7f0000003540)=""/248, 0xf8}, {&(0x7f0000003640)=""/224, 0xe0}, {&(0x7f0000003740)=""/175, 0xaf}, {&(0x7f0000003800)=""/118, 0x76}, {&(0x7f0000003880)=""/225, 0xe1}], 0x8}, 0x1}], 0x4000013, 0x2123, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'hsr0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="68bf2c883e736747d199d0eaec33f4c21ab8f0e3f1d4c625cdb7da7aa795d2b7ae8ab689b39514c8c78f7d90eef4035c303f504e18c5cd37686fc4e58e36330004664b2f30c977f9c663982a0ba34bbb84c87fb626a64e6124bcdbac1a562c5fbfda00"/121, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1388.310128] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.317822] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.329470] devpts: called with bogus options [ 1388.332137] devpts: called with bogus options [ 1388.368923] devpts: called with bogus options [ 1388.383964] devpts: called with bogus options [ 1388.401445] devpts: called with bogus options 02:25:49 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) ftruncate(r2, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1388.415387] devpts: called with bogus options [ 1388.513536] audit: type=1800 audit(1572229549.701:3155): pid=349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19227 res=0 [ 1388.521544] devpts: called with bogus options [ 1388.537805] bond0: Releasing backup interface bond_slave_1 [ 1388.760494] bond0: Releasing backup interface bond_slave_1 [ 1388.806030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1388.814978] bond0: Releasing backup interface bond_slave_1 [ 1388.887139] audit: type=1800 audit(1572229549.831:3156): pid=359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19293 res=0 [ 1389.030159] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.038249] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.157244] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1389.182472] devpts: called with bogus options [ 1389.263861] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1389.270157] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.276765] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.293069] CPU: 0 PID: 6832 Comm: rs:main Q:Reg Not tainted 4.14.150 #0 [ 1389.300013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.309414] Call Trace: [ 1389.312022] dump_stack+0x138/0x197 [ 1389.315654] dump_header+0x177/0x6cd [ 1389.319735] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1389.324840] ? ___ratelimit+0x55/0x537 [ 1389.328733] oom_kill_process.cold+0x10/0xadd [ 1389.333232] ? rcu_read_unlock_special+0x639/0xd40 [ 1389.338166] ? lock_downgrade+0x740/0x740 [ 1389.342315] out_of_memory+0x2ee/0x1180 [ 1389.346288] ? lock_acquire+0x16f/0x430 [ 1389.350270] ? oom_killer_disable+0x1d0/0x1d0 [ 1389.354761] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1389.359693] __alloc_pages_slowpath+0x2251/0x2930 [ 1389.364545] ? warn_alloc+0xf0/0xf0 [ 1389.368188] ? __might_sleep+0x93/0xb0 [ 1389.372075] __alloc_pages_nodemask+0x62c/0x7a0 [ 1389.376751] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1389.381776] ? lock_downgrade+0x740/0x740 [ 1389.386030] alloc_pages_current+0xec/0x1e0 [ 1389.390376] __page_cache_alloc+0x248/0x3e0 [ 1389.394710] pagecache_get_page+0x17c/0x750 [ 1389.399040] grab_cache_page_write_begin+0x74/0xa0 [ 1389.403975] ext4_da_write_begin+0x24c/0xc30 [ 1389.408394] ? ext4_write_begin+0x1030/0x1030 [ 1389.412892] ? balance_dirty_pages_ratelimited+0xd2/0x17f0 [ 1389.418531] generic_perform_write+0x1f8/0x480 [ 1389.423127] ? page_endio+0x530/0x530 [ 1389.426952] ? current_time+0xb0/0xb0 [ 1389.430761] ? ext4_file_write_iter+0x1f4/0xe90 [ 1389.435446] __generic_file_write_iter+0x239/0x5b0 [ 1389.440392] ext4_file_write_iter+0x2ac/0xe90 [ 1389.444904] ? ext4_file_mmap+0x2c0/0x2c0 [ 1389.449080] ? trace_hardirqs_on+0x10/0x10 [ 1389.453319] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 1389.458079] ? save_trace+0x290/0x290 [ 1389.461885] ? iov_iter_init+0xaf/0x1d0 [ 1389.465866] __vfs_write+0x4a7/0x6b0 [ 1389.469587] ? kernel_read+0x120/0x120 [ 1389.473486] ? check_preemption_disabled+0x3c/0x250 [ 1389.478507] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1389.483974] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1389.488750] ? __sb_start_write+0x153/0x2f0 [ 1389.493083] vfs_write+0x198/0x500 [ 1389.496629] SyS_write+0xfd/0x230 [ 1389.500086] ? SyS_read+0x230/0x230 [ 1389.503708] ? do_syscall_64+0x53/0x640 [ 1389.507676] ? SyS_read+0x230/0x230 [ 1389.511906] do_syscall_64+0x1e8/0x640 [ 1389.515786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1389.520631] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1389.525817] RIP: 0033:0x7f4f8f6cd19d [ 1389.529521] RSP: 002b:00007f4f8dc6df90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1389.537222] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007f4f8f6cd19d [ 1389.544484] RDX: 0000000000000400 RSI: 000000000182ca90 RDI: 0000000000000005 [ 1389.551753] RBP: 000000000182ca90 R08: 0000000001850c90 R09: 00007f4f8f04b7d0 [ 1389.559014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1389.566292] R13: 00007f4f8dc6e410 R14: 0000000001850c90 R15: 000000000182c890 [ 1389.621286] Mem-Info: [ 1389.634263] active_anon:1169061 inactive_anon:464 isolated_anon:0 [ 1389.634263] active_file:1062 inactive_file:1059 isolated_file:64 [ 1389.634263] unevictable:0 dirty:93 writeback:12 unstable:0 [ 1389.634263] slab_reclaimable:23628 slab_unreclaimable:176690 [ 1389.634263] mapped:54112 shmem:517 pagetables:86857 bounce:0 [ 1389.634263] free:26430 free_pcp:616 free_cma:0 [ 1389.741610] Node 0 active_anon:1637400kB inactive_anon:1844kB active_file:1768kB inactive_file:1644kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:211936kB dirty:240kB writeback:36kB shmem:2052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1389.772417] Node 1 active_anon:3034744kB inactive_anon:12kB active_file:2780kB inactive_file:2592kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:4712kB dirty:132kB writeback:12kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1389.846994] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:2632kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:25:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1389.905302] lowmem_reserve[]: 0 2580 2580 2580 [ 1389.915824] Node 0 DMA32 free:39016kB min:36468kB low:45584kB high:54700kB active_anon:1634848kB inactive_anon:1844kB active_file:2268kB inactive_file:3344kB unevictable:0kB writepending:276kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13376kB pagetables:84716kB bounce:0kB free_pcp:748kB local_pcp:400kB free_cma:0kB [ 1389.947198] devpts: called with bogus options [ 1390.093752] lowmem_reserve[]: 0 0 0 0 [ 1390.097686] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.126882] lowmem_reserve[]: 0 0 0 0 02:25:51 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x10001, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89c7, &(0x7f0000000240)={'ip6gre0\x00', @ifru_names='teql0\x00'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x3, 0x2, 0x3, 0x1}, 0x10) [ 1390.131734] Node 1 Normal free:57028kB min:53420kB low:66772kB high:80124kB active_anon:3035188kB inactive_anon:12kB active_file:3092kB inactive_file:2524kB unevictable:0kB writepending:108kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:99264kB pagetables:262524kB bounce:0kB free_pcp:1348kB local_pcp:664kB free_cma:0kB [ 1390.166009] lowmem_reserve[]: 0 0 0 0 [ 1390.176856] Node 0 DMA: 6*4kB (UM) 38*8kB (UMH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10488kB [ 1390.196617] Node 0 DMA32: 1*4kB (M) 1125*8kB (UM) 981*16kB (UME) 208*32kB (UME) 9*64kB (M) 3*128kB (ME) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 1*2048kB (H) 0*4096kB = 36412kB [ 1390.263561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1390.316394] Node 1 Normal: 558*4kB (MEH) 1284*8kB (UMEH) 149*16kB (UMEH) 401*32kB (UMEH) 264*64kB (UMEH) 89*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57032kB [ 1390.326248] devpts: called with bogus options [ 1390.344617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.389030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.419361] devpts: called with bogus options [ 1390.445840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.582194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.626311] audit: type=1800 audit(1572229551.821:3157): pid=388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19014 res=0 [ 1390.644190] 3794 total pagecache pages 02:25:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'hsr0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="68bf2c883e736747d199d0eaec33f4c21ab8f0e3f1d4c625cdb7da7aa795d2b7ae8ab689b39514c8c78f7d90eef4035c303f504e18c5cd37686fc4e58e36330004664b2f30c977f9c663982a0ba34bbb84c87fb626a64e6124bcdbac1a562c5fbfda00"/121, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1390.725762] 0 pages in swap cache [ 1390.778968] Swap cache stats: add 0, delete 0, find 0/0 [ 1390.797500] Free swap = 0kB [ 1390.808956] Total swap = 0kB [ 1390.818759] 1965979 pages RAM [ 1390.830335] 0 pages HighMem/MovableOnly [ 1390.846795] 333229 pages reserved [ 1390.863059] 0 pages cma reserved [ 1390.884272] Out of memory: Kill process 328 (syz-executor.5) score 1007 or sacrifice child [ 1390.932974] Killed process 365 (syz-executor.5) total-vm:73248kB, anon-rss:16576kB, file-rss:35700kB, shmem-rss:0kB [ 1391.169319] oom_reaper: reaped process 365 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1391.340653] devpts: called with bogus options 02:25:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'hsr0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="68bf2c883e736747d199d0eaec33f4c21ab8f0e3f1d4c625cdb7da7aa795d2b7ae8ab689b39514c8c78f7d90eef4035c303f504e18c5cd37686fc4e58e36330004664b2f30c977f9c663982a0ba34bbb84c87fb626a64e6124bcdbac1a562c5fbfda00"/121, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:52 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(r0, 0xf, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x74f0704141ab1028, 0x0, 0x7f, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64=r7, @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000440)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1391.619365] devpts: called with bogus options [ 1391.695821] devpts: called with bogus options [ 1391.840714] audit: type=1800 audit(1572229553.041:3158): pid=415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19102 res=0 [ 1393.051270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.076510] bond0: Releasing backup interface bond_slave_1 [ 1393.144512] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.160804] bond0: Error: Device is in use and cannot be enslaved [ 1393.174487] bond0: Releasing backup interface bond_slave_1 [ 1393.190164] net_ratelimit: 16 callbacks suppressed [ 1393.190171] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.202980] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.220219] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.257866] bond0: Releasing backup interface bond_slave_1 [ 1393.259382] devpts: called with bogus options 02:25:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000140)='syscall\x00') preadv(r9, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1393.309034] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.320351] bond0: Releasing backup interface bond_slave_1 02:25:54 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x400, 0x1, 0x9d, 0x101, 0x1635}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) [ 1393.362708] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.420496] bond0: Releasing backup interface bond_slave_1 [ 1393.430142] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.436707] protocol 88fb is buggy, dev hsr_slave_1 02:25:54 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() prlimit64(0x0, 0x6, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r2, 0x28007d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) r7 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r6, @ANYRESHEX=0x0], @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1393.487399] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:25:54 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x400, 0x1, 0x9d, 0x101, 0x1635}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) [ 1393.552652] devpts: called with bogus options 02:25:54 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1393.647468] devpts: called with bogus options [ 1393.709472] devpts: called with bogus options [ 1393.773874] devpts: called with bogus options 02:25:55 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x400, 0x1, 0x9d, 0x101, 0x1635}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) [ 1393.859378] audit: type=1800 audit(1572229555.051:3159): pid=453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19014 res=0 [ 1393.894103] devpts: called with bogus options [ 1393.933297] bond0: Releasing backup interface bond_slave_1 [ 1393.973599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1393.987810] devpts: called with bogus options [ 1393.989456] bond0: Error: Device is in use and cannot be enslaved [ 1394.006632] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:25:55 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'syz_tun\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:25:55 executing program 4: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16], @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES16]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1394.024219] devpts: called with bogus options [ 1394.030007] devpts: called with bogus options [ 1394.036035] devpts: called with bogus options [ 1394.089417] bond0: Releasing backup interface bond_slave_1 [ 1394.297239] audit: type=1800 audit(1572229555.491:3160): pid=481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bond0" dev="sda1" ino=19379 res=0 [ 1394.330131] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.338139] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.390223] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.398296] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.455448] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1394.498560] bond0: Releasing backup interface bond_slave_1 [ 1394.550118] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.557106] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.647661] bond0: Releasing backup interface bond_slave_1 [ 1394.650693] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1394.702439] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1394.710250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1394.721871] CPU: 1 PID: 6832 Comm: rs:main Q:Reg Not tainted 4.14.150 #0 [ 1394.728730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.738083] Call Trace: [ 1394.740663] dump_stack+0x138/0x197 [ 1394.744284] dump_header+0x177/0x6cd [ 1394.747982] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1394.753072] ? ___ratelimit+0x55/0x537 [ 1394.756942] oom_kill_process.cold+0x10/0xadd [ 1394.761504] ? rcu_read_unlock_special+0x660/0xd40 [ 1394.766418] ? lock_downgrade+0x740/0x740 [ 1394.770560] out_of_memory+0x2ee/0x1180 [ 1394.774523] ? lock_acquire+0x16f/0x430 [ 1394.778478] ? oom_killer_disable+0x1d0/0x1d0 [ 1394.782962] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1394.787877] __alloc_pages_slowpath+0x2251/0x2930 [ 1394.792706] ? warn_alloc+0xf0/0xf0 [ 1394.796318] ? __might_sleep+0x93/0xb0 [ 1394.800187] __alloc_pages_nodemask+0x62c/0x7a0 [ 1394.804839] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1394.809852] ? lock_downgrade+0x740/0x740 [ 1394.813984] alloc_pages_current+0xec/0x1e0 [ 1394.818299] __page_cache_alloc+0x248/0x3e0 [ 1394.822601] pagecache_get_page+0x17c/0x750 [ 1394.826904] grab_cache_page_write_begin+0x74/0xa0 [ 1394.831812] ext4_da_write_begin+0x24c/0xc30 [ 1394.836202] ? ext4_write_begin+0x1030/0x1030 [ 1394.840676] ? balance_dirty_pages_ratelimited+0xc4/0x17f0 [ 1394.846284] generic_perform_write+0x1f8/0x480 [ 1394.850847] ? page_endio+0x530/0x530 [ 1394.854627] ? current_time+0xb0/0xb0 [ 1394.858408] ? ext4_file_write_iter+0x1f4/0xe90 [ 1394.863061] __generic_file_write_iter+0x239/0x5b0 [ 1394.867972] ext4_file_write_iter+0x2ac/0xe90 [ 1394.872451] ? ext4_file_mmap+0x2c0/0x2c0 [ 1394.876580] ? trace_hardirqs_on+0x10/0x10 [ 1394.880797] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 1394.885533] ? save_trace+0x290/0x290 [ 1394.889316] ? iov_iter_init+0xaf/0x1d0 [ 1394.893272] __vfs_write+0x4a7/0x6b0 [ 1394.896966] ? kernel_read+0x120/0x120 [ 1394.900836] ? check_preemption_disabled+0x3c/0x250 [ 1394.905831] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1394.911278] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 1394.916012] ? __sb_start_write+0x153/0x2f0 [ 1394.920325] vfs_write+0x198/0x500 [ 1394.923855] SyS_write+0xfd/0x230 [ 1394.927288] ? SyS_read+0x230/0x230 [ 1394.930919] ? do_syscall_64+0x53/0x640 [ 1394.934878] ? SyS_read+0x230/0x230 [ 1394.938484] do_syscall_64+0x1e8/0x640 [ 1394.942349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1394.947173] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1394.952343] RIP: 0033:0x7f4f8f6cd19d [ 1394.956047] RSP: 002b:00007f4f8dc6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1394.963739] RAX: ffffffffffffffda RBX: 0000000000000110 RCX: 00007f4f8f6cd19d [ 1394.970987] RDX: 0000000000000110 RSI: 000000000182e340 RDI: 0000000000000006 [ 1394.978239] RBP: 000000000182e340 R08: 000000000182e440 R09: 656c6c616b7a7973 [ 1394.985491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1394.993009] R13: 00007f4f8dc6e480 R14: 0000000000000002 R15: 000000000182e140 [ 1395.710377] Mem-Info: [ 1395.713196] active_anon:1174457 inactive_anon:461 isolated_anon:0 [ 1395.713196] active_file:523 inactive_file:562 isolated_file:45 [ 1395.713196] unevictable:0 dirty:89 writeback:0 unstable:0 [ 1395.713196] slab_reclaimable:23705 slab_unreclaimable:176920 [ 1395.713196] mapped:53084 shmem:517 pagetables:87062 bounce:0 [ 1395.713196] free:22080 free_pcp:0 free_cma:0 [ 1395.767561] Node 0 active_anon:1648420kB inactive_anon:1840kB active_file:1220kB inactive_file:1268kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:210828kB dirty:288kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1395.934492] Node 1 