[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.527929][ T26] audit: type=1800 audit(1569187328.670:25): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.567349][ T26] audit: type=1800 audit(1569187328.670:26): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.606352][ T26] audit: type=1800 audit(1569187328.680:27): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. 2019/09/22 21:22:19 fuzzer started 2019/09/22 21:22:21 dialing manager at 10.128.0.26:45237 2019/09/22 21:22:21 syscalls: 2493 2019/09/22 21:22:21 code coverage: enabled 2019/09/22 21:22:21 comparison tracing: enabled 2019/09/22 21:22:21 extra coverage: extra coverage is not supported by the kernel 2019/09/22 21:22:21 setuid sandbox: enabled 2019/09/22 21:22:21 namespace sandbox: enabled 2019/09/22 21:22:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/22 21:22:21 fault injection: enabled 2019/09/22 21:22:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/22 21:22:21 net packet injection: enabled 2019/09/22 21:22:21 net device setup: enabled 21:24:45 executing program 0: 21:24:45 executing program 1: syzkaller login: [ 213.350413][ T8829] IPVS: ftp: loaded support on port[0] = 21 21:24:45 executing program 2: [ 213.502052][ T8831] IPVS: ftp: loaded support on port[0] = 21 [ 213.525179][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 213.609882][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.627746][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.635934][ T8829] device bridge_slave_0 entered promiscuous mode [ 213.676406][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.697391][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.705393][ T8829] device bridge_slave_1 entered promiscuous mode 21:24:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="fe0d920481"], 0x3}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 213.796165][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.808484][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 213.819001][ T8835] IPVS: ftp: loaded support on port[0] = 21 [ 213.829431][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.936093][ T8829] team0: Port device team_slave_0 added [ 213.973291][ T8829] team0: Port device team_slave_1 added [ 213.982492][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.990179][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.007991][ T8831] device bridge_slave_0 entered promiscuous mode 21:24:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="fe0d920481"], 0x3}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.051129][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.067138][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.075184][ T8831] device bridge_slave_1 entered promiscuous mode [ 214.140088][ T8829] device hsr_slave_0 entered promiscuous mode [ 214.167345][ T8829] device hsr_slave_1 entered promiscuous mode [ 214.253130][ T8838] IPVS: ftp: loaded support on port[0] = 21 [ 214.299640][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.306880][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.314880][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.321974][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.354047][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.369766][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 21:24:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="fe0d920481"], 0x3}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r3, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.418455][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 214.433762][ T8831] team0: Port device team_slave_0 added [ 214.453097][ T8841] IPVS: ftp: loaded support on port[0] = 21 [ 214.495853][ T8831] team0: Port device team_slave_1 added [ 214.512241][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.531473][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.585402][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.593168][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.601125][ T8835] device bridge_slave_0 entered promiscuous mode [ 214.624005][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.631701][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.639015][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.647187][ T8835] device bridge_slave_1 entered promiscuous mode [ 214.652083][ T8844] IPVS: ftp: loaded support on port[0] = 21 [ 214.719403][ T8831] device hsr_slave_0 entered promiscuous mode [ 214.757291][ T8831] device hsr_slave_1 entered promiscuous mode [ 214.817121][ T8831] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.846107][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.858512][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.915183][ T8835] team0: Port device team_slave_0 added [ 214.924180][ T8835] team0: Port device team_slave_1 added [ 214.989875][ T8835] device hsr_slave_0 entered promiscuous mode [ 215.027505][ T8835] device hsr_slave_1 entered promiscuous mode [ 215.067380][ T8835] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.128012][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.136185][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.146295][ T8838] chnl_net:caif_netlink_parms(): no params data found [ 215.172100][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.179673][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 215.218362][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.230629][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.239396][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.246474][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.254249][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.262800][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.271362][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.278663][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.286237][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.294863][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.361830][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.371430][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.380810][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.389562][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.400957][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.409580][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.418526][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.437584][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.444654][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.452943][ T8838] device bridge_slave_0 entered promiscuous mode [ 215.461047][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.468242][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.476028][ T8838] device bridge_slave_1 entered promiscuous mode [ 215.502693][ T8829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.514621][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.540593][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 215.550207][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.558498][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.566441][ T8841] device bridge_slave_0 entered promiscuous mode [ 215.575071][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.583550][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.595891][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.607959][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.636720][ T8838] team0: Port device team_slave_0 added [ 215.645334][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.652912][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.660895][ T8841] device bridge_slave_1 entered promiscuous mode [ 215.683160][ T8838] team0: Port device team_slave_1 added [ 