[ 43.520695][ T25] audit: type=1800 audit(1570809043.531:22): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 43.550821][ T25] audit: type=1800 audit(1570809043.531:23): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 44.254793][ T7152] sshd (7152) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts. 2019/10/11 15:50:55 fuzzer started 2019/10/11 15:50:56 dialing manager at 10.128.0.105:43913 2019/10/11 15:50:56 syscalls: 2523 2019/10/11 15:50:56 code coverage: enabled 2019/10/11 15:50:56 comparison tracing: enabled 2019/10/11 15:50:56 extra coverage: extra coverage is not supported by the kernel 2019/10/11 15:50:56 setuid sandbox: enabled 2019/10/11 15:50:56 namespace sandbox: enabled 2019/10/11 15:50:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/11 15:50:56 fault injection: enabled 2019/10/11 15:50:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/11 15:50:56 net packet injection: enabled 2019/10/11 15:50:56 net device setup: enabled 2019/10/11 15:50:56 concurrency sanitizer: enabled 15:50:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) syzkaller login: [ 58.914126][ T7258] IPVS: ftp: loaded support on port[0] = 21 15:50:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) [ 58.999629][ T7258] chnl_net:caif_netlink_parms(): no params data found [ 59.038968][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.046703][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.062295][ T7258] device bridge_slave_0 entered promiscuous mode [ 59.078424][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.085605][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.108170][ T7258] device bridge_slave_1 entered promiscuous mode [ 59.160876][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.179396][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.204168][ T7258] team0: Port device team_slave_0 added [ 59.211180][ T7258] team0: Port device team_slave_1 added [ 59.310065][ T7258] device hsr_slave_0 entered promiscuous mode 15:50:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 59.379074][ T7258] device hsr_slave_1 entered promiscuous mode [ 59.445209][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.452337][ T7258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.459704][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.466751][ T7258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.516859][ T7261] IPVS: ftp: loaded support on port[0] = 21 15:50:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) [ 59.629456][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.676657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.689005][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.717529][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.748502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.773544][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.809315][ T7267] IPVS: ftp: loaded support on port[0] = 21 [ 59.816168][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.839132][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.846201][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.890126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.908907][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.915996][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.007613][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.016368][ T7268] IPVS: ftp: loaded support on port[0] = 21 [ 60.038409][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.048388][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.058713][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.068742][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.078968][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.091137][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 15:51:00 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 60.109105][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 60.133670][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.143039][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.166860][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.250695][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.283789][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.297213][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.305071][ T7261] device bridge_slave_0 entered promiscuous mode [ 60.344460][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.366746][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.388071][ T7261] device bridge_slave_1 entered promiscuous mode [ 60.428388][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 60.485424][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.513654][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.555890][ T7276] IPVS: ftp: loaded support on port[0] = 21 15:51:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) [ 60.619157][ T7261] team0: Port device team_slave_0 added [ 60.663117][ T7261] team0: Port device team_slave_1 added [ 60.726189][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.753109][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.769141][ T7267] device bridge_slave_0 entered promiscuous mode 15:51:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) [ 60.801096][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.818752][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state 15:51:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) [ 60.846600][ T7267] device bridge_slave_1 entered promiscuous mode 15:51:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) [ 60.920334][ T7261] device hsr_slave_0 entered promiscuous mode [ 60.987807][ T7261] device hsr_slave_1 entered promiscuous mode [ 61.018021][ T7261] debugfs: Directory 'hsr0' with parent '/' already present! 15:51:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) [ 61.034695][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 61.072433][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.105865][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.221047][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.238976][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 61.249430][ T7267] team0: Port device team_slave_0 added [ 61.277422][ T7267] team0: Port device team_slave_1 added [ 61.291333][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.296285][ T7295] IPVS: ftp: loaded support on port[0] = 21 [ 61.299119][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.317586][ T7268] device bridge_slave_0 entered promiscuous mode [ 61.325753][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.333392][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.341497][ T7268] device bridge_slave_1 entered promiscuous mode [ 61.349750][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.358279][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.367714][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 