active_anon:3049408kB inactive_anon:4kB active_file:440kB inactive_file:576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:908kB dirty:68kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1396.121155] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.202070] lowmem_reserve[]: 0 2580 2580 2580 [ 1396.213271] Node 0 DMA32 free:32436kB min:36468kB low:45584kB high:54700kB active_anon:1645768kB inactive_anon:1840kB active_file:824kB inactive_file:808kB unevictable:0kB writepending:288kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13312kB pagetables:85608kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1396.297997] lowmem_reserve[]: 0 0 0 0 [ 1396.309085] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.352202] lowmem_reserve[]: 0 0 0 0 [ 1396.356978] Node 1 Normal free:47148kB min:53420kB low:66772kB high:80124kB active_anon:3049408kB inactive_anon:4kB active_file:416kB inactive_file:404kB unevictable:0kB writepending:68kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:99552kB pagetables:262452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.426234] lowmem_reserve[]: 0 0 0 0 [ 1396.436245] Node 0 DMA: 3*4kB (UM) 37*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10468kB [ 1396.490106] Node 0 DMA32: 401*4kB (UME) 1172*8kB (UME) 887*16kB (UME) 184*32kB (UME) 2*64kB (ME) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 32852kB [ 1396.540111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1396.560082] Node 1 Normal: 1010*4kB (UMEH) 472*8kB (UMEH) 254*16kB (UME) 366*32kB (UMEH) 189*64kB (UMEH) 85*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47592kB [ 1396.592861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1396.602000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1396.610668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1396.619523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1396.628148] 999 total pagecache pages [ 1396.637410] 0 pages in swap cache [ 1396.640942] Swap cache stats: add 0, delete 0, find 0/0 [ 1396.646316] Free swap = 0kB [ 1396.649321] Total swap = 0kB [ 1396.652388] 1965979 pages RAM [ 1396.655488] 0 pages HighMem/MovableOnly [ 1396.659450] 333229 pages reserved [ 1396.663138] 0 pages cma reserved [ 1396.666507] Out of memory: Kill process 460 (syz-executor.3) score 1007 or sacrifice child [ 1396.675038] Killed process 486 (syz-executor.3) total-vm:73380kB, anon-rss:16596kB, file-rss:35160kB, shmem-rss:0kB [ 1396.827827] oom_reaper: reaped process 486 (syz-executor.3), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1398.470182] net_ratelimit: 14 callbacks suppressed [ 1398.470188] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.483259] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.550178] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.557962] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.710148] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.717283] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.884685] bond0: Releasing backup interface bond_slave_1 [ 1398.949510] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1398.959764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1399.430141] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.437722] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.657571] devpts: called with bogus options [ 1399.673548] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.680394] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.702555] devpts: called with bogus options 02:26:01 executing program 4: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16], @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES16]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:01 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x18) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/\x00\x00\x00\x00\xbd\xa4\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x28460, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/168, 0xa8}, {&(0x7f00000006c0)=""/104, 0x68}], 0x3}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000780)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="6d3ca85bdf53e4a3e0be78c8961562a2d5becb242a6eb258383481d302a12efb135c069378d77291bd2b05dc68b06e622f2662c3ea6167383f0e7c2421aa10b92491aa468a61d114931321fc6352d1f163f2eb287d2cdef02980b3c436e21d810bdf5cc1c7405c15b568907c4258cce2640ed111c1a7e8e29e57207581bf1f5c0910887994928045728f59e7f6daa182", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:02 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5dfb2a1c01576e8ccbc20600e3", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) [ 1401.136839] devpts: called with bogus options [ 1401.198219] devpts: called with bogus options [ 1401.264380] devpts: called with bogus options [ 1401.337353] bond0: Releasing backup interface bond_slave_1 [ 1401.366957] audit: type=1800 audit(1572229562.561:3161): pid=516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19384 res=0 [ 1401.417846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1401.437284] bond0: Releasing backup interface bond_slave_1 [ 1401.498060] bond0: Releasing backup interface bond_slave_1 [ 1401.635677] audit: type=1800 audit(1572229562.601:3162): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19672 res=0 [ 1401.730912] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1401.764015] bond0: Releasing backup interface bond_slave_1 [ 1401.809633] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1401.893106] devpts: called with bogus options [ 1401.990635] devpts: called with bogus options [ 1402.082883] audit: type=1800 audit(1572229563.281:3163): pid=535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19757 res=0 02:26:03 executing program 4: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16], @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES16]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1402.123413] bond0: Releasing backup interface bond_slave_1 [ 1402.206391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1402.238694] bond0: Releasing backup interface bond_slave_1 02:26:03 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5dfb2a1c01576e8ccbc20600e3", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 02:26:03 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20002, 0x90) ftruncate(r2, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_addrs=@l2={0x1f, 0x400, {0xff, 0x8, 0x2, 0x13, 0x9, 0x6}, 0x5}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f0000000000)={'bond0\x00\x1e\x05\x00\x00\x00\x00\x00\x00\x00\xff', @ifru_names='bond_slave_1\x00\b\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1402.357945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1402.785274] devpts: called with bogus options 02:26:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="714de9eec8f1880be571e1057b0cceac72a5283bb8a0d118148c819621961a8cd6a5dbbdc123a821a7bae8d2dac81edcb80293ac6d8ddf1170056743bd574973a4380b5bc7e4905d05707908cc8e3617486427e1fa6cdc8583b7b4976fd52498d871f714acfa3a89e5d6833e653b2119a6", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1402.822595] devpts: called with bogus options [ 1402.892880] devpts: called with bogus options [ 1402.934544] devpts: called with bogus options [ 1402.952857] audit: type=1800 audit(1572229564.141:3164): pid=557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19149 res=0 02:26:04 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYPTR, @ANYRESHEX=r5]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1403.077993] bond0: Releasing backup interface bond_slave_1 [ 1403.108088] audit: type=1800 audit(1572229564.241:3165): pid=553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19631 res=0 [ 1403.157523] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1403.169282] bond0: Releasing backup interface bond_slave_1 [ 1403.216819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1403.400891] devpts: called with bogus options [ 1403.423536] devpts: called with bogus options [ 1403.590149] net_ratelimit: 16 callbacks suppressed [ 1403.590154] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.603027] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.616672] audit: type=1800 audit(1572229564.781:3166): pid=578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19925 res=0 [ 1403.618676] bond0: Error: Device is in use and cannot be enslaved [ 1403.663466] bond0: Releasing backup interface bond_slave_1 [ 1403.733066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1403.830137] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.836845] protocol 88fb is buggy, dev hsr_slave_1 02:26:05 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5dfb2a1c01576e8ccbc20600e3", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) [ 1404.194091] oom_reaper: reaped process 558 (syz-executor.3), now anon-rss:0kB, file-rss:68kB, shmem-rss:0kB [ 1404.710175] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.718138] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.790150] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.798083] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.898758] audit: type=1800 audit(1572229566.091:3167): pid=589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19943 res=0 [ 1404.950162] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.957289] protocol 88fb is buggy, dev hsr_slave_1 02:26:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1405.396753] devpts: called with bogus options [ 1405.744943] devpts: called with bogus options [ 1405.953008] bond0: Releasing backup interface bond_slave_1 [ 1405.995388] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1406.014633] bond0: Releasing backup interface bond_slave_1 [ 1406.076578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1406.106290] bond0: Releasing backup interface bond_slave_1 [ 1406.144333] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1408.091194] devpts: called with bogus options 02:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8926, &(0x7f0000000240)={'veth1\x00', @ifru_settings={0x2, 0xffff, @te1=&(0x7f0000000000)={0x8, 0x1ff, 0x8001, 0x7}}}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000, 0x0, 0x0, 0x0, 0x4}, 0x1c) 02:26:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, &(0x7f0000000400)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x89e8, &(0x7f00000001c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8948, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=r12, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 1: socket$packet(0x11, 0x0, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5dfb2a1c01576e8ccbc20600e3", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 02:26:09 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_mtu=0x5}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000040)=0x696) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x1000000, 0x1, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1408.212948] devpts: called with bogus options [ 1408.224886] devpts: called with bogus options 02:26:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffff26}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1408.270709] devpts: called with bogus options [ 1408.285427] devpts: called with bogus options [ 1408.304405] devpts: called with bogus options 02:26:09 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8926, &(0x7f0000000240)={'veth1\x00', @ifru_settings={0x2, 0xffff, @te1=&(0x7f0000000000)={0x8, 0x1ff, 0x8001, 0x7}}}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000, 0x0, 0x0, 0x0, 0x4}, 0x1c) 02:26:09 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1408.601648] devpts: called with bogus options [ 1408.607123] devpts: called with bogus options [ 1408.653534] devpts: called with bogus options [ 1408.667159] devpts: called with bogus options [ 1408.675995] devpts: called with bogus options 02:26:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x1000000, 0x1, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1408.722826] devpts: called with bogus options [ 1408.814304] audit: type=1800 audit(1572229570.011:3168): pid=668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19954 res=0 [ 1408.839405] bond0: Releasing backup interface bond_slave_1 [ 1408.870168] net_ratelimit: 14 callbacks suppressed [ 1408.870174] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.883311] protocol 88fb is buggy, dev hsr_slave_1 [ 1408.919853] devpts: called with bogus options [ 1408.930668] audit: type=1800 audit(1572229570.011:3169): pid=669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19947 res=0 [ 1408.954104] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.956835] protocol 88fb is buggy, dev hsr_slave_1 02:26:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1408.978775] bond0: Releasing backup interface bond_slave_1 [ 1409.018975] audit: type=1800 audit(1572229570.061:3170): pid=670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19957 res=0 [ 1409.064782] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1409.079719] bond0: Releasing backup interface bond_slave_1 [ 1409.110184] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.117347] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.170425] devpts: called with bogus options [ 1409.182931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1409.214327] bond0: Releasing backup interface bond_slave_1 [ 1409.284388] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1409.415554] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1409.467411] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1409.479696] CPU: 0 PID: 7699 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 1409.486649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.496110] Call Trace: [ 1409.498702] dump_stack+0x138/0x197 [ 1409.502331] ? adf_copy_key_value_data+0x198/0x510 [ 1409.507257] dump_header+0x177/0x6cd [ 1409.510968] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1409.516065] ? ___ratelimit+0x55/0x537 [ 1409.519949] oom_kill_process.cold+0x10/0xadd [ 1409.524437] ? rcu_read_unlock_special+0x639/0xd40 [ 1409.529371] ? lock_downgrade+0x740/0x740 [ 1409.533521] out_of_memory+0x2ee/0x1180 [ 1409.537493] ? lock_acquire+0x16f/0x430 [ 1409.541467] ? oom_killer_disable+0x1d0/0x1d0 [ 1409.545954] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1409.550879] __alloc_pages_slowpath+0x2251/0x2930 [ 1409.555727] ? kasan_kmalloc+0xce/0xf0 [ 1409.559625] ? warn_alloc+0xf0/0xf0 [ 1409.563251] ? __might_sleep+0x93/0xb0 [ 1409.567131] __alloc_pages_nodemask+0x62c/0x7a0 [ 1409.571803] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1409.576819] ? rcu_read_lock_sched_held+0x110/0x130 [ 1409.581833] ? kasan_unpoison_shadow+0x35/0x50 [ 1409.586417] alloc_pages_current+0xec/0x1e0 [ 1409.590742] __vmalloc_node_range+0x3e9/0x6a0 [ 1409.595235] vzalloc+0x46/0x50 [ 1409.598424] ? xt_counters_alloc+0x34/0x60 [ 1409.602652] xt_counters_alloc+0x34/0x60 [ 1409.606722] __do_replace+0x81/0x5c0 [ 1409.610437] ? compat_do_ip6t_get_ctl+0x870/0x870 [ 1409.615277] ? _copy_from_user+0x99/0x110 [ 1409.619421] do_ip6t_set_ctl+0x296/0x3f4 [ 1409.623483] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 1409.628329] ? mutex_unlock+0xd/0x10 [ 1409.632039] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1409.637317] nf_setsockopt+0x67/0xc0 [ 1409.641027] ipv6_setsockopt+0x105/0x130 [ 1409.645083] tcp_setsockopt+0x84/0xd0 [ 1409.648883] sock_common_setsockopt+0x94/0xd0 [ 1409.653376] SyS_setsockopt+0x13c/0x210 [ 1409.657346] ? SyS_recv+0x40/0x40 [ 1409.660812] ? do_syscall_64+0x53/0x640 [ 1409.664775] ? SyS_recv+0x40/0x40 [ 1409.668230] do_syscall_64+0x1e8/0x640 [ 1409.672112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1409.676953] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1409.682132] RIP: 0033:0x45ca6a [ 1409.685310] RSP: 002b:00007fff36253178 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1409.693010] RAX: ffffffffffffffda RBX: 00007fff362531a0 RCX: 000000000045ca6a [ 1409.700274] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1409.707647] RBP: 0000000000713cc0 R08: 00000000000003b8 R09: 0000000000004000 [ 1409.714911] R10: 0000000000713660 R11: 0000000000000206 R12: 0000000000000003 [ 1409.722174] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000713600 02:26:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='\bevpt\x01\x00', 0x0, &(0x7f0000000480)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x42000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="0e86c26b0c144e2222e1c3f8407e02afd5335a64dab91c0c01e216cb58af262660cb65e9b585fae2e29415129a662635d2c3b4ad54e9c7764357c595877b7fab774df0a5d56506f1c2a7da44a29b50", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="81adce6a313e0e89d99ce778f5850efd4fcaf8701f7395ecb222e3e7ab96314622770cbfc3cb6ddc07a603c7860d0f604d9cfaad4c4459eaf45268c7e4c6399317142ca8a48c6eb0d00db38e425de7d3ea053e0923ef8aef4eb33d240145d5099d2da28efd41e93f64dcfa80841163a0fe90b5ec9bd0fa1560245f1fc6810d117205e11da0cbd653e6c42934150660188e318d14cc241ffe6c9ec4bde925de3c0605ab4da6d0248fae2f1d9e8310564e2aa32ad3830e68c558af6b664447416c2dd1327c0d104fa1eb78c383f0eb638dd1c3ef87b20abd819cedf4e4e25aba317669c33c0cdb00"/246, 0xf6}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x7fff}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRES64=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT, @ANYRES64=r9, @ANYRESDEC=0x0]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r14 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_ifreq(r14, 0x8911, &(0x7f0000000240)={'vlan0\x00', @ifru_hwaddr=@local}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000500)=ANY=[@ANYRES32=r12, @ANYRESHEX=r11, @ANYPTR64, @ANYBLOB="35dec926df012b3abb50b70f998c0da4d560c4867fd295030f39c87c74a1a46d0ea9fa", @ANYRESOCT=0x0, @ANYRESHEX=r13]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1409.830123] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.837856] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.034622] Mem-Info: [ 1410.037258] active_anon:1166721 inactive_anon:461 isolated_anon:0 [ 1410.037258] active_file:1589 inactive_file:869 isolated_file:93 [ 1410.037258] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1410.037258] slab_reclaimable:23990 slab_unreclaimable:176957 [ 1410.037258] mapped:54157 shmem:517 pagetables:87473 bounce:0 [ 1410.037258] free:27052 free_pcp:453 free_cma:0 [ 1410.071316] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.073014] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.094700] Node 0 active_anon:1634996kB inactive_anon:1828kB active_file:6228kB inactive_file:3360kB unevictable:0kB isolated(anon):0kB isolated(file):440kB mapped:216512kB dirty:152kB writeback:0kB shmem:2044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1410.164790] devpts: called with bogus options [ 1410.197099] Node 1 active_anon:3031776kB inactive_anon:20kB active_file:84kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:44kB writeback:4kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1410.233721] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:26:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="81adce6a313e0e89d99ce778f5850efd4fcaf8701f7395ecb222e3e7ab96314622770cbfc3cb6ddc07a603c7860d0f604d9cfaad4c4459eaf45268c7e4c6399317142ca8a48c6eb0d00db38e425de7d3ea053e0923ef8aef4eb33d240145d5099d2da28efd41e93f64dcfa80841163a0fe90b5ec9bd0fa1560245f1fc6810d117205e11da0cbd653e6c42934150660188e318d14cc241ffe6c9ec4bde925de3c0605ab4da6d0248fae2f1d9e8310564e2aa32ad3830e68c558af6b664447416c2dd1327c0d104fa1eb78c383f0eb638dd1c3ef87b20abd819cedf4e4e25aba317669c33c0cdb00"/246, 0xf6}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x7fff}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRES64=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT, @ANYRES64=r9, @ANYRESDEC=0x0]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r14 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_ifreq(r14, 0x8911, &(0x7f0000000240)={'vlan0\x00', @ifru_hwaddr=@local}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000500)=ANY=[@ANYRES32=r12, @ANYRESHEX=r11, @ANYPTR64, @ANYBLOB="35dec926df012b3abb50b70f998c0da4d560c4867fd295030f39c87c74a1a46d0ea9fa", @ANYRESOCT=0x0, @ANYRESHEX=r13]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1410.456447] lowmem_reserve[]: 0 2580 2580 2580 [ 1410.478191] Node 0 DMA32 free:36408kB min:36468kB low:45584kB high:54700kB active_anon:1632684kB inactive_anon:1828kB active_file:6328kB inactive_file:3420kB unevictable:0kB writepending:152kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13248kB pagetables:85596kB bounce:0kB free_pcp:560kB local_pcp:224kB free_cma:0kB [ 1410.508078] audit: type=1800 audit(1572229571.671:3171): pid=711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19631 res=0 [ 1410.607967] lowmem_reserve[]: 0 0 0 0 [ 1410.616121] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.692240] lowmem_reserve[]: 0 0 0 0 [ 1410.705518] Node 1 Normal free:58252kB min:53420kB low:66772kB high:80124kB active_anon:3035304kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:48kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:100320kB pagetables:263948kB bounce:0kB free_pcp:904kB local_pcp:520kB free_cma:0kB [ 1410.755266] devpts: called with bogus options [ 1410.775055] lowmem_reserve[]: 0 0 0 0 [ 1410.779033] Node 0 DMA: 3*4kB (UM) 38*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10508kB [ 1410.801147] Node 0 DMA32: 2*4kB (UE) 1255*8kB (UM) 826*16kB (UMEH) 226*32kB (UMEH) 34*64kB (ME) 23*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36384kB [ 1410.822532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1410.835802] Node 1 Normal: 112*4kB (MEH) 626*8kB (UMH) 351*16kB (UMH) 477*32kB (UMEH) 282*64kB (UME) 90*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56928kB [ 1410.856331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.866112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1410.877893] audit: type=1800 audit(1572229572.071:3172): pid=723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19342 res=0 [ 1410.908243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.931803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1410.957604] 2724 total pagecache pages [ 1410.966553] 0 pages in swap cache [ 1410.974952] Swap cache stats: add 0, delete 0, find 0/0 [ 1410.986407] Free swap = 0kB [ 1410.998692] Total swap = 0kB [ 1411.005139] 1965979 pages RAM [ 1411.013084] 0 pages HighMem/MovableOnly [ 1411.044120] 333229 pages reserved [ 1411.056066] 0 pages cma reserved [ 1411.063141] Out of memory: Kill process 648 (syz-executor.5) score 1007 or sacrifice child [ 1411.176758] devpts: called with bogus options [ 1413.382046] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1413.420089] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1413.425542] CPU: 0 PID: 7003 Comm: syz-executor.2 Not tainted 4.14.150 #0 [ 1413.432481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.441839] Call Trace: [ 1413.444434] dump_stack+0x138/0x197 [ 1413.448076] ? should_numa_migrate_memory+0x118/0x440 [ 1413.453256] dump_header+0x177/0x6cd [ 1413.456954] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1413.462041] ? ___ratelimit+0x55/0x537 [ 1413.465911] oom_kill_process.cold+0x10/0xadd [ 1413.470391] ? rcu_read_unlock_special+0x639/0xd40 [ 1413.475301] ? lock_downgrade+0x740/0x740 [ 1413.479432] out_of_memory+0x2ee/0x1180 [ 1413.483383] ? lock_acquire+0x16f/0x430 [ 1413.487341] ? oom_killer_disable+0x1d0/0x1d0 [ 1413.491817] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1413.496726] __alloc_pages_slowpath+0x2251/0x2930 [ 1413.501559] ? warn_alloc+0xf0/0xf0 [ 1413.505175] ? __might_sleep+0x93/0xb0 [ 1413.509045] __alloc_pages_nodemask+0x62c/0x7a0 [ 1413.513703] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1413.518702] ? ____cache_alloc_node+0x1be/0x1d0 [ 1413.523353] ? cache_grow_begin+0x335/0x400 [ 1413.527655] cache_grow_begin+0x80/0x400 [ 1413.531696] ? __cpuset_node_allowed+0xff/0x450 [ 1413.536343] fallback_alloc+0x1fd/0x2c0 [ 1413.540302] ____cache_alloc_node+0x1be/0x1d0 [ 1413.544786] kmem_cache_alloc+0x1f3/0x780 [ 1413.548915] ? debug_object_free+0x1fc/0x3f0 [ 1413.553306] getname_flags+0xcb/0x580 [ 1413.557086] ? nanosleep_copyout+0x100/0x100 [ 1413.561490] getname+0x1a/0x20 [ 1413.564665] do_sys_open+0x1e7/0x430 [ 1413.568357] ? filp_open+0x70/0x70 [ 1413.571874] ? SyS_nanosleep+0x12b/0x170 [ 1413.575915] SyS_open+0x2d/0x40 [ 1413.579176] ? do_sys_open+0x430/0x430 [ 1413.583048] do_syscall_64+0x1e8/0x640 [ 1413.586916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1413.591756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1413.596934] RIP: 0033:0x457eb0 [ 1413.600101] RSP: 002b:00007ffec7d9a000 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 1413.607797] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457eb0 [ 1413.615046] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004beadc [ 1413.622317] RBP: 0000000000001ee1 R08: 0000000000000001 R09: 00000000025b6940 [ 1413.629576] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000001f [ 1413.636826] R13: 00007ffec7d9a0e0 R14: 0000000000157e64 R15: 00007ffec7d9a0f0 [ 1413.724020] Mem-Info: [ 1413.726525] active_anon:1172113 inactive_anon:462 isolated_anon:0 [ 1413.726525] active_file:70 inactive_file:124 isolated_file:3 [ 1413.726525] unevictable:0 dirty:97 writeback:1 unstable:0 [ 1413.726525] slab_reclaimable:24030 slab_unreclaimable:176782 [ 1413.726525] mapped:52361 shmem:517 pagetables:87490 bounce:0 [ 1413.726525] free:24403 free_pcp:0 free_cma:0 [ 1413.773611] Node 0 active_anon:1647444kB inactive_anon:1832kB active_file:188kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:209336kB dirty:312kB writeback:0kB shmem:2048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1413.807255] Node 1 active_anon:3041008kB inactive_anon:16kB active_file:92kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:76kB writeback:4kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1413.838768] Node 0 DMA free:10452kB min:216kB low:268kB high:320kB active_anon:2668kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.869253] lowmem_reserve[]: 0 2580 2580 2580 [ 1413.874015] Node 0 DMA32 free:33744kB min:36468kB low:45584kB high:54700kB active_anon:1644776kB inactive_anon:1832kB active_file:188kB inactive_file:252kB unevictable:0kB writepending:312kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13504kB pagetables:85704kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1413.906774] lowmem_reserve[]: 0 0 0 0 [ 1413.911533] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.953243] lowmem_reserve[]: 0 0 0 0 [ 1413.957101] Node 1 Normal free:53416kB min:53420kB low:66772kB high:80124kB active_anon:3041008kB inactive_anon:16kB active_file:92kB inactive_file:20kB unevictable:0kB writepending:80kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:100064kB pagetables:264068kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.990162] net_ratelimit: 16 callbacks suppressed [ 1413.990170] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.002868] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.037305] lowmem_reserve[]: 0 0 0 0 [ 1414.041378] Node 0 DMA: 3*4kB (UM) 37*8kB (UH) 30*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10452kB [ 1414.060807] Node 0 DMA32: 644*4kB (UME) 1511*8kB (UME) 879*16kB (UM) 160*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33912kB [ 1414.078031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1414.092309] Node 1 Normal: 109*4kB (UMEH) 184*8kB (UME) 356*16kB (UMEH) 487*32kB (UMEH) 282*64kB (UME) 90*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53780kB [ 1414.109321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.120492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.129084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.141803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.161991] 678 total pagecache pages [ 1414.165824] 0 pages in swap cache [ 1414.169272] Swap cache stats: add 0, delete 0, find 0/0 [ 1414.191898] Free swap = 0kB [ 1414.194949] Total swap = 0kB [ 1414.197974] 1965979 pages RAM [ 1414.222110] 0 pages HighMem/MovableOnly [ 1414.226130] 333229 pages reserved [ 1414.229576] 0 pages cma reserved [ 1414.233076] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.234638] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.272467] Out of memory: Kill process 729 (syz-executor.3) score 1007 or sacrifice child [ 1414.302175] Killed process 736 (syz-executor.3) total-vm:73380kB, anon-rss:16596kB, file-rss:34864kB, shmem-rss:0kB [ 1414.414351] oom_reaper: reaped process 736 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1415.110150] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.118001] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.190170] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.197916] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.350182] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.356153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.357230] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.386380] bond0: Releasing backup interface bond_slave_1 [ 1415.432620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.448367] bond0: Error: Device is in use and cannot be enslaved [ 1415.455955] bond0: Releasing backup interface bond_slave_1 02:26:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x1000000, 0x1, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1415.511399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.522471] bond0: Releasing backup interface bond_slave_1 02:26:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1415.577422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.642832] bond0: Releasing backup interface bond_slave_1 02:26:16 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x800, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) r5 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r5}, 0xc) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x800000, &(0x7f0000000440)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='lond_slave_0\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB="93196c875623da82301c2b43b371ce9a2e7e896d39de2a7d99ee9122d5067436c5ff17e05e000000000000000000a26c571f0a4afed21f0b8d0332ac25fca09f56fba463670e80e3b9a4e955ccc41fe75463babe67b51d310dfa26160418cdcefc3987cffbd012c7dc3a370ae554b0b3e72d21b1ecb076f2f66514710c64b7e00605dfe9159944a4d6f5d5060ec299a5ac0c8b228598c8a85810a2f776319969ba928d79a787f8c73f00000000000000000000000000000098f3b3242c37c0700ad4f17333605593e7192ff4095f93aa189699b87e996eb861aba2d2a62c7bb4cd440019350b639d6f6292d775de21", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1415.696955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.711536] bond0: Releasing backup interface bond_slave_1 [ 1415.760846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.769348] bond0: Releasing backup interface bond_slave_1 02:26:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="81adce6a313e0e89d99ce778f5850efd4fcaf8701f7395ecb222e3e7ab96314622770cbfc3cb6ddc07a603c7860d0f604d9cfaad4c4459eaf45268c7e4c6399317142ca8a48c6eb0d00db38e425de7d3ea053e0923ef8aef4eb33d240145d5099d2da28efd41e93f64dcfa80841163a0fe90b5ec9bd0fa1560245f1fc6810d117205e11da0cbd653e6c42934150660188e318d14cc241ffe6c9ec4bde925de3c0605ab4da6d0248fae2f1d9e8310564e2aa32ad3830e68c558af6b664447416c2dd1327c0d104fa1eb78c383f0eb638dd1c3ef87b20abd819cedf4e4e25aba317669c33c0cdb00"/246, 0xf6}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x7fff}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r10, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRES64=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT, @ANYRES64=r9, @ANYRESDEC=0x0]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r14 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_ifreq(r14, 0x8911, &(0x7f0000000240)={'vlan0\x00', @ifru_hwaddr=@local}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000500)=ANY=[@ANYRES32=r12, @ANYRESHEX=r11, @ANYPTR64, @ANYBLOB="35dec926df012b3abb50b70f998c0da4d560c4867fd295030f39c87c74a1a46d0ea9fa", @ANYRESOCT=0x0, @ANYRESHEX=r13]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1415.818672] bond0: Releasing backup interface bond_slave_1 [ 1415.818861] devpts: called with bogus options 02:26:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1415.866230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1415.930942] devpts: called with bogus options 02:26:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1416.005425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1416.013736] devpts: called with bogus options [ 1416.045058] bond0: Releasing backup interface bond_slave_1 [ 1416.118044] devpts: called with bogus options [ 1416.139822] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) fcntl$setpipe(r0, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x11209, &(0x7f0000000240)={'v\x7f\x00\x00\x01\x00\x00\x80\x00\b\x00', @ifru_settings={0x7, 0x6, @fr_pvc_info=&(0x7f0000000200)={0x101}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f00000002c0)='fuse\x00', 0x101a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000, 0x0, 0x4f}, 0x9) [ 1416.357011] audit: type=1800 audit(1572229577.551:3173): pid=776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19342 res=0 [ 1416.394812] bond0: Releasing backup interface bond_slave_1 [ 1416.788846] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1416.812388] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1416.871287] CPU: 1 PID: 7699 Comm: syz-executor.3 Not tainted 4.14.150 #0 [ 1416.878254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1416.887630] Call Trace: [ 1416.890230] dump_stack+0x138/0x197 [ 1416.893860] ? adf_copy_key_value_data+0x198/0x510 [ 1416.898804] dump_header+0x177/0x6cd [ 1416.902518] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1416.907619] ? ___ratelimit+0x55/0x537 [ 1416.911503] oom_kill_process.cold+0x10/0xadd [ 1416.915992] ? rcu_read_unlock_special+0x895/0xd40 [ 1416.920956] ? lock_downgrade+0x740/0x740 [ 1416.925102] out_of_memory+0x2ee/0x1180 [ 1416.929072] ? lock_acquire+0x16f/0x430 [ 1416.933051] ? oom_killer_disable+0x1d0/0x1d0 [ 1416.937541] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1416.942465] __alloc_pages_slowpath+0x2251/0x2930 [ 1416.947308] ? kasan_kmalloc+0xce/0xf0 [ 1416.951193] ? warn_alloc+0xf0/0xf0 [ 1416.954827] ? __might_sleep+0x93/0xb0 [ 1416.958711] __alloc_pages_nodemask+0x62c/0x7a0 [ 1416.963377] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1416.968391] ? rcu_read_lock_sched_held+0x110/0x130 [ 1416.973411] ? kasan_unpoison_shadow+0x35/0x50 [ 1416.978000] alloc_pages_current+0xec/0x1e0 [ 1416.982323] __vmalloc_node_range+0x3e9/0x6a0 [ 1416.986821] vzalloc+0x46/0x50 [ 1416.990018] ? xt_counters_alloc+0x34/0x60 [ 1416.994245] xt_counters_alloc+0x34/0x60 [ 1416.998298] __do_replace+0x81/0x5c0 [ 1417.002010] ? compat_do_ip6t_get_ctl+0x870/0x870 [ 1417.006859] ? _copy_from_user+0x99/0x110 [ 1417.011000] do_ip6t_set_ctl+0x296/0x3f4 [ 1417.015063] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 1417.019909] ? mutex_unlock+0xd/0x10 [ 1417.023619] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1417.028957] nf_setsockopt+0x67/0xc0 [ 1417.032685] ipv6_setsockopt+0x105/0x130 [ 1417.036743] tcp_setsockopt+0x84/0xd0 [ 1417.040544] sock_common_setsockopt+0x94/0xd0 [ 1417.045040] SyS_setsockopt+0x13c/0x210 [ 1417.049011] ? SyS_recv+0x40/0x40 [ 1417.052460] ? do_syscall_64+0x53/0x640 [ 1417.056431] ? SyS_recv+0x40/0x40 [ 1417.059880] do_syscall_64+0x1e8/0x640 [ 1417.063758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1417.068613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1417.073797] RIP: 0033:0x45ca6a [ 1417.076975] RSP: 002b:00007fff36253178 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1417.084675] RAX: ffffffffffffffda RBX: 00007fff362531a0 RCX: 000000000045ca6a [ 1417.091947] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1417.099219] RBP: 0000000000713cc0 R08: 00000000000002e8 R09: 0000000000004000 [ 1417.106484] R10: 0000000000712fa0 R11: 0000000000000206 R12: 0000000000000003 [ 1417.113753] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000712f40 [ 1417.170501] Mem-Info: [ 1417.172978] active_anon:1170573 inactive_anon:462 isolated_anon:0 [ 1417.172978] active_file:1145 inactive_file:1123 isolated_file:70 [ 1417.172978] unevictable:0 dirty:101 writeback:0 unstable:0 [ 1417.172978] slab_reclaimable:24133 slab_unreclaimable:176708 [ 1417.172978] mapped:54112 shmem:517 pagetables:87435 bounce:0 [ 1417.172978] free:23914 free_pcp:0 free_cma:0 [ 1417.224432] Node 