15:51:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) [ 61.419588][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.491051][ T7267] device hsr_slave_0 entered promiscuous mode [ 61.547468][ T7267] device hsr_slave_1 entered promiscuous mode [ 61.587156][ T7267] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.596092][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.605722][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.614530][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.622937][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.629998][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.641421][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.649153][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.656843][ T7276] device bridge_slave_0 entered promiscuous mode [ 61.668512][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.675569][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.683591][ T7276] device bridge_slave_1 entered promiscuous mode [ 61.699284][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.714704][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.725246][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.751312][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.760873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.769377][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.776442][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.784550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.793767][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.802902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.811492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.820376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.829215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.838219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.846604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.855360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.863991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.872746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.881348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:51:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) [ 61.918286][ T7268] team0: Port device team_slave_0 added [ 61.949214][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.969761][ T7268] team0: Port device team_slave_1 added [ 61.984631][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.010560][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.046401][ T7276] team0: Port device team_slave_0 added [ 62.072537][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.086019][ T7276] team0: Port device team_slave_1 added [ 62.119922][ T7268] device hsr_slave_0 entered promiscuous mode [ 62.167597][ T7268] device hsr_slave_1 entered promiscuous mode [ 62.207228][ T7268] debugfs: Directory 'hsr0' with parent '/' already present! 15:51:02 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) 15:51:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) [ 62.330124][ T7276] device hsr_slave_0 entered promiscuous mode [ 62.357651][ T7276] device hsr_slave_1 entered promiscuous mode [ 62.411029][ T7276] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.433801][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.464224][ T7265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.476169][ T7265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.544665][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.553335][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.562443][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.571001][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.578096][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.590337][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.604082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.612239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.621760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.630997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.638123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.655372][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.674201][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.698852][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 62.722476][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.731530][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.741491][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.750627][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.760777][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.769762][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.778618][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.787510][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.795836][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.804513][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.813102][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.821580][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.829338][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.837337][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.845814][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.874336][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.881911][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.889934][ T7295] device bridge_slave_0 entered promiscuous mode [ 62.897621][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.904675][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.912650][ T7295] device bridge_slave_1 entered promiscuous mode [ 62.931397][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.938547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.951162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.959533][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.966588][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.974750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.982488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.990609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.009199][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.021683][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.052756][ T7295] team0: Port device team_slave_0 added [ 63.059994][ T7295] team0: Port device team_slave_1 added [ 