0 active_anon:1639116kB inactive_anon:1836kB active_file:3960kB inactive_file:3832kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:215524kB dirty:256kB writeback:0kB shmem:2048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1417.352928] Node 1 active_anon:3043176kB inactive_anon:12kB active_file:380kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):144kB mapped:524kB dirty:148kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1417.391010] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.428936] lowmem_reserve[]: 0 2580 2580 2580 [ 1417.435304] Node 0 DMA32 free:35968kB min:36468kB low:45584kB high:54700kB active_anon:1636504kB inactive_anon:1836kB active_file:3112kB inactive_file:2764kB unevictable:0kB writepending:256kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13280kB pagetables:85652kB bounce:0kB free_pcp:320kB local_pcp:148kB free_cma:0kB [ 1417.567970] lowmem_reserve[]: 0 0 0 0 [ 1417.584749] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.754953] lowmem_reserve[]: 0 0 0 0 [ 1417.768210] Node 1 Normal free:51624kB min:53420kB low:66772kB high:80124kB active_anon:3043176kB inactive_anon:12kB active_file:488kB inactive_file:480kB unevictable:0kB writepending:148kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:99872kB pagetables:263900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.835439] lowmem_reserve[]: 0 0 0 0 [ 1417.842593] Node 0 DMA: 3*4kB (UM) 38*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10508kB [ 1417.906442] Node 0 DMA32: 81*4kB (UME) 1529*8kB (UME) 955*16kB (UME) 188*32kB (UME) 8*64kB (M) 10*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36412kB [ 1417.953671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.978183] Node 1 Normal: 1308*4kB (UME) 595*8kB (UME) 272*16kB (UME) 370*32kB (UME) 211*64kB (UME) 90*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52232kB [ 1418.024552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.053403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.096568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.156813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.204140] 1814 total pagecache pages [ 1418.227091] 0 pages in swap cache [ 1418.259814] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.290405] Free swap = 0kB [ 1418.305816] Total swap = 0kB [ 1418.322893] 1965979 pages RAM [ 1418.341166] 0 pages HighMem/MovableOnly [ 1418.362615] 333229 pages reserved [ 1418.378949] 0 pages cma reserved [ 1418.401918] Out of memory: Kill process 742 (syz-executor.1) score 1007 or sacrifice child [ 1418.694977] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1418.792530] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1418.797962] CPU: 1 PID: 7006 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 1418.804896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.814258] Call Trace: [ 1418.816848] dump_stack+0x138/0x197 [ 1418.820458] dump_header+0x177/0x6cd [ 1418.824152] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1418.829236] ? ___ratelimit+0x55/0x537 [ 1418.833107] oom_kill_process.cold+0x10/0xadd [ 1418.837583] ? rcu_read_unlock_special+0x639/0xd40 [ 1418.842494] ? lock_downgrade+0x740/0x740 [ 1418.846623] out_of_memory+0x2ee/0x1180 [ 1418.850586] ? lock_acquire+0x16f/0x430 [ 1418.854542] ? oom_killer_disable+0x1d0/0x1d0 [ 1418.859019] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1418.863927] __alloc_pages_slowpath+0x2251/0x2930 [ 1418.869104] ? warn_alloc+0xf0/0xf0 [ 1418.872717] ? __might_sleep+0x93/0xb0 [ 1418.876585] __alloc_pages_nodemask+0x62c/0x7a0 [ 1418.881233] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1418.886237] ? rcu_read_lock_sched_held+0x110/0x130 [ 1418.891239] copy_process.part.0+0x26a/0x6a00 [ 1418.895714] ? trace_hardirqs_on+0x10/0x10 [ 1418.899936] ? save_trace+0x290/0x290 [ 1418.903727] ? trace_hardirqs_on+0x10/0x10 [ 1418.907951] ? __might_fault+0x110/0x1d0 [ 1418.911991] ? find_held_lock+0x35/0x130 [ 1418.916046] ? __cleanup_sighand+0x50/0x50 [ 1418.920260] ? lock_downgrade+0x740/0x740 [ 1418.924400] _do_fork+0x19e/0xce0 [ 1418.927837] ? fork_idle+0x280/0x280 [ 1418.931526] ? put_timespec64+0xb4/0x100 [ 1418.935564] ? nsecs_to_jiffies+0x30/0x30 [ 1418.939705] ? SyS_clock_gettime+0xf8/0x180 [ 1418.944004] SyS_clone+0x37/0x50 [ 1418.947348] ? sys_vfork+0x30/0x30 [ 1418.950872] do_syscall_64+0x1e8/0x640 [ 1418.954747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1418.959574] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1418.964749] RIP: 0033:0x45850a [ 1418.967923] RSP: 002b:00007ffdafc9e730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1418.975629] RAX: ffffffffffffffda RBX: 00007ffdafc9e730 RCX: 000000000045850a [ 1418.982888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1418.990147] RBP: 00007ffdafc9e770 R08: 0000000000000001 R09: 000000000258d940 [ 1418.997432] R10: 000000000258dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1419.004681] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdafc9e7c0 [ 1419.057159] Mem-Info: [ 1419.059634] active_anon:1170571 inactive_anon:462 isolated_anon:0 [ 1419.059634] active_file:434 inactive_file:436 isolated_file:56 [ 1419.059634] unevictable:0 dirty:57 writeback:23 unstable:0 [ 1419.059634] slab_reclaimable:24133 slab_unreclaimable:176705 [ 1419.059634] mapped:52949 shmem:517 pagetables:87401 bounce:0 [ 1419.059634] free:25335 free_pcp:70 free_cma:0 [ 1419.093718] Node 0 active_anon:1639116kB inactive_anon:1836kB active_file:1704kB inactive_file:1632kB unevictable:0kB isolated(anon):0kB isolated(file):224kB mapped:211724kB dirty:120kB writeback:80kB shmem:2048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1419.142435] Node 1 active_anon:3043168kB inactive_anon:12kB active_file:4kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:32kB dirty:20kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1419.200108] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.263666] lowmem_reserve[]: 0 2580 2580 2580 [ 1419.268404] Node 0 DMA32 free:40820kB min:36468kB low:45584kB high:54700kB active_anon:1636512kB inactive_anon:1836kB active_file:556kB inactive_file:576kB unevictable:0kB writepending:104kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13280kB pagetables:85632kB bounce:0kB free_pcp:168kB local_pcp:12kB free_cma:0kB [ 1419.298690] lowmem_reserve[]: 0 0 0 0 [ 1419.300147] net_ratelimit: 14 callbacks suppressed [ 1419.300153] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.302606] Node 0 [ 1419.310654] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.312835] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.344652] lowmem_reserve[]: 0 0 0 0 [ 1419.348478] Node 1 Normal free:52624kB min:53420kB low:66772kB high:80124kB active_anon:3043168kB inactive_anon:12kB active_file:4kB inactive_file:40kB unevictable:0kB writepending:20kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:99840kB pagetables:263784kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1419.377666] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.380446] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.410078] lowmem_reserve[]: 0 0 0 0 [ 1419.417903] Node 0 DMA: 3*4kB (UM) 38*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10508kB [ 1419.435272] Node 0 DMA32: 623*4kB (ME) 1671*8kB (UME) 977*16kB (UME) 209*32kB (UME) 9*64kB (M) 10*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40804kB [ 1419.451192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.462923] Node 1 Normal: 1395*4kB (UME) 602*8kB (UME) 272*16kB (UME) 370*32kB (UME) 211*64kB (UME) 90*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52636kB [ 1419.479390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.489518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.498759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.508131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.520144] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.527327] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.542926] 865 total pagecache pages [ 1419.546757] 0 pages in swap cache [ 1419.551234] Swap cache stats: add 0, delete 0, find 0/0 [ 1419.556604] Free swap = 0kB [ 1419.559609] Total swap = 0kB [ 1419.563410] 1965979 pages RAM [ 1419.566516] 0 pages HighMem/MovableOnly [ 1419.570667] 333229 pages reserved [ 1419.574182] 0 pages cma reserved [ 1419.577539] Out of memory: Kill process 6199 (syz-executor.3) score 1007 or sacrifice child [ 1419.597710] Killed process 6199 (syz-executor.3) total-vm:73248kB, anon-rss:16584kB, file-rss:34816kB, shmem-rss:0kB 02:26:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x401, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000380), 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x9, 0x0) gettid() bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) [ 1419.958974] devpts: called with bogus options [ 1420.125036] devpts: called with bogus options [ 1420.230179] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.237836] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.288925] devpts: called with bogus options [ 1420.470129] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.476807] protocol 88fb is buggy, dev hsr_slave_1 02:26:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:26:21 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x109e801, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x3, 0x7, 0x0, 0x2}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/f\x04\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:22 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x800, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0xbe42aa8e071d14c4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC]]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xba}, 0x1c) [ 1421.035709] devpts: called with bogus options 02:26:22 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r5, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_hwaddr}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1421.186009] devpts: called with bogus options [ 1421.316864] audit: type=1800 audit(1572229582.511:3174): pid=812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19726 res=0 [ 1421.545856] devpts: called with bogus options 02:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1421.821086] devpts: called with bogus options 02:26:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1422.077312] devpts: called with bogus options [ 1422.895627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1422.933510] bond0: Releasing backup interface bond_slave_1 [ 1422.986780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1422.995425] bond0: Error: Device is in use and cannot be enslaved [ 1423.003040] bond0: Releasing backup interface bond_slave_1 02:26:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1423.047348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1423.101872] bond0: Releasing backup interface bond_slave_1 02:26:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB="529de9afb8321b49cf3bd4abe1f32d29e3a28170ab48118108b3dda242845e1815b4c7db7ba4598d112bab5f15c09d79fc0000666a198d3c13b3b4c78ddf72876692fafecf26e700522f31fbdd69943856b4691baf662a3f83c2a3106816e4a74041e892240e6a44c2fd50302c1d7ca1cf4a30b6a1f7c390440734e0301295938aa764ce6d4abffb80b56e925e759086369d1ce715a3672a8865a0f5f50da68cd596432112623e834654dd6063a614150f9666dd71e355fbde5d57e6ebf3dba9b68bff8a36ef77fc651b6c33f28cb2814eddc26e0000000000000000"]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r13, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, 0x0, &(0x7f0000000340)='fuse\x00', 0x100a0, &(0x7f0000000580)=ANY=[@ANYRES32=r13, @ANYRESHEX=r10, @ANYBLOB="2aa04cc5dbd1309859917246573291adbf1562d8738f4746c89822d4a1f8bf39d96c725e6be7292dbcc6f1c8db0bff8341714b4e8c1b2f8f35761338fd5f99c3841b84c8f26025957f6fbba07e8076e0332186e269028253f71b6964f2e2ac2e026f0ace9901049dafa36508b245fd6e76108bbefc0a8d460cf7a191f0ded84027d60e7ec94db18797", @ANYRESHEX=r11, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:24 executing program 4: unshare(0x600) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x200000, 0x0) fchmod(r0, 0x0) [ 1423.144699] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:24 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_hwaddr=@broadcast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet6(0xa, 0x80000000000003, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000140)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlc\x00', 0x2a}, {@multicast2, 0x0, 0x3}}, 0x44) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:26:24 executing program 4: [ 1423.426867] devpts: called with bogus options 02:26:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000400)=0xc) sched_setattr(r7, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x10000000, 0x10000000}, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r8, 0x28007d) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r9, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1423.533135] devpts: called with bogus options [ 1423.533138] devpts: called with bogus options 02:26:24 executing program 4: [ 1423.636897] bond0: Releasing backup interface bond_slave_1 [ 1423.686134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1423.715096] audit: type=1800 audit(1572229584.911:3175): pid=883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19744 res=0 [ 1423.715212] bond0: Error: Device is in use and cannot be enslaved [ 1423.751365] bond0: Releasing backup interface bond_slave_1 [ 1423.763434] devpts: called with bogus options [ 1423.795635] bond0: Releasing backup interface bond_slave_1 02:26:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='lond_slave_0\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB="93196c875623da82301c2b43b371ce9a2e7e896d39de2a7d99ee9122d5067436c5ff17e05e000000000000000000a26c571f0a4afed21f0b8d0332ac25fca09f56fba463670e80e3b9a4e955ccc41fe75463babe67b51d310dfa26160418cdcefc3987cffbd012c7dc3a370ae554b0b3e72d21b1ecb076f2f66514710c64b7e00605dfe9159944a4d6f5d5060ec299a5ac0c8b228598c8a85810a2f776319969ba928d79a787f8c73f00000000000000000000000000000098f3b3242c37c0700ad4f17333605593e7192ff4095f93aa189699b87e996eb861aba2d2a62c7bb4cd440019350b639d6f6292d775de21", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1423.836748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1423.849234] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1423.916966] audit: type=1800 audit(1572229585.111:3176): pid=893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19783 res=0 [ 1423.954080] bond0: Releasing backup interface bond_slave_1 [ 1424.009090] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1424.026256] bond0: Releasing backup interface bond_slave_1 [ 1424.095126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1424.308499] devpts: called with bogus options 02:26:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1424.390127] net_ratelimit: 16 callbacks suppressed [ 1424.390133] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.402978] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.509961] audit: type=1800 audit(1572229585.701:3177): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19833 res=0 [ 1424.552799] devpts: called with bogus options [ 1424.560226] bond0: Releasing backup interface bond_slave_1 [ 1424.620133] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1424.640116] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.646962] protocol 88fb is buggy, dev hsr_slave_1 02:26:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:25 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x24) clone(0x12c6000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r9, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r9, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffff26}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c206", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1425.279837] devpts: called with bogus options [ 1425.329501] devpts: called with bogus options 02:26:26 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1010000, 0x100000001, 0x50000}, 0x1c) [ 1425.458229] bond0: Releasing backup interface bond_slave_1 [ 1425.477572] devpts: called with bogus options [ 1425.499516] devpts: called with bogus options [ 1425.520154] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.528030] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.542171] bond0: Releasing backup interface bond_slave_1 [ 1425.590166] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.598053] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.742261] audit: type=1800 audit(1572229586.891:3178): pid=944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19810 res=0 [ 1425.770110] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.777118] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.840686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1426.018617] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1426.114822] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 1426.148400] CPU: 1 PID: 937 Comm: syz-executor.1 Not tainted 4.14.150 #0 [ 1426.155301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.164658] Call Trace: [ 1426.167257] dump_stack+0x138/0x197 [ 1426.170891] dump_header+0x177/0x6cd [ 1426.174613] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1426.179724] ? ___ratelimit+0x55/0x537 [ 1426.183622] oom_kill_process.cold+0x10/0xadd [ 1426.188115] ? rcu_read_unlock_special+0x895/0xd40 [ 1426.193045] ? lock_downgrade+0x740/0x740 [ 1426.197198] out_of_memory+0x2ee/0x1180 [ 1426.201171] ? lock_acquire+0x16f/0x430 [ 1426.205145] ? oom_killer_disable+0x1d0/0x1d0 [ 1426.209640] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1426.214566] __alloc_pages_slowpath+0x2251/0x2930 [ 1426.219415] ? warn_alloc+0xf0/0xf0 [ 1426.223132] ? __might_sleep+0x93/0xb0 [ 1426.227018] __alloc_pages_nodemask+0x62c/0x7a0 [ 1426.231683] ? finish_mkwrite_fault+0x620/0x620 [ 1426.236358] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1426.241373] ? __lock_acquire+0x5f7/0x4620 [ 1426.245642] ? save_trace+0x290/0x290 [ 1426.249447] alloc_pages_current+0xec/0x1e0 [ 1426.253768] pte_alloc_one+0x1a/0x100 [ 1426.257570] __handle_mm_fault+0x2c19/0x3470 [ 1426.261981] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1426.266742] ? find_held_lock+0x35/0x130 [ 1426.270804] ? handle_mm_fault+0x1b6/0x7c0 [ 1426.275043] handle_mm_fault+0x293/0x7c0 [ 1426.279113] __do_page_fault+0x4c1/0xb80 [ 1426.283181] ? vmalloc_fault+0xe30/0xe30 [ 1426.287248] ? page_fault+0x2f/0x50 [ 1426.290876] do_page_fault+0x71/0x511 [ 1426.294678] ? page_fault+0x2f/0x50 [ 1426.298300] page_fault+0x45/0x50 [ 1426.301748] RIP: 0033:0x45850a [ 1426.304924] RSP: 002b:00007ffd93531410 EFLAGS: 00010246 [ 1426.310277] RAX: 0000000000000000 RBX: 00007ffd93531410 RCX: 000000000045850a [ 1426.317546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1426.324808] RBP: 00007ffd93531450 R08: 0000000000000001 R09: 0000000001d4d940 [ 1426.332087] R10: 0000000001d4dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1426.339361] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd935314a0 02:26:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1426.387425] Mem-Info: [ 1426.395185] active_anon:1166891 inactive_anon:464 isolated_anon:0 [ 1426.395185] active_file:1346 inactive_file:1539 isolated_file:103 [ 1426.395185] unevictable:0 dirty:93 writeback:25 unstable:0 [ 1426.395185] slab_reclaimable:24106 slab_unreclaimable:177080 [ 1426.395185] mapped:54568 shmem:517 pagetables:87630 bounce:0 [ 1426.395185] free:25745 free_pcp:517 free_cma:0 02:26:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x2, 0x1, 0xfffffffc, 0x5, 0x10000000000000, 0x0, 0xfffffffffffffffd}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="01726f6f746d6f64653d30309361d70635005baf3d9f4fd0e4a161fd3030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x891c, &(0x7f0000000380)={'ip6erspan0\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000640)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1426.581733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1426.615031] bond0: Error: Device is in use and cannot be enslaved [ 1426.624268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1426.637003] bond0: Releasing backup interface bond_slave_1 [ 1426.671283] Node 0 active_anon:1639356kB inactive_anon:1844kB active_file:1080kB inactive_file:1644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210584kB dirty:8kB writeback:0kB shmem:2052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1426.703456] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1426.713901] devpts: called with bogus options 02:26:27 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000200)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bt2B\x00', @ifru_settings={0xfffffe03, 0xa4f, @te1=&(0x7f0000000000)={0x9, 0x4, 0x5, 0x560}}}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffff26}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1426.731305] Node 1 active_anon:3016388kB inactive_anon:12kB active_file:4632kB inactive_file:3984kB unevictable:0kB isolated(anon):0kB isolated(file):312kB mapped:7668kB dirty:28kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1426.826729] devpts: called with bogus options [ 1426.857516] Node 0 DMA free:10508kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.899338] devpts: called with bogus options [ 1426.905964] lowmem_reserve[]: 0 2580 2580 2580 [ 1426.911043] Node 0 DMA32 free:39728kB min:36468kB low:45584kB high:54700kB active_anon:1633304kB inactive_anon:1844kB active_file:1080kB inactive_file:1644kB unevictable:0kB writepending:8kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13216kB pagetables:86408kB bounce:0kB free_pcp:1160kB local_pcp:524kB free_cma:0kB [ 1426.945030] lowmem_reserve[]: 0 0 0 0 [ 1426.949485] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.981082] lowmem_reserve[]: 0 0 0 0 02:26:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x4, 0x81) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES64=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cfffffc20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1426.984930] Node 1 Normal free:69584kB min:53420kB low:66772kB high:80124kB active_anon:3015976kB inactive_anon:12kB active_file:5540kB inactive_file:3472kB unevictable:0kB writepending:28kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:100320kB pagetables:263776kB bounce:0kB free_pcp:1184kB local_pcp:540kB free_cma:0kB [ 1427.021081] lowmem_reserve[]: 0 0 0 0 [ 1427.028273] Node 0 DMA: 3*4kB (UM) 38*8kB (UMH) 33*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10508kB [ 1427.050187] Node 0 DMA32: 318*4kB (UM) 1386*8kB (UME) 1003*16kB (UME) 263*32kB (UME) 19*64kB (M) 7*128kB (ME) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39704kB [ 1427.081945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1427.102198] devpts: called with bogus options [ 1427.127462] bond0: Releasing backup interface bond_slave_1 [ 1427.137688] devpts: called with bogus options [ 1427.146559] Node 1 Normal: 267*4kB (UME) 776*8kB (UME) 403*16kB (UMEH) 555*32kB (UMEH) 320*64kB (UME) 108*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67836kB [ 1427.174613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.196583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.206026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.237542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1427.392768] audit: type=1800 audit(1572229588.531:3179): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19960 res=0 [ 1427.415509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.489368] 3221 total pagecache pages [ 1427.499645] 0 pages in swap cache [ 1427.517768] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.544065] Free swap = 0kB [ 1427.556079] Total swap = 0kB [ 1427.569767] 1965979 pages RAM [ 1427.603923] 0 pages HighMem/MovableOnly [ 1427.619642] 333229 pages reserved [ 1427.639089] 0 pages cma reserved [ 1427.656092] Out of memory: Kill process 908 (syz-executor.3) score 1007 or sacrifice child [ 1427.815984] bond0: Releasing backup interface bond_slave_1 [ 1427.863847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1427.872994] bond0: Releasing backup interface bond_slave_1 [ 1427.924270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1428.282098] devpts: called with bogus options 02:26:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffff26}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:29 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_sla\x1b\x98_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_mtu=0xdf3b}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1428.405995] devpts: called with bogus options 02:26:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c206", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000053c0)=[{{&(0x7f0000000400)=@caif=@util, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000500)=""/100, 0x64}], 0x2, &(0x7f00000005c0)=""/9, 0x9}, 0x20}, {{&(0x7f0000000600)=@caif, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)=""/164, 0xa4}], 0x2, &(0x7f00000007c0)=""/237, 0xed}, 0x2d43543b}, {{&(0x7f00000008c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/33, 0x21}, {&(0x7f0000000a00)=""/5, 0x5}, {&(0x7f0000000a40)=""/39, 0x27}], 0x4, &(0x7f0000000ac0)=""/221, 0xdd}, 0x1f}, {{&(0x7f0000000bc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000c40)=""/5, 0x5}, {&(0x7f0000000c80)=""/164, 0xa4}, {&(0x7f0000000d40)=""/249, 0xf9}, {&(0x7f0000000e40)=""/6, 0x6}, {&(0x7f0000000e80)=""/20, 0x14}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x6, &(0x7f0000001f40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000002f40)=@ipx, 0x80, &(0x7f0000003080)=[{&(0x7f0000002fc0)=""/170, 0xaa}], 0x1}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f00000030c0)=""/216, 0xd8}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/113, 0x71}, {&(0x7f0000004240)=""/67, 0x43}, {&(0x7f00000042c0)=""/90, 0x5a}], 0x5, &(0x7f00000043c0)=""/4096, 0x1000}, 0x80000001}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1428.512404] devpts: called with bogus options [ 1428.545636] devpts: called with bogus options [ 1428.557262] devpts: called with bogus options 02:26:29 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) [ 1428.873216] audit: type=1800 audit(1572229589.971:3180): pid=1028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=19857 res=0 [ 1428.896368] bond0: Releasing backup interface bond_slave_1 [ 1428.958747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1428.967612] bond0: Releasing backup interface bond_slave_1 [ 1429.007087] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1429.413493] devpts: called with bogus options 02:26:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000p0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1429.467088] devpts: called with bogus options 02:26:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) recvmmsg(r3, &(0x7f0000008880), 0x0, 0x100, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000400)=[{&(0x7f0000000500)="d04aa4b5c367df4a463470"}], 0x1000000000000026, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1429.670147] net_ratelimit: 14 callbacks suppressed [ 1429.670154] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.683101] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.742617] devpts: called with bogus options [ 1429.750141] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.757901] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.896166] devpts: called with bogus options [ 1429.910119] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.917321] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.957349] bond0: Releasing backup interface bond_slave_1 [ 1430.019297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1430.058129] audit: type=1800 audit(1572229591.251:3181): pid=1051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19757 res=0 [ 1430.063803] devpts: called with bogus options [ 1430.110741] bond0: Releasing backup interface bond_slave_1 [ 1430.121428] devpts: called with bogus options [ 1430.173024] devpts: called with bogus options [ 1430.198994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1430.279455] devpts: called with bogus options [ 1430.341969] audit: type=1800 audit(1572229591.441:3182): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=20019 res=0 [ 1430.385509] bond0: Releasing backup interface bond_slave_1 [ 1430.403496] audit: type=1800 audit(1572229591.561:3183): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=20043 res=0 [ 1430.484577] bond0: Releasing backup interface bond_slave_1 [ 1430.630154] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.637777] protocol 88fb is buggy, dev hsr_slave_1 02:26:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d8964653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_mtu}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='veth0_to_bond\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1430.870122] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.876912] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.091164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.101575] bond0: Releasing backup interface bond_slave_1 [ 1431.149975] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.164241] bond0: Releasing backup interface bond_slave_1 02:26:32 executing program 2: socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r5 = fcntl$getown(r4, 0x9) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/l2cap\x00') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) [ 1431.627862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.667779] bond0: Releasing backup interface bond_slave_1 02:26:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1431.724729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.734231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.756712] bond0: Releasing backup interface bond_slave_1 [ 1431.804699] devpts: called with bogus options [ 1431.851262] bond0: Releasing backup interface bond_slave_1 02:26:33 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009bc0)=[{{&(0x7f0000000380)=@ipx, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/157, 0x9d}, {&(0x7f00000014c0)=""/91, 0xbbfe09f02243d3cb}, {&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000001640)=""/81, 0x51}, {&(0x7f00000016c0)=""/68, 0x44}], 0x6, &(0x7f00000017c0)=""/83, 0x53}}, {{&(0x7f0000001840)=@x25, 0x80, &(0x7f0000001e80)=[{&(0x7f00000018c0)=""/125, 0x7d}, {&(0x7f0000001940)=""/173, 0xad}, {&(0x7f0000001a00)=""/148, 0x94}, {&(0x7f0000001ac0)=""/192, 0xc0}, {&(0x7f0000001b80)=""/82, 0x52}, {&(0x7f0000001c00)=""/194, 0xc2}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000001d00)=""/147, 0x93}, {&(0x7f0000001dc0)=""/139, 0x8b}], 0x9, &(0x7f0000001f40)=""/4096, 0x1000}}, {{&(0x7f0000002f40)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000002fc0)=""/208, 0xd0}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/197, 0xfffffffffffffeff}, {&(0x7f00000041c0)=""/231, 0xe7}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f00000042c0)=""/96, 0x60}], 0x6, &(0x7f00000043c0)=""/94, 0x5e}, 0x1}, {{&(0x7f0000004440)=@can, 0x80, &(0x7f00000045c0)=[{&(0x7f00000002c0)}, {&(0x7f00000044c0)=""/225, 0xe1}], 0x2, &(0x7f0000004600)=""/11, 0x6}, 0xb6}, {{&(0x7f0000004640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004940)=[{&(0x7f00000046c0)=""/92, 0x5c}, {&(0x7f0000004740)=""/150, 0x96}, {&(0x7f0000004800)=""/251, 0xfb}, {&(0x7f0000004900)=""/39, 0x27}], 0x4, &(0x7f0000004980)=""/148, 0x94}, 0xea6c0000}, {{&(0x7f0000004a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/119, 0x77}, {&(0x7f0000005b40)=""/140, 0x8c}, {&(0x7f0000005c00)=""/173, 0xad}, {&(0x7f0000005cc0)=""/240, 0xf0}, {&(0x7f0000005dc0)=""/213, 0xd5}, {&(0x7f0000005ec0)=""/201, 0xc9}, {&(0x7f0000005fc0)=""/208, 0xd0}, {&(0x7f00000060c0)=""/249, 0xf9}], 0x9}, 0x8}, {{&(0x7f0000006280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006540)=[{&(0x7f0000006300)=""/177, 0xb1}, {&(0x7f00000063c0)=""/108, 0x6c}, {&(0x7f0000006440)=""/146, 0x92}, {&(0x7f0000006500)=""/31, 0x1f}], 0x4}, 0x7fff}, {{0x0, 0x0, &(0x7f0000007640)=[{&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)}, {&(0x7f00000075c0)=""/128, 0x80}], 0x3, &(0x7f0000007680)=""/255, 0xff}, 0x1000}, {{&(0x7f0000007780)=@l2, 0x80, &(0x7f0000009a80)=[{&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008800)=""/251, 0xfb}, {&(0x7f0000008900)=""/4096, 0x1000}, {&(0x7f0000009900)=""/138, 0x8a}, {&(0x7f00000099c0)=""/179, 0xb3}], 0x5, &(0x7f0000009b00)=""/160, 0xa0}, 0x3}], 0x9, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1431.900928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.910774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1431.925540] bond0: Error: Device is in use and cannot be enslaved 02:26:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, 0x0) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:33 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) [ 1431.951446] devpts: called with bogus options 02:26:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d8964653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_mtu}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='veth0_to_bond\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, 0x0) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1432.266839] devpts: called with bogus options [ 1432.354350] devpts: called with bogus options [ 1432.354426] devpts: called with bogus options [ 1432.360868] devpts: called with bogus options [ 1432.386697] devpts: called with bogus options [ 1432.443824] devpts: called with bogus options 02:26:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0xfffffffffffffd15, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x400009) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:33 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000000)='syscall\x00') preadv(r6, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x450000}, 0x1c) 02:26:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1432.526404] audit: type=1800 audit(1572229593.721:3184): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=20009 res=0 [ 1432.599472] bond0: Releasing backup interface bond_slave_1 [ 1432.669348] bond0: Releasing backup interface bond_slave_1 [ 1432.688382] devpts: called with bogus options [ 1432.736334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1432.743472] audit: type=1800 audit(1572229593.761:3185): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19947 res=0 [ 1432.783395] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1432.803175] bond0: Releasing backup interface bond_slave_1 02:26:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{&(0x7f0000000400)=@ax25={{0x3, @default}, [@remote, @bcast, @remote, @rose, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000580)=""/197, 0xc5}], 0x3, &(0x7f00000006c0)=""/83, 0x53}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000002280)=""/47, 0x2f}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/50, 0x32}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000c00)=""/198, 0xc6}, {&(0x7f0000000d00)=""/16, 0x10}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0xa, &(0x7f0000001e00)=""/235, 0xeb}, 0x5}, {{&(0x7f0000001f00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001f80)=""/5, 0x5}, {&(0x7f0000001fc0)=""/85, 0x55}, {&(0x7f0000002040)=""/216, 0xd8}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000002140)=""/163, 0xa3}, {&(0x7f0000003340)=""/231, 0xe7}], 0x6, &(0x7f0000003440)=""/225, 0xe1}, 0x5}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffef7}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1d73363e2e7b8be, 0x0, 0x3, 0x4, 0xfffffffffffffffe}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="66643d78aef859e1cc7ea27454344fd295a7737f65b0a78b91373181f9b69c4afdcf72f637af4cd897aea496b95f3a106db03b49d5c75d9369faed2f0295c2738af3c1d7f25a0197113cb1ce450105d21aee48048513c51da717c86b004eb0c39b147e29d84548165639d39f08a0fa9d38d47a744d9d5da69c96cf6a3951a6de55687e", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf640046cf", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000022c0)={'veth0_to_hsr\x00'}) ioctl$sock_ifreq(r10, 0x44e5, &(0x7f0000000240)={'\x00', @ifru_data=&(0x7f0000002300)="0a466d1791f23d34a25929bef7d57c50538e1a1983bc4769c75a0c1ded636140"}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1434.553636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1434.594455] bond0: Releasing backup interface bond_slave_1 02:26:35 executing program 4: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='U+\xe5\x91\x0e\xe0A\x95\xd1\x18\xd8\xca\xbd+\f+\xdc\xe3\xce\xa1\x1e\xac\xe8\xc7\xbb(\xa7M\x95\xc8?