63.079213][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.087996][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.096519][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.103575][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.111669][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.121554][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.130681][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.139663][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.148477][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.155507][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.170103][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.186184][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.195362][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.204315][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.213321][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.222240][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.230852][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.239266][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.248343][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.310545][ T7295] device hsr_slave_0 entered promiscuous mode [ 63.347608][ T7295] device hsr_slave_1 entered promiscuous mode [ 63.387386][ T7295] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.398006][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.417011][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.426659][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.436071][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.448134][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.456475][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.463664][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.471776][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.481241][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.490308][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.499038][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.508059][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.516712][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.525716][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.534244][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.542887][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.551500][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.560518][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.588459][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.600695][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.642996][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.654426][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.694597][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.707746][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.729078][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.751408][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.768978][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.791310][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.798465][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.822580][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.872585][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.894141][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.906083][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.913195][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.921727][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.931217][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.940687][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.949513][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.959161][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.968471][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.983499][ T7295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 15:51:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:51:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) [ 64.043549][ T7295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.078673][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.101482][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.115572][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.135251][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.170822][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:51:04 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 15:51:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) 15:51:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 15:51:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:51:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 15:51:04 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:51:04 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 15:51:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5}) 15:51:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:05 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) 15:51:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:51:06 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) 15:51:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xb1) 15:51:06 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) 15:51:06 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/11, 0x567) 15:51:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100)) 15:51:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 66.640149][ C1] hrtimer: interrupt took 44991 ns [ 66.702406][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100)) 15:51:06 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) [ 66.802933][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 66.802962][ T25] audit: type=1800 audit(1570809066.841:31): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16579 res=0 [ 66.909715][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.936713][ T25] audit: type=1800 audit(1570809066.991:32): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16579 res=0 15:51:07 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) 15:51:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100)) 15:51:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:07 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48) [ 67.260666][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.288104][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.377374][ T25] audit: type=1800 audit(1570809067.431:33): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16585 res=0 [ 67.505493][ T25] audit: type=1800 audit(1570809067.561:34): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16584 res=0 15:51:08 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/11, 0x567) 15:51:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100)) 15:51:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 68.152257][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 68.179743][ T7494] syz-executor.4 (7494) used greatest stack depth: 9232 bytes left [ 68.197404][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:51:08 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/11, 0x567) [ 68.237157][ T25] audit: type=1800 audit(1570809068.291:35): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16596 res=0 [ 68.272236][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.365970][ T25] audit: type=1800 audit(1570809068.301:36): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16597 res=0 [ 68.524963][ T25] audit: type=1800 audit(1570809068.371:37): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16598 res=0 [ 68.597644][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.702195][ T25] audit: type=1800 audit(1570809068.741:38): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16583 res=0 15:51:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) 15:51:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 69.153023][ T7513] syz-executor.0 (7513) used greatest stack depth: 9168 bytes left 15:51:09 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/11, 0x567) [ 69.424644][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.470514][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 69.528661][ T25] audit: type=1800 audit(1570809069.591:39): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16567 res=0 [ 69.558759][ T25] audit: type=1800 audit(1570809069.591:40): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16592 res=0 15:51:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 70.291906][ T7551] ================================================================== [ 70.300132][ T7551] BUG: KCSAN: data-race in ext4_es_lookup_extent / ext4_es_lookup_extent [ 70.308529][ T7551] [ 70.310944][ T7551] read to 0xffff888129c8c428 of 8 bytes by task 7546 on cpu 0: [ 70.318485][ T7551] ext4_es_lookup_extent+0x3ba/0x510 [ 70.323760][ T7551] ext4_map_blocks+0xc2/0xf70 [ 70.328432][ T7551] _ext4_get_block+0x12d/0x2b0 [ 70.333184][ T7551] ext4_dio_get_block+0x9f/0xb0 15:51:10 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/11, 0x567) [ 70.338026][ T7551] do_direct_IO+0x1409/0x59b0 [ 70.342693][ T7551] do_blockdev_direct_IO+0x6b7/0x4cc0 [ 70.348053][ T7551] __blockdev_direct_IO+0x86/0xa0 [ 70.353073][ T7551] ext4_direct_IO+0x32f/0xf70 [ 70.357761][ T7551] generic_file_read_iter+0x1b0/0x1440 [ 70.363214][ T7551] ext4_file_read_iter+0xfa/0x240 [ 70.368230][ T7551] generic_file_splice_read+0x35c/0x500 [ 70.373773][ T7551] do_splice_to+0xf2/0x130 [ 70.378187][ T7551] splice_direct_to_actor+0x1a1/0x510 [ 70.383560][ T7551] do_splice_direct+0x161/0x1e0 [ 70.388397][ T7551] 15:51:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1) fallocate(r0, 0x0, 0x0, 0x4003ff) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0) sendfile(r5, r5, 0x0, 0x8800000) [ 70.390723][ T7551] write to 0xffff888129c8c428 of 8 bytes by task 7551 on cpu 1: [ 70.398350][ T7551] ext4_es_lookup_extent+0x3d3/0x510 [ 70.403626][ T7551] ext4_map_blocks+0xc2/0xf70 [ 70.408296][ T7551] _ext4_get_block+0x12d/0x2b0 [ 70.413050][ T7551] ext4_dio_get_block+0x9f/0xb0 [ 70.417892][ T7551] do_direct_IO+0x1409/0x59b0 [ 70.422568][ T7551] do_blockdev_direct_IO+0x6b7/0x4cc0 [ 70.427933][ T7551] __blockdev_direct_IO+0x86/0xa0 [ 70.432946][ T7551] ext4_direct_IO+0x32f/0xf70 [ 70.437619][ T7551] generic_file_read_iter+0x1b0/0x1440 [ 70.443077][ T7551] ext4_file_read_iter+0xfa/0x240 [ 70.448103][ T7551] generic_file_splice_read+0x35c/0x500 [ 70.453645][ T7551] do_splice_to+0xf2/0x130 [ 70.458060][ T7551] splice_direct_to_actor+0x1a1/0x510 [ 70.463415][ T7551] [ 70.465729][ T7551] Reported by Kernel Concurrency Sanitizer on: [ 70.471877][ T7551] CPU: 1 PID: 7551 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 70.479317][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.489353][ T7551] ================================================================== [ 70.497394][ T7551] Kernel panic - not syncing: panic_on_warn set ... [ 70.503980][ T7551] CPU: 1 PID: 7551 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 70.511422][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.521458][ T7551] Call Trace: [ 70.524740][ T7551] dump_stack+0xf5/0x159 [ 70.528973][ T7551] panic+0x209/0x639 [ 70.532856][ T7551] ? generic_file_read_iter+0x1b0/0x1440 [ 70.538491][ T7551] ? vprintk_func+0x8d/0x140 [ 70.543071][ T7551] kcsan_report.cold+0xc/0x1b [ 70.547737][ T7551] __kcsan_setup_watchpoint+0x3ee/0x510 [ 70.553267][ T7551] ? __tsan_read8+0x2c/0x30 [ 70.557756][ T7551] __tsan_write8+0x32/0x40 [ 70.562160][ T7551] ext4_es_lookup_extent+0x3d3/0x510 [ 70.567435][ T7551] ext4_map_blocks+0xc2/0xf70 [ 70.572096][ T7551] ? __kcsan_setup_watchpoint+0x96/0x510 [ 70.577715][ T7551] ? __tsan_write8+0x32/0x40 [ 70.582291][ T7551] _ext4_get_block+0x12d/0x2b0 [ 70.587046][ T7551] ext4_dio_get_block+0x9f/0xb0 [ 70.591887][ T7551] do_direct_IO+0x1409/0x59b0 [ 70.596558][ T7551] ? __kcsan_setup_watchpoint+0x96/0x510 [ 70.602178][ T7551] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 70.608062][ T7551] ? __kcsan_setup_watchpoint+0x96/0x510 [ 70.613679][ T7551] ? __tsan_read8+0x2c/0x30 [ 70.618181][ T7551] do_blockdev_direct_IO+0x6b7/0x4cc0 [ 70.623543][ T7551] ? __tsan_write8+0x32/0x40 [ 70.628116][ T7551] ? __ext4_journal_stop+0xc0/0x150 [ 70.633301][ T7551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.639532][ T7551] ? 0xffffffff81000000 [ 70.643685][ T7551] ? ext4_dio_get_block_unwritten_sync+0xc0/0xc0 [ 70.650002][ T7551] ? __kcsan_setup_watchpoint+0x6c/0x510 [ 70.655623][ T7551] ? ext4_dio_get_block_unwritten_sync+0xc0/0xc0 [ 70.661935][ T7551] __blockdev_direct_IO+0x86/0xa0 [ 70.666950][ T7551] ext4_direct_IO+0x32f/0xf70 [ 70.671612][ T7551] ? __tsan_read8+0x2c/0x30 [ 70.676100][ T7551] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 70.681808][ T7551] ? atime_needs_update+0x2f3/0x360 [ 70.687008][ T7551] generic_file_read_iter+0x1b0/0x1440 [ 70.692467][ T7551] ? aa_file_perm+0x1f1/0x8a0 [ 70.697130][ T7551] ? __kcsan_setup_watchpoint+0x96/0x510 [ 70.702749][ T7551] ? __kcsan_setup_watchpoint+0x96/0x510 [ 70.708390][ T7551] ext4_file_read_iter+0xfa/0x240 [ 70.713414][ T7551] generic_file_splice_read+0x35c/0x500 [ 70.718956][ T7551] do_splice_to+0xf2/0x130 [ 70.723367][ T7551] ? add_to_pipe+0x1a0/0x1a0 [ 70.727944][ T7551] ? add_to_pipe+0x1a0/0x1a0 [ 70.732534][ T7551] splice_direct_to_actor+0x1a1/0x510 [ 70.737891][ T7551] ? generic_pipe_buf_nosteal+0x20/0x20 [ 70.743428][ T7551] do_splice_direct+0x161/0x1e0 [ 70.748274][ T7551] do_sendfile+0x384/0x7f0 [ 70.752690][ T7551] __x64_sys_sendfile64+0x12a/0x140 [ 70.757878][ T7551] do_syscall_64+0xcf/0x2f0 [ 70.762376][ T7551] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.768250][ T7551] RIP: 0033:0x459a59 [ 70.772137][ T7551] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.791724][ T7551] RSP: 002b:00007fa092790c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 70.800122][ T7551] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59 [ 70.808092][ T7551] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 70.816046][ T7551] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 70.824001][ T7551] R10: 0000000008800000 R11: 0000000000000246 R12: 00007fa0927916d4 [ 70.831957][ T7551] R13: 00000000004c748b R14: 00000000004dd038 R15: 00000000ffffffff [ 70.841183][ T7551] Kernel Offset: disabled [ 70.845511][ T7551] Rebooting in 86400 seconds..