\ac,\x92q\xfa>\xa3\x01M\xa5];\x04\xff\xa9]\xe6\xe5\xe6)y\xe1\x85!c\xc4/\xa8@}\x87n^w\xbec%\xfe\x97\xa0xc:#\xb5W\xb4<\xb2\xe2DE\xf8\xc2\x86?\x0e?3\x16V45X\xbel\xdb\xcbeY\xcdQ\xd3\xd3\x87\xe6F\r\x81Hta\x8f4\xce\x1eA\x14\x8e\x9d\xc4\xacZMD\xa9q+', 0x40000, &(0x7f0000000500)='\'se\x00n\xff\x01\x00\x00\x00\x00\x00\x00cy\xee\xaeS\xe4F\xff\xba\xc5!\v\xe2\xe9P3\xbd\xd0\xa8\xde\n\xbbGZ\xeb]l\xc5|\xae\xa0\xceJ.\xc8]\xc17\x9d\xday\xf0W\x12xQ_\xe3{(;\xe4\xdc0\x00\x92\xe5@\x91\xe8\xe7\x13\xb7\b\x93\x14e\x8cc\x11V\x04\xa0]\x04U\x97e\xda3\xbb\xe4\x95F&\x8f\x7f\xc7\xbc\xd7I\x9d6\'>\xf14\xaa\x00\v\x9d3\x00S\x8f\xf9\"\xbd\xe6;\x9c\x8e\x857\xbb<\xf8j\a\xef\x03\xd8\a]\xb3D\xfe}\xee\xb5\x02\x1a6\xf7X\xf1t\xecR3\b\xf3\xf0\xc7\x1f\x13\x93\xb4') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r2, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200), 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req={0x5, 0x9, 0x7, 0x1}, 0x44) [ 1434.646621] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, 0x0) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1434.784427] devpts: called with bogus options [ 1434.790151] net_ratelimit: 16 callbacks suppressed [ 1434.790156] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.802723] protocol 88fb is buggy, dev hsr_slave_1 [ 1434.835144] devpts: called with bogus options [ 1434.936480] devpts: called with bogus options [ 1434.949262] audit: type=1800 audit(1572229596.141:3186): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=19767 res=0 [ 1434.973184] bond0: Releasing backup interface bond_slave_1 [ 1435.000551] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1435.002817] devpts: called with bogus options [ 1435.015739] bond0: Releasing backup interface bond_slave_1 [ 1435.030154] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.036988] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.078457] bond0: Releasing backup interface bond_slave_1 [ 1435.119441] audit: type=1800 audit(1572229596.261:3187): pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=20119 res=0 [ 1435.156069] devpts: called with bogus options [ 1435.523107] audit: type=1800 audit(1572229596.291:3188): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=19943 res=0 [ 1435.696535] audit: type=1800 audit(1572229596.431:3189): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=20123 res=0 [ 1435.727835] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1435.741811] devpts: called with bogus options [ 1435.801736] udevd cpuset=/ mems_allowed=0-1 [ 1435.834634] CPU: 0 PID: 31681 Comm: udevd Not tainted 4.14.150 #0 [ 1435.840905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.850258] Call Trace: [ 1435.852851] dump_stack+0x138/0x197 [ 1435.856482] dump_header+0x177/0x6cd [ 1435.860196] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1435.865303] ? ___ratelimit+0x55/0x537 [ 1435.869191] oom_kill_process.cold+0x10/0xadd [ 1435.873682] ? rcu_read_unlock_special+0x660/0xd40 [ 1435.878612] ? lock_downgrade+0x740/0x740 [ 1435.882765] out_of_memory+0x2ee/0x1180 [ 1435.886738] ? lock_acquire+0x16f/0x430 [ 1435.890712] ? oom_killer_disable+0x1d0/0x1d0 [ 1435.895548] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1435.900483] __alloc_pages_slowpath+0x2251/0x2930 [ 1435.905337] ? warn_alloc+0xf0/0xf0 [ 1435.908966] ? __might_sleep+0x93/0xb0 [ 1435.912849] __alloc_pages_nodemask+0x62c/0x7a0 [ 1435.917515] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1435.922541] cache_grow_begin+0x80/0x400 [ 1435.926599] ? __cpuset_node_allowed+0xff/0x450 [ 1435.931271] fallback_alloc+0x1fd/0x2c0 [ 1435.935249] ____cache_alloc_node+0x1be/0x1d0 [ 1435.939741] kmem_cache_alloc+0x1f3/0x780 [ 1435.943891] ? _raw_spin_unlock_irq+0x28/0x90 [ 1435.948386] getname_flags+0xcb/0x580 [ 1435.952184] ? finish_task_switch+0x178/0x650 [ 1435.956670] ? finish_task_switch+0x14d/0x650 [ 1435.961161] getname+0x1a/0x20 [ 1435.964351] do_sys_open+0x1e7/0x430 [ 1435.968061] ? filp_open+0x70/0x70 [ 1435.971602] ? do_munmap+0xd60/0xd60 [ 1435.975313] SyS_open+0x2d/0x40 [ 1435.978582] ? do_sys_open+0x430/0x430 [ 1435.982465] do_syscall_64+0x1e8/0x640 [ 1435.986345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1435.990165] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.991187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1435.991195] RIP: 0033:0x7ffa1cacc120 [ 1435.991202] RSP: 002b:00007ffdb6a24ef8 EFLAGS: 00000246 [ 1435.999339] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.001377] ORIG_RAX: 0000000000000002 [ 1436.001382] RAX: ffffffffffffffda RBX: 0000000001cc2080 RCX: 00007ffa1cacc120 [ 1436.001386] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffdb6a24fc0 [ 1436.001390] RBP: 00007ffdb6a24f70 R08: 0000000000000008 R09: 0000000000000001 [ 1436.001393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1436.001397] R13: 000000000041f57a R14: 0000000001c72030 R15: 000000000000000b [ 1436.001549] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.064355] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.135788] Mem-Info: [ 1436.138329] active_anon:1171370 inactive_anon:463 isolated_anon:0 [ 1436.138329] active_file:1289 inactive_file:1033 isolated_file:76 [ 1436.138329] unevictable:0 dirty:65 writeback:2 unstable:0 [ 1436.138329] slab_reclaimable:23975 slab_unreclaimable:177507 [ 1436.138329] mapped:53958 shmem:517 pagetables:87904 bounce:0 [ 1436.138329] free:21728 free_pcp:11 free_cma:0 [ 1436.172750] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.174785] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.204949] Node 0 active_anon:1646924kB inactive_anon:1832kB active_file:1376kB inactive_file:1244kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:211040kB dirty:104kB writeback:0kB shmem:2040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1436.320079] Node 1 active_anon:3038556kB inactive_anon:20kB active_file:2904kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):356kB mapped:4692kB dirty:156kB writeback:8kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1436.381281] Node 0 DMA free:10468kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.474676] lowmem_reserve[]: 0 2580 2580 2580 [ 1436.479315] Node 0 DMA32 free:28736kB min:36468kB low:45584kB high:54700kB active_anon:1644272kB inactive_anon:1832kB active_file:1068kB inactive_file:1124kB unevictable:0kB writepending:104kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13344kB pagetables:86432kB bounce:0kB free_pcp:280kB local_pcp:280kB free_cma:0kB [ 1436.509612] lowmem_reserve[]: 0 0 0 0 [ 1436.513478] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.538800] lowmem_reserve[]: 0 0 0 0 [ 1436.542680] Node 1 Normal free:49420kB min:53420kB low:66772kB high:80124kB active_anon:3038556kB inactive_anon:20kB active_file:2608kB inactive_file:2948kB unevictable:0kB writepending:164kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:100640kB pagetables:264996kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1436.572801] lowmem_reserve[]: 0 0 0 0 [ 1436.576636] Node 0 DMA: 3*4kB (UM) 37*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10468kB [ 1436.592973] Node 0 DMA32: 287*4kB (UME) 819*8kB (UME) 818*16kB (UME) 157*32kB (UE) 15*64kB (ME) 14*128kB (ME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29076kB [ 1436.630085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1436.670090] Node 1 Normal: 1039*4kB (UME) 186*8kB (UME) 11*16kB (UME) 234*32kB (UME) 324*64kB (UME) 108*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49916kB [ 1436.700075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1436.709146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1436.741489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1436.770072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1436.778688] 1891 total pagecache pages [ 1436.796938] 0 pages in swap cache [ 1436.800776] Swap cache stats: add 0, delete 0, find 0/0 [ 1436.806558] Free swap = 0kB [ 1436.809931] Total swap = 0kB [ 1436.813689] 1965979 pages RAM [ 1436.817137] 0 pages HighMem/MovableOnly [ 1436.822152] 333229 pages reserved [ 1436.825998] 0 pages cma reserved [ 1436.829706] Out of memory: Kill process 1166 (syz-executor.5) score 1007 or sacrifice child [ 1436.838778] Killed process 1213 (syz-executor.5) total-vm:73512kB, anon-rss:16596kB, file-rss:35696kB, shmem-rss:0kB [ 1436.901813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1436.911280] bond0: Releasing backup interface bond_slave_1 [ 1436.945264] oom_reaper: reaped process 1213 (syz-executor.5), now anon-rss:0kB, file-rss:24kB, shmem-rss:0kB [ 1436.976147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1436.984754] bond0: Releasing backup interface bond_slave_1 [ 1437.065965] bond0: Error: Device is in use and cannot be enslaved [ 1437.079776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.092026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.100534] bond0: Releasing backup interface bond_slave_1 [ 1437.174760] bond0: Releasing backup interface bond_slave_1 [ 1437.225236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.233945] bond0: Releasing backup interface bond_slave_1 [ 1437.285535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.296368] bond0: Releasing backup interface bond_slave_1 02:26:38 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x33da82, 0x13) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1437.348131] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:38 executing program 4: syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0700aaaabb8d25ad4d6408ff000000000000000000069078ac0314bbac1414bb00004e20883816944400e3524adff7030baaff06f1e8936a79cfdc05d2dd2af7b0562705287a941860123b69c0dc6f4fa50e69e927c0e875481f97289b404b2a66b72c36e80845a30422929b6b82f5e52b5285bb8f61a40fe0f0be008bc9733954e30c27aa411b53d6ba1ac1eb1f8cc40894d5c2399cb46f2c05d48e8a6b7f29d583ed64c0b182464d8753118f7e8aac94a2a1cd756838b0eaa72f9fc355d0cc31ae6b04997b0578", @ANYRES32=0x41424344, @ANYRES32=0x42424242, @ANYBLOB="5000000090780000602a7dc2a43da0a6f382fcf8687ded9194d51c19bb1d360a8d640e13e2d8897375f066867fa40e140d52f84f677adf3791560d830f1208873d"], 0x0) syncfs(0xffffffffffffffff) 02:26:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x800, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB="fa85e2447331bdd4c9a86e05146f", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1437.467476] devpts: called with bogus options [ 1437.637629] bond0: Releasing backup interface bond_slave_1 [ 1437.686834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.708122] bond0: Releasing backup interface bond_slave_1 [ 1437.747590] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1437.907558] devpts: called with bogus options [ 1437.914126] devpts: called with bogus options [ 1437.954462] devpts: called with bogus options [ 1438.047744] bond0: Releasing backup interface bond_slave_1 02:26:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) sendfile(r1, r1, &(0x7f0000000440), 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, &(0x7f0000000100)=""/92, 0x54) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000140), 0x8) getdents64(r5, &(0x7f0000000200)=""/191, 0xbf) write$char_usb(r5, &(0x7f0000000180)="0a5726aa7f43d1a654e91d645530ed94e9252a60", 0x14) write$UHID_CREATE2(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r3, r4, 0x0, 0x8000) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000000)) mkdir(0x0, 0x0) getpeername(r4, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') 02:26:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ab0914970046cf97e749eaceb15dd56054766265daf36a9e801f2171d4860c1c7809f3b547f4c699c0300b71d31f378adf155560b933e08bc3a7447cc8e7d90dce1140524d3d4597963c66de11bdfc1ab7a058cada12f5439f809102a177df6ea3eb3546ae05fa4c29aede52eda72cfc2ab3d023fe7efd8e938eb5a6", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r11, 0x0, 0x0, 0x0) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r13, 0x0, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r14, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r14, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000340)='fuse\x00', 0x100a0, &(0x7f0000000740)=ANY=[@ANYPTR, @ANYRESDEC=r1, @ANYRES64=r12, @ANYRESHEX, @ANYRES16=0x0, @ANYRESDEC=r13, @ANYRESDEC, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYPTR, @ANYRESDEC], @ANYRESOCT, @ANYRES64=r14, @ANYRESDEC=0x0]]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1438.145408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1438.159434] bond0: Error: Device is in use and cannot be enslaved [ 1438.184430] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1438.220675] bond0: Error: Device is in use and cannot be enslaved [ 1438.318199] devpts: called with bogus options 02:26:39 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x107) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x39, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xf8V\x80\xddo\x02\xfe', @ifru_map={0x3f, 0x400, 0x5, 0x20, 0x0, 0x1e}}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x3ff, 0x50000}, 0x1c) [ 1438.389380] devpts: called with bogus options [ 1438.482341] audit: type=1800 audit(1572229599.681:3190): pid=1270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19952 res=0 [ 1438.521875] bond0: Releasing backup interface bond_slave_1 [ 1438.794099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1438.810995] bond0: Releasing backup interface bond_slave_1 02:26:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1438.865084] bond0: Releasing backup interface bond_slave_1 [ 1439.053640] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1439.055570] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1439.204924] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1439.239815] CPU: 1 PID: 7305 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 1439.246789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.256145] Call Trace: [ 1439.258740] dump_stack+0x138/0x197 [ 1439.262372] dump_header+0x177/0x6cd [ 1439.266082] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1439.271183] ? ___ratelimit+0x55/0x537 [ 1439.275069] oom_kill_process.cold+0x10/0xadd [ 1439.279562] ? rcu_read_unlock_special+0x660/0xd40 [ 1439.284492] ? lock_downgrade+0x740/0x740 [ 1439.288644] out_of_memory+0x2ee/0x1180 [ 1439.292617] ? lock_acquire+0x16f/0x430 [ 1439.296615] ? oom_killer_disable+0x1d0/0x1d0 [ 1439.301107] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1439.306029] __alloc_pages_slowpath+0x2251/0x2930 [ 1439.310878] ? warn_alloc+0xf0/0xf0 [ 1439.314507] ? __might_sleep+0x93/0xb0 [ 1439.318388] __alloc_pages_nodemask+0x62c/0x7a0 [ 1439.323059] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1439.328074] ? ____cache_alloc_node+0x1be/0x1d0 [ 1439.332725] ? cache_grow_begin+0x335/0x400 [ 1439.337030] cache_grow_begin+0x80/0x400 [ 1439.341069] ? __cpuset_node_allowed+0xff/0x450 [ 1439.345719] fallback_alloc+0x1fd/0x2c0 [ 1439.349676] ____cache_alloc_node+0x1be/0x1d0 [ 1439.354171] kmem_cache_alloc+0x1f3/0x780 [ 1439.358307] getname_flags+0xcb/0x580 [ 1439.362100] user_path_mountpoint_at+0x29/0x50 [ 1439.366662] SyS_umount+0x10c/0x380 [ 1439.370270] ? __do_page_fault+0x358/0xb80 [ 1439.374483] ? __detach_mounts+0x2f0/0x2f0 [ 1439.378694] ? do_syscall_64+0x53/0x640 [ 1439.382649] ? __detach_mounts+0x2f0/0x2f0 [ 1439.386863] do_syscall_64+0x1e8/0x640 [ 1439.390729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1439.395580] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1439.400767] RIP: 0033:0x45c967 [ 1439.403945] RSP: 002b:00007ffd3e69c378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1439.411644] RAX: ffffffffffffffda RBX: 000000000015f3ef RCX: 000000000045c967 [ 1439.418898] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd3e69d4b0 [ 1439.426177] RBP: 0000000000001d14 R08: 0000000000000001 R09: 0000000002a30940 [ 1439.433434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3e69d4b0 [ 1439.440690] R13: 00007ffd3e69d4a0 R14: 0000000000000000 R15: 00007ffd3e69d4b0 [ 1439.581368] Mem-Info: [ 1439.586580] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:40 executing program 1: syz_genetlink_get_family_id$team(0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4012850, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x401}}, {@rq={'rq', 0x3d, 0x2}}, {@common=@cache_loose='cache=loose'}, {@sq={'sq', 0x3d, 0x800}}, {@common=@version_9p2000='version=9p2000'}, {@timeout={'timeout'}}, {@rq={'rq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x40}}, {@common=@cache_fscache='cache=fscache'}, {@rq={'rq', 0x3d, 0x8}}], [{@subj_user={'subj_user', 0x3d, '(bdevselinux^#GPL!'}}]}}) [ 1439.627592] active_anon:1163054 inactive_anon:464 isolated_anon:0 [ 1439.627592] active_file:921 inactive_file:1054 isolated_file:89 [ 1439.627592] unevictable:0 dirty:107 writeback:15 unstable:0 [ 1439.627592] slab_reclaimable:23920 slab_unreclaimable:177336 [ 1439.627592] mapped:53893 shmem:518 pagetables:87835 bounce:0 [ 1439.627592] free:30364 free_pcp:477 free_cma:0 02:26:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) sendfile(r1, r1, &(0x7f0000000440), 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, &(0x7f0000000100)=""/92, 0x54) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000140), 0x8) getdents64(r5, &(0x7f0000000200)=""/191, 0xbf) write$char_usb(r5, &(0x7f0000000180)="0a5726aa7f43d1a654e91d645530ed94e9252a60", 0x14) write$UHID_CREATE2(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r3, r4, 0x0, 0x8000) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000000)) mkdir(0x0, 0x0) getpeername(r4, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') [ 1439.760592] Node 0 active_anon:1636252kB inactive_anon:1844kB active_file:1320kB inactive_file:1444kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:210936kB dirty:52kB writeback:104kB shmem:2052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1439.789288] Node 1 active_anon:3015964kB inactive_anon:12kB active_file:4164kB inactive_file:3372kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:5736kB dirty:276kB writeback:56kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1439.882683] devpts: called with bogus options [ 1439.913122] Node 0 DMA free:10516kB min:216kB low:268kB high:320kB active_anon:2612kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.964868] lowmem_reserve[]: 0 2580 2580 2580 [ 1439.969802] Node 0 DMA32 free:37820kB min:36468kB low:45584kB high:54700kB active_anon:1633620kB inactive_anon:1844kB active_file:1420kB inactive_file:1444kB unevictable:0kB writepending:8kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13216kB pagetables:86404kB bounce:0kB free_pcp:1192kB local_pcp:748kB free_cma:0kB [ 1439.985892] devpts: called with bogus options 02:26:41 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1440.014854] lowmem_reserve[]: 0 0 0 0 [ 1440.019055] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.045368] lowmem_reserve[]: 0 0 0 0 [ 1440.074069] Node 1 Normal free:71656kB min:53420kB low:66772kB high:80124kB active_anon:3016080kB inactive_anon:16kB active_file:4184kB inactive_file:3472kB unevictable:0kB writepending:100kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:100448kB pagetables:264816kB bounce:0kB free_pcp:816kB local_pcp:676kB free_cma:0kB [ 1440.109088] devpts: called with bogus options [ 1440.150139] net_ratelimit: 14 callbacks suppressed [ 1440.150145] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.150451] lowmem_reserve[]: [ 1440.157967] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.160918] 0 [ 1440.170268] audit: type=1800 audit(1572229601.361:3191): pid=1302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=20009 res=0 [ 1440.175844] 0 [ 1440.211234] bond0: Releasing backup interface bond_slave_1 [ 1440.230129] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.238204] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.310142] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.317333] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.426274] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.441019] bond0: Releasing backup interface bond_slave_1 [ 1440.497009] bond0: Releasing backup interface bond_slave_1 [ 1440.535418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.540233] 0 0 [ 1440.545654] Node 0 DMA: 3*4kB (UM) 38*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10476kB [ 1440.576816] Node 0 DMA32: 245*4kB (ME) 918*8kB (UME) 917*16kB (UME) 186*32kB (UME) 20*64kB (ME) 15*128kB (ME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32660kB 02:26:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x6, 0x6d72, 0x943b, 0x0, 0x1, 0x8}}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1440.599818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1440.646289] Node 1 Normal: 837*4kB (UME) 854*8kB (UME) 92*16kB (UME) 348*32kB (UME) 319*64kB (UME) 109*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59204kB [ 1440.725917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.748400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1440.776567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.806519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1440.833490] 2965 total pagecache pages [ 1440.887015] 0 pages in swap cache [ 1440.914462] Swap cache stats: add 0, delete 0, find 0/0 [ 1440.928181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.959532] Free swap = 0kB [ 1440.977038] Total swap = 0kB [ 1440.996721] 1965979 pages RAM 02:26:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1441.014737] 0 pages HighMem/MovableOnly [ 1441.030167] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.036717] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.049344] 333229 pages reserved [ 1441.081340] devpts: called with bogus options [ 1441.093817] 0 pages cma reserved [ 1441.109276] Out of memory: Kill process 1264 (syz-executor.3) score 1007 or sacrifice child 02:26:42 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r2, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1441.178661] devpts: called with bogus options 02:26:42 executing program 5: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f0000000500)}], 0x1, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x20000000000}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5e831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc3cf00000000000000000000000000003dd9bde3949294a9ccb10ac463f7afe909889a634080e83b1fe39e296c349b26bdceed20dd299913fb9ac6e795eec5a998420aaab75e1c047780c61aa5a408495b5761d0c34994056e2d1e95681b360aae85d32f7e872324c9bcba16aac2350a80544224d543e8a76231c7b039dc", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 02:26:42 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd53f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40000, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x1}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x2}, &(0x7f0000000400)=0x8) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000480)={0x0, 0x0, 0x80, 0xe2, 'syz1\x00', 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0) write$vhci(r5, 0x0, 0x217) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lo.:file0,wo\x00kdir=./file1\x00\x00\x00\x00\x00\x00\x00']) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x0) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x523) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000500)='.//ile0\x00', r6, &(0x7f00000004c0)='./file0/f.le.\x00') [ 1441.270120] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.276519] protocol 88fb is buggy, dev hsr_slave_1 02:26:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1441.383343] devpts: called with bogus options [ 1441.424163] overlayfs: unrecognized mount option "lo.:file0" or missing value [ 1441.483067] devpts: called with bogus options [ 1441.528317] overlayfs: unrecognized mount option "lo.:file0" or missing value [ 1441.569196] audit: type=1800 audit(1572229602.761:3192): pid=1336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=20129 res=0 [ 1441.592074] devpts: called with bogus options [ 1441.623355] bond0: Releasing backup interface bond_slave_1 [ 1441.668598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1441.678939] bond0: Releasing backup interface bond_slave_1 [ 1441.686308] devpts: called with bogus options [ 1441.725285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1441.732063] devpts: called with bogus options [ 1441.802737] bond0: Releasing backup interface bond_slave_1 [ 1441.844744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1441.854196] bond0: Error: Device is in use and cannot be enslaved [ 1441.918845] bond0: Releasing backup interface bond_slave_1 [ 1441.971823] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:26:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0b5607da4c0df2691b7f4729d5e3eefca6852daa8321bd6dfd037a785658f2c777163288c7dc18ff93a9bcb4be9cc02b2e7723d0efb474ec7acba7c4a9e2a1ade65d694ac84289b0d94ee9b79445f57227cad4313126a0dc54215ce65e8065eaaa477f59503bc99fae6c4f436ed93ce9f97ab130f27b9d7c056e94bd0e949c706b87eee2f17d16bd949a3d5555b64d56ff7346faa14c9e4e976ad319ba7dcf8500"/172, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, 0x8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID(r2, 0x8188aea6, &(0x7f0000000040)) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) dup2(r5, r2) [ 1442.604290] devpts: called with bogus options 02:26:43 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='syscall\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:43 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="fcaa06fb84dd60e1652b467c5c6ebc83ad2cea5877fb001806b6d8fc8a72551500000000000d00000000aafe8000000000000000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002044bfb"], 0x0) 02:26:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x0) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000380)={0x0, "14049fe7630faf4d107612a7d9e1e0520e1316d5a972a31fea0bc5e2d4d04342", 0x0, 0x0, 0x3f, 0x0, 0x10, 0x0, 0xb37}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x35, 0x4, 0x1, "27833039950eba3e9c20af3ea5be52b3", "7663ff9459f5f5e6c509543753dc5ee0f9f8e3ca1f3232e58a3498e9312497d3"}, 0x35, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/149) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000580)={0x0, 0x4, 0x7ff}) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x7, 0x202) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x4e22, 0xfe6a, 0x4e24, 0x7, 0xa, 0x30, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0xfffffffffffff800, 0x7ff, 0x80000001, 0x551, 0x2, 0x9, 0x40, 0x3}, {0x2, 0x7, 0x1, 0x7fff}, 0xf, 0x6e6bc0, 0x0, 0xf4916a56f506b67c, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0xc634876ea18e2183, 0x7f, 0x7fffffff, 0xfffffe01, 0x3}}, 0xe8) 02:26:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1442.903386] devpts: called with bogus options [ 1443.087953] libceph: mon0 [::1]:6789 socket error on write [ 1443.094343] devpts: called with bogus options [ 1443.124620] devpts: called with bogus options 02:26:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r11]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r10, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1443.169743] libceph: mon0 [::1]:6789 socket error on write 02:26:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000380)={0x0, "14049fe7630faf4d107612a7d9e1e0520e1316d5a972a31fea0bc5e2d4d04342", 0x0, 0x0, 0x3f, 0x0, 0x10, 0x0, 0xb37}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x35, 0x4, 0x1, "27833039950eba3e9c20af3ea5be52b3", "7663ff9459f5f5e6c509543753dc5ee0f9f8e3ca1f3232e58a3498e9312497d3"}, 0x35, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/149) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000580)={0x0, 0x4, 0x7ff}) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x7, 0x202) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x4e22, 0xfe6a, 0x4e24, 0x7, 0xa, 0x30, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0xfffffffffffff800, 0x7ff, 0x80000001, 0x551, 0x2, 0x9, 0x40, 0x3}, {0x2, 0x7, 0x1, 0x7fff}, 0xf, 0x6e6bc0, 0x0, 0xf4916a56f506b67c, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0xc634876ea18e2183, 0x7f, 0x7fffffff, 0xfffffe01, 0x3}}, 0xe8) 02:26:44 executing program 4: perf_event_open(&(0x7f000001d000)={0xf, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0x7, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x6) syz_open_dev$sndmidi(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x39b015852fdfc3a3, 0x4) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) getpeername(r4, &(0x7f0000000380)=@isdn, &(0x7f00000002c0)=0x80) preadv(r3, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="290000b024ef7f00faffffffff8b000000200000000100000000ca0eed624198c458804e7c846add914e09a3bf3fc7c67329fb15f27a5b228ceb9aad441e64bd6dc53d9967420da8921a4d65b79564731031fab33abc77abc933aabb8235ddb3c72e915c003f"], 0xfffffffffffffde8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000080)=""/69, 0x45}], 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x3, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1}, 0x10) [ 1443.237979] devpts: called with bogus options [ 1443.329864] bond0: Releasing backup interface bond_slave_1 [ 1443.378515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1443.390464] bond0: Error: Device is in use and cannot be enslaved 02:26:44 executing program 5: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="8f643d", @ANYRESHEX, @ANYBLOB="2c726f7a746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d590a9a7d002a56d0f5d01961234eac5535a930fca9eefbf976e0c928ac8f8655d0c2cf67bae2351bca1fc0a0b50e02d577e7841407ec61451a164cf973f8d3405db7f13fe3ce1bc96dce90adaa546f13963547a97abc09e9dba1fbc3507a961b33f6ac7bb64e1791ad0000000000000000", @ANYRESDEC=0x0, @ANYBLOB="2cc395ea070000000000000000e30046cf2ac93be5285b32508128d1b737d899bd259ee8ac264c2511d5b1143e9c509f67fb10a0e33e802c87159d0448ccc67c54e1535c0595333ae3176b95c73dcc66af0c91036251626ea075ead9f0e99ba0e6a7bafa8a50314f83fd84bbb4ade2c8e1d28c7db972861f40864aa460806c5d4082689fe1cac6ad818c8de092a03f5a22a9b3a55e94cd4d071f7c0709c42a995b98dc5e7386a5948f558024019f18d6f7b51278bb2da615727b9bdae83e19a4b3710d1131", @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x89b1, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_map={0x3, 0x4, 0x100, 0x27, 0x80, 0x17}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) [ 1443.555232] devpts: called with bogus options [ 1443.610448] devpts: called with bogus options 02:26:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000380)={0x0, "14049fe7630faf4d107612a7d9e1e0520e1316d5a972a31fea0bc5e2d4d04342", 0x0, 0x0, 0x3f, 0x0, 0x10, 0x0, 0xb37}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x35, 0x4, 0x1, "27833039950eba3e9c20af3ea5be52b3", "7663ff9459f5f5e6c509543753dc5ee0f9f8e3ca1f3232e58a3498e9312497d3"}, 0x35, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/149) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000580)={0x0, 0x4, 0x7ff}) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x7, 0x202) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x4e22, 0xfe6a, 0x4e24, 0x7, 0xa, 0x30, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0xfffffffffffff800, 0x7ff, 0x80000001, 0x551, 0x2, 0x9, 0x40, 0x3}, {0x2, 0x7, 0x1, 0x7fff}, 0xf, 0x6e6bc0, 0x0, 0xf4916a56f506b67c, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0xc634876ea18e2183, 0x7f, 0x7fffffff, 0xfffffe01, 0x3}}, 0xe8) [ 1443.642171] libceph: mon0 [::1]:6789 socket error on write [ 1443.796732] bond0: Releasing backup interface bond_slave_1 [ 1443.822237] devpts: called with bogus options [ 1443.844483] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1444.083151] audit: type=1800 audit(1572229605.281:3193): pid=1451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=19719 res=0 [ 1444.107313] bond0: Releasing backup interface bond_slave_1 [ 1444.772096] devpts: called with bogus options [ 1444.869537] libceph: mon0 [::1]:6789 socket error on write [ 1445.190149] net_ratelimit: 16 callbacks suppressed [ 1445.190155] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.202956] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.430167] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.436843] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.881564] devpts: called with bogus options 02:26:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000300)={0x0, 0x1}) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r8, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r9]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:47 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000380)={0x0, "14049fe7630faf4d107612a7d9e1e0520e1316d5a972a31fea0bc5e2d4d04342", 0x0, 0x0, 0x3f, 0x0, 0x10, 0x0, 0xb37}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x35, 0x4, 0x1, "27833039950eba3e9c20af3ea5be52b3", "7663ff9459f5f5e6c509543753dc5ee0f9f8e3ca1f3232e58a3498e9312497d3"}, 0x35, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/149) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000580)={0x0, 0x4, 0x7ff}) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x7, 0x202) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x4e22, 0xfe6a, 0x4e24, 0x7, 0xa, 0x30, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0xfffffffffffff800, 0x7ff, 0x80000001, 0x551, 0x2, 0x9, 0x40, 0x3}, {0x2, 0x7, 0x1, 0x7fff}, 0xf, 0x6e6bc0, 0x0, 0xf4916a56f506b67c, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0xc634876ea18e2183, 0x7f, 0x7fffffff, 0xfffffe01, 0x3}}, 0xe8) 02:26:47 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x200003, 0x7}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r2, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpgrp(r2) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r8, 0x28007d) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r9, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x24c400, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395835d9561cf6491c20600e30046cf6f339d88a2230407a000ce4654893b2fd4a5db", @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc395ea5d9561cf6491c20600e300", @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r10]) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:47 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x6a0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x4, 0x5, 0x7, 'queue0\x00', 0x81}) [ 1446.010654] devpts: called with bogus options 02:26:47 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40080, 0x0) ftruncate(r3, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100a0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) [ 1446.079617] devpts: called with bogus options 02:26:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r9, @ANYBLOB="2cc395ea5d9561cf6491c20600e30046cf", @ANYRES64]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r11, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r12, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r12, 0x8919, &(0x7f0000000240)={'bo%\xeep\x83\xc1\x9d\x96\x12!!\x00\x01\x00', @ifru_settings={0x6, 0x6, @fr=&(0x7f0000000340)={0x49f, 0x1000, 0xfe8d, 0x3f, 0x9, 0xffff, 0x20}}}) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x100a0, &(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r12]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)=0x2da) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000002c0)=0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x50000}, 0x1c) 02:26:47 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000380)={0x0, "14049fe7630faf4d107612a7d9e1e0520e1316d5a972a31fea0bc5e2d4d04342", 0x0, 0x0, 0x3f, 0x0, 0x10, 0x0, 0xb37}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x35, 0x4, 0x1, "27833039950eba3e9c20af3ea5be52b3", "7663ff9459f5f5e6c509543753dc5ee0f9f8e3ca1f3232e58a3498e9312497d3"}, 0x35, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/149) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000580)={0x0, 0x4, 0x7ff}) syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x7, 0x202) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x4e22, 0xfe6a, 0x4e24, 0x7, 0xa, 0x30, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0xfffffffffffff800, 0x7ff, 0x80000001, 0x551, 0x2, 0x9, 0x40, 0x3}, {0x2, 0x7, 0x1, 0x7fff}, 0xf, 0x6e6bc0, 0x0, 0xf4916a56f506b67c, 0x2, 0x1}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0xc634876ea18e2183, 0x7f, 0x7fffffff, 0xfffffe01, 0x3}}, 0xe8) [ 1446.179383] libceph: mon0 [::1]:6789 socket error on write 02:26:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0xd, &(0x7f0000000340)=""/24, &(0x7f0000000380)=0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/107, 0x6b}], 0x3}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001400)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300), 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x42000, 0x0) [ 1446.400150] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.408514] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.470167] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.478080] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.495973] devpts: called with bogus options [ 1446.547485] devpts: called with bogus options [ 1446.550154] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.559093] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.597232] devpts: called with bogus options [ 1446.770362] audit: type=1800 audit(1572229607.961:3194): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=20491 res=0 [ 1446.813342] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1447.035244] syz-executor.4: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1447.074240] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1447.106008] CPU: 0 PID: 1512 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 1447.112988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.122352] Call Trace: [ 1447.124954] dump_stack+0x138/0x197 [ 1447.128590] warn_alloc.cold+0x96/0x1af [ 1447.132584] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1447.137476] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1447.142757] __alloc_pages_slowpath+0x23c6/0x2930 [ 1447.147612] ? save_trace+0x290/0x290 [ 1447.151424] ? warn_alloc+0xf0/0xf0 [ 1447.155063] ? __might_sleep+0x93/0xb0 [ 1447.158952] __alloc_pages_nodemask+0x62c/0x7a0 [ 1447.163619] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1447.168639] ? ____cache_alloc_node+0x1be/0x1d0 [ 1447.173310] ? cache_grow_begin+0x335/0x400 [ 1447.177633] cache_grow_begin+0x80/0x400 [ 1447.181692] ? __cpuset_node_allowed+0xff/0x450 [ 1447.186364] fallback_alloc+0x1fd/0x2c0 [ 1447.190343] ____cache_alloc_node+0x1be/0x1d0 [ 1447.194840] __kmalloc+0x21a/0x7a0 [ 1447.198378] ? __lockdep_init_map+0x10c/0x570 [ 1447.202873] ? kasan_unpoison_shadow+0x35/0x50 [ 1447.207463] ? mempool_kmalloc+0x1e/0x30 [ 1447.211526] ? mempool_resize+0x600/0x600 [ 1447.215671] mempool_kmalloc+0x1e/0x30 [ 1447.219561] mempool_create_node+0x2d6/0x3d0 [ 1447.223972] ? mempool_resize+0x600/0x600 [ 1447.228115] ? generic_file_write_iter+0x660/0x660 [ 1447.233168] mempool_create+0x3a/0x50 [ 1447.236977] ceph_mount+0x706/0x1709 [ 1447.240692] ? __lockdep_init_map+0x10c/0x570 [ 1447.245192] mount_fs+0x97/0x2a1 [ 1447.248566] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1447.253070] do_mount+0x417/0x27d0 [ 1447.256617] ? copy_mount_string+0x40/0x40 [ 1447.260853] ? memdup_user+0x58/0xa0 [ 1447.264563] ? copy_mount_options+0x1fe/0x2f0 [ 1447.269064] SyS_mount+0xab/0x120 [ 1447.272516] ? copy_mnt_ns+0x8c0/0x8c0 [ 1447.276424] do_syscall_64+0x1e8/0x640 [ 1447.280334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1447.285614] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1447.290801] RIP: 0033:0x459f39 [ 1447.293981] RSP: 002b:00007f5520527c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1447.301685] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f39 [ 1447.308952] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 1447.316219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1447.323494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55205286d4 [ 1447.330768] R13: 00000000004c6992 R14: 00000000004dbc90 R15: 00000000ffffffff [ 1447.557603] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1447.615467] blkid cpuset=/ mems_allowed=0-1 [ 1447.650162] CPU: 1 PID: 1497 Comm: blkid Not tainted 4.14.150 #0 [ 1447.656363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.665729] Call Trace: [ 1447.668329] dump_stack+0x138/0x197 [ 1447.671982] dump_header+0x177/0x6cd [ 1447.675705] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1447.680839] ? ___ratelimit+0x55/0x537 [ 1447.684733] oom_kill_process.cold+0x10/0xadd [ 1447.689242] ? rcu_read_unlock_special+0x895/0xd40 [ 1447.694182] ? lock_downgrade+0x740/0x740 [ 1447.698337] out_of_memory+0x2ee/0x1180 [ 1447.702351] ? lock_acquire+0x16f/0x430 [ 1447.706351] ? oom_killer_disable+0x1d0/0x1d0 [ 1447.710846] ? __alloc_pages_slowpath+0xca4/0x2930 [ 1447.715757] __alloc_pages_slowpath+0x2251/0x2930 [ 1447.720586] ? warn_alloc+0xf0/0xf0 [ 1447.724201] ? __might_sleep+0x93/0xb0 [ 1447.728068] __alloc_pages_nodemask+0x62c/0x7a0 [ 1447.732718] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1447.737723] ? ____cache_alloc_node+0x1be/0x1d0 [ 1447.742372] ? cache_grow_begin+0x335/0x400 [ 1447.746675] cache_grow_begin+0x80/0x400 [ 1447.750717] ? __cpuset_node_allowed+0xff/0x450 [ 1447.755369] fallback_alloc+0x1fd/0x2c0 [ 1447.759326] ____cache_alloc_node+0x1be/0x1d0 [ 1447.763806] kmem_cache_alloc+0x1f3/0x780 [ 1447.767959] ? __do_page_fault+0x4e9/0xb80 [ 1447.772201] getname_flags+0xcb/0x580 [ 1447.775995] getname+0x1a/0x20 [ 1447.779171] do_sys_open+0x1e7/0x430 [ 1447.782874] ? filp_open+0x70/0x70 [ 1447.786405] SyS_open+0x2d/0x40 [ 1447.789669] ? do_sys_open+0x430/0x430 [ 1447.793542] do_syscall_64+0x1e8/0x640 [ 1447.797420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1447.802252] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1447.807429] RIP: 0033:0x7f2a7118e120 [ 1447.811118] RSP: 002b:00007ffea98b13b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1447.818807] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a7118e120 [ 1447.826055] RDX: 00007ffea98b2f32 RSI: 0000000000000000 RDI: 00007ffea98b2f32 [ 1447.833318] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 1447.840567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000bf0030 [ 1447.847818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 1448.020114] Mem-Info: [ 1448.028604] active_anon:1170168 inactive_anon:462 isolated_anon:0 [ 1448.028604] active_file:358 inactive_file:344 isolated_file:6 [ 1448.028604] unevictable:0 dirty:139 writeback:1 unstable:0 [ 1448.028604] slab_reclaimable:23626 slab_unreclaimable:178608 [ 1448.028604] mapped:52812 shmem:517 pagetables:88234 bounce:0 [ 1448.028604] free:23168 free_pcp:117 free_cma:0 [ 1448.160744] Node 0 active_anon:1648232kB inactive_anon:1840kB active_file:732kB inactive_file:664kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:209956kB dirty:260kB writeback:0kB shmem:2048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1448.255203] Node 1 active_anon:3032440kB inactive_anon:8kB active_file:600kB inactive_file:612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1092kB dirty:196kB writeback:4kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1448.359594] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.465116] lowmem_reserve[]: 0 2580 2580 2580 [ 1448.484773] Mem-Info: [ 1448.491923] Node 0 DMA32 free:27948kB min:36468kB low:45584kB high:54700kB active_anon:1645580kB inactive_anon:1840kB active_file:632kB inactive_file:552kB unevictable:0kB writepending:260kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13280kB pagetables:87088kB bounce:0kB free_pcp:592kB local_pcp:112kB free_cma:0kB [ 1448.527414] active_anon:1170169 inactive_anon:462 isolated_anon:0 [ 1448.527414] active_file:237 inactive_file:242 isolated_file:12 [ 1448.527414] unevictable:0 dirty:114 writeback:1 unstable:0 [ 1448.527414] slab_reclaimable:23626 slab_unreclaimable:178610 [ 1448.527414] mapped:52567 shmem:517 pagetables:88234 bounce:0 [ 1448.527414] free:23454 free_pcp:90 free_cma:0 [ 1448.675189] lowmem_reserve[]: 0 0 0 0 [ 1448.698057] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.733524] Node 0 active_anon:1648232kB inactive_anon:1840kB active_file:544kB inactive_file:492kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:209636kB dirty:260kB writeback:0kB shmem:2048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 722944kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1448.831798] lowmem_reserve[]: 0 0 0 0 [ 1448.856066] Node 1 Normal free:54752kB min:53420kB low:66772kB high:80124kB active_anon:3032444kB inactive_anon:8kB active_file:712kB inactive_file:1108kB unevictable:0kB writepending:300kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:101088kB pagetables:265660kB bounce:0kB free_pcp:368kB local_pcp:228kB free_cma:0kB [ 1448.892273] Node 1 active_anon:3032444kB inactive_anon:8kB active_file:404kB inactive_file:1160kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:932kB dirty:196kB writeback:4kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1448.968706] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:2652kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.005806] lowmem_reserve[]: 0 0 0 0 [ 1449.025960] Node 0 DMA: 3*4kB (UM) 38*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10476kB [ 1449.115328] Node 0 DMA32: 182*4kB (UME) 698*8kB (UME) 818*16kB (UME) 171*32kB (UME) 22*64kB (ME) 15*128kB (ME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28712kB [ 1449.154855] lowmem_reserve[]: 0 2580 2580 2580 [ 1449.173931] Node 0 DMA32 free:28712kB min:36468kB low:45584kB high:54700kB active_anon:1645580kB inactive_anon:1840kB active_file:260kB inactive_file:444kB unevictable:0kB writepending:148kB present:3129332kB managed:2644884kB mlocked:0kB kernel_stack:13280kB pagetables:87088kB bounce:0kB free_pcp:312kB local_pcp:16kB free_cma:0kB [ 1449.224909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1449.276038] Node 1 Normal: 565*4kB (UMEH) 423*8kB (UME) 133*16kB (UME) 477*32kB (UMEH) 326*64kB (UME) 73*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53244kB [ 1449.357803] lowmem_reserve[]: 0 0 0 0 [ 1449.365082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.387629] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.429212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.455157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.477157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.489972] lowmem_reserve[]: 0 0 0 0 [ 1449.499115] Node 1 Normal free:54404kB min:53420kB low:66772kB high:80124kB active_anon:3032444kB inactive_anon:8kB active_file:516kB inactive_file:716kB unevictable:0kB writepending:144kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:101024kB pagetables:265660kB bounce:0kB free_pcp:988kB local_pcp:628kB free_cma:0kB [ 1449.540932] 778 total pagecache pages [ 1449.549263] 0 pages in swap cache [ 1449.559327] Swap cache stats: add 0, delete 0, find 0/0 [ 1449.574256] Free swap = 0kB [ 1449.581987] Total swap = 0kB [ 1449.588397] 1965979 pages RAM [ 1449.606246] 0 pages HighMem/MovableOnly [ 1449.614327] lowmem_reserve[]: 0 0 0 0 [ 1449.621562] 333229 pages reserved [ 1449.627740] Node 0 DMA: 3*4kB (UM) 38*8kB (UH) 31*16kB (UMEH) 16*32kB (UMH) 3*64kB (UME) 2*128kB (EH) 2*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10476kB [ 1449.628336] 0 pages cma reserved [ 1449.646535] Node 0 DMA32: 287*4kB (UME) 724*8kB (UME) 819*16kB (UME) 171*32kB (UME) 22*64kB (ME) 15*128kB (ME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29356kB [ 1449.686715] ================================================================== [ 1449.694540] BUG: KASAN: use-after-free in ceph_destroy_options+0xe9/0x110 [ 1449.701471] Read of size 8 at addr ffff8880a68f3910 by task syz-executor.4/1512 [ 1449.708913] [ 1449.710549] CPU: 0 PID: 1512 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 1449.714531] Node 0 [ 1449.717475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.717484] Call Trace: [ 1449.717505] dump_stack+0x138/0x197 [ 1449.723327] Normal: [ 1449.729082] ? ceph_destroy_options+0xe9/0x110 [ 1449.729097] print_address_description.cold+0x7c/0x1dc [ 1449.741124] 0*4kB [ 1449.742199] ? ceph_destroy_options+0xe9/0x110 [ 1449.742213] kasan_report.cold+0xa9/0x2af [ 1449.758319] __asan_report_load8_noabort+0x14/0x20 [ 1449.760486] 0*8kB [ 1449.763250] ceph_destroy_options+0xe9/0x110 [ 1449.763266] ceph_mount+0xb6d/0x1709 [ 1449.763280] ? __lockdep_init_map+0x10c/0x570 [ 1449.767231] 0*16kB [ 1449.769816] mount_fs+0x97/0x2a1 [ 1449.773566] 0*32kB [ 1449.777978] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1449.790091] 0*64kB 0*128kB 0*256kB 0*512kB [ 1449.790247] do_mount+0x417/0x27d0 [ 1449.790263] ? copy_mount_string+0x40/0x40 [ 1449.794563] 0*1024kB [ 1449.798092] ? memdup_user+0x58/0xa0 [ 1449.808409] ? copy_mount_options+0x1fe/0x2f0 [ 1449.810081] 0*2048kB 0*4096kB [ 1449.812903] SyS_mount+0xab/0x120 [ 1449.812908] = 0kB [ 1449.816079] ? copy_mnt_ns+0x8c0/0x8c0 [ 1449.819523] Node 1 [ 1449.821567] do_syscall_64+0x1e8/0x640 [ 1449.821576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1449.821593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1449.821601] RIP: 0033:0x459f39 [ 1449.840084] Normal: [ 1449.841551] RSP: 002b:00007f5520527c78 EFLAGS: 00000246 [ 1449.844721] 1140*4kB [ 1449.847019] ORIG_RAX: 00000000000000a5 [ 1449.858704] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f39 [ 1449.865972] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 1449.870087] (UMEH) [ 1449.873580] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1449.873588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55205286d4 [ 1449.875808] 514*8kB [ 1449.883069] R13: 00000000004c6992 R14: 00000000004dbc90 R15: 00000000ffffffff [ 1449.883086] [ 1449.883093] Allocated by task 1512: [ 1449.883110] save_stack_trace+0x16/0x20 [ 1449.883122] save_stack+0x45/0xd0 [ 1449.900416] (UME) [ 1449.901578] kasan_kmalloc+0xce/0xf0 [ 1449.905182] 129*16kB [ 1449.909134] kmem_cache_alloc_trace+0x152/0x790 [ 1449.909146] ceph_parse_options+0xb8/0xe80 [ 1449.912609] (UME) [ 1449.914727] ceph_mount+0x3c1/0x1709 [ 1449.914736] mount_fs+0x97/0x2a1 [ 1449.918419] 483*32kB [ 1449.920814] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1449.920821] do_mount+0x417/0x27d0 [ 1449.920827] SyS_mount+0xab/0x120 [ 1449.920841] do_syscall_64+0x1e8/0x640 [ 1449.920855] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1449.920859] [ 1449.920864] Freed by task 1512: [ 1449.920877] save_stack_trace+0x16/0x20 [ 1449.926427] (UMEH) [ 1449.929737] save_stack+0x45/0xd0 [ 1449.929750] kasan_slab_free+0x75/0xc0 [ 1449.931912] 326*64kB [ 1449.935565] kfree+0xcc/0x270 [ 1449.935580] ceph_destroy_options+0xdc/0x110 [ 1449.938909] (UME) 74*128kB [ 1449.941306] ceph_destroy_client+0x9d/0xc0 [ 1449.941315] ceph_mount+0xb46/0x1709 [ 1449.941323] mount_fs+0x97/0x2a1 [ 1449.941331] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1449.941340] do_mount+0x417/0x27d0 [ 1449.945806] (M) [ 1449.949327] SyS_mount+0xab/0x120 [ 1449.952776] 0*256kB [ 1449.956622] do_syscall_64+0x1e8/0x640 [ 1449.956634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1449.961813] 0*512kB [ 1449.963403] [ 1449.966658] 0*1024kB [ 1449.970618] The buggy address belongs to the object at ffff8880a68f3840 [ 1449.970618] which belongs to the cache kmalloc-256 of size 256 [ 1449.970625] The buggy address is located 208 bytes inside of [ 1449.970625] 256-byte region [ffff8880a68f3840, ffff8880a68f3940) [ 1449.970629] The buggy address belongs to the page: [ 1449.970637] page:ffffea00029a3cc0 count:1 mapcount:0 mapping:ffff8880a68f30c0 index:0x0 [ 1449.972850] 0*2048kB 0*4096kB [ 1449.976285] flags: 0x1fffc0000000100(slab) [ 1449.980187] = 56528kB [ 1449.982565] raw: 01fffc0000000100 ffff8880a68f30c0 0000000000000000 000000010000000c [ 1449.985652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.990035] raw: ffffea00024ee1a0 ffffea00029804a0 ffff8880aa8007c0 0000000000000000 [ 1449.990039] page dumped because: kasan: bad access detected [ 1449.990042] [ 1449.990045] Memory state around the buggy address: [ 1449.990053] ffff8880a68f3800: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1449.990059] ffff8880a68f3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1449.992967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.997183] >ffff8880a68f3900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1450.000893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.004222] ^ [ 1450.004229] ffff8880a68f3980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1450.008703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.012218] ffff8880a68f3a00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1450.012222] ================================================================== [ 1450.012226] Disabling lock debugging due to kernel taint [ 1450.069278] Kernel panic - not syncing: panic_on_warn set ... [ 1450.069278] [ 1450.206193] CPU: 0 PID: 1512 Comm: syz-executor.4 Tainted: G B 4.14.150 #0 [ 1450.214313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.223656] Call Trace: [ 1450.226232] dump_stack+0x138/0x197 [ 1450.229840] ? ceph_destroy_options+0xe9/0x110 [ 1450.234430] panic+0x1f9/0x42d [ 1450.237601] ? add_taint.cold+0x16/0x16 [ 1450.241555] ? ___preempt_schedule+0x16/0x18 [ 1450.245952] kasan_end_report+0x47/0x4f [ 1450.249905] kasan_report.cold+0x130/0x2af [ 1450.254121] __asan_report_load8_noabort+0x14/0x20 [ 1450.259029] ceph_destroy_options+0xe9/0x110 [ 1450.263419] ceph_mount+0xb6d/0x1709 [ 1450.267127] ? __lockdep_init_map+0x10c/0x570 [ 1450.271602] mount_fs+0x97/0x2a1 [ 1450.274963] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1450.279448] do_mount+0x417/0x27d0 [ 1450.282969] ? copy_mount_string+0x40/0x40 [ 1450.287186] ? memdup_user+0x58/0xa0 [ 1450.290898] ? copy_mount_options+0x1fe/0x2f0 [ 1450.295374] SyS_mount+0xab/0x120 [ 1450.298808] ? copy_mnt_ns+0x8c0/0x8c0 [ 1450.302674] do_syscall_64+0x1e8/0x640 [ 1450.306549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1450.311374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1450.316559] RIP: 0033:0x459f39 [ 1450.319739] RSP: 002b:00007f5520527c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1450.327442] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f39 [ 1450.334690] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040 [ 1450.341942] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1450.349195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55205286d4 [ 1450.356443] R13: 00000000004c6992 R14: 00000000004dbc90 R15: 00000000ffffffff [ 1450.365174] Kernel Offset: disabled [ 1450.368794] Rebooting in 86400 seconds..