215.702494][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.729277][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.755084][ T8841] team0: Port device team_slave_0 added [ 215.809249][ T8838] device hsr_slave_0 entered promiscuous mode [ 215.867540][ T8838] device hsr_slave_1 entered promiscuous mode [ 215.907098][ T8838] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.925240][ T8841] team0: Port device team_slave_1 added [ 215.933755][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.959930][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.967891][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.974984][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.983763][ T8844] device bridge_slave_0 entered promiscuous mode [ 215.998104][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.005215][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.013758][ T8844] device bridge_slave_1 entered promiscuous mode [ 216.034327][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.045715][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.092844][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.116650][ T8844] team0: Port device team_slave_0 added [ 216.133214][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.146104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.156658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.220026][ T8841] device hsr_slave_0 entered promiscuous mode [ 216.267506][ T8841] device hsr_slave_1 entered promiscuous mode [ 216.307212][ T8841] debugfs: Directory 'hsr0' with parent '/' already present! [ 216.315884][ T8844] team0: Port device team_slave_1 added [ 216.332371][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.348156][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.355966][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:24:48 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20824}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x105, 0x101b, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) fanotify_init(0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x5) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x20, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="b425f5f0001362afc020b0c589802afcc7205c51315a994bfced4b8ad4a3fb8a0b8ba88827fef4ea3223b229e8741a99a92c92609649f5fd683fbc55e3", 0x3d, 0x1}, {&(0x7f0000000240)="7b29065b2c565c6ab8dbc1e7e4903ded5e37c8d9029d8a42a246cb56eb45df6860ee88479647db35d9b9a60b55e5808493ad92ef81ba8cee3816fd34b8e6025a48342e0c82d9f8ed95b4439699cb4f4580823cad2e88792e3ce26a3639ba2a6ca5fb06fc8011a9219afe128436ef8f71f91f4a981bca54eff6964d34f5e70de77b1dee978a30b71cb7d714cc92913e5c0b62dee0df629244058b57592cdfb8f73ca1b43794897f1e728d114973dd20655b7525e28dfdf59a1b98322d2df1abeddac02974a0a3874610321bed8e61acfd08", 0xd1, 0x8}], 0x1a00806, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40000000, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40080, 0x0) r1 = creat(0x0, 0x0) fanotify_init(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x101b, r1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) write$P9_RWALK(r1, &(0x7f0000000340)={0x4a, 0x6f, 0x1, {0x5, [{0x40, 0x4, 0x3}, {0x8, 0x2, 0x4}, {0x1, 0x3, 0x8}, {0x58, 0x2, 0x8}, {0x4, 0x4, 0x5}]}}, 0x4a) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r2 = io_uring_setup(0x18e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffbb) [ 216.470458][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.482557][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.494784][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.502225][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.510611][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.519586][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.528146][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.535207][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.535623][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.551757][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.560398][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.566573][ T8857] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 216.567519][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.574646][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.595810][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.604274][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.611850][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.620217][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.629046][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.637944][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.646605][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.655287][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.663986][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.672891][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.681800][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.690436][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.698950][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.768983][ T8844] device hsr_slave_0 entered promiscuous mode [ 216.788189][ T8844] device hsr_slave_1 entered promiscuous mode [ 216.795638][ T8860] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 216.863711][ T8844] debugfs: Directory 'hsr0' with parent '/' already present! [ 216.893051][ T8831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.905249][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:24:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfffffffffffff800) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) [ 216.922489][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.931656][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.940085][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.949315][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.959233][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.979818][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.998305][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.017684][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 21:24:49 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x2, 0x0) pipe(&(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3ff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xffffffffffffff80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 217.085548][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.113813][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.125753][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.141014][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.152531][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.175500][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.197950][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.206614][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.219624][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.239367][ T8838] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.248823][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.257593][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.269418][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.297131][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.326352][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.338313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.353675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.362370][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.369671][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.378500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.387489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.396289][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.403628][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.412171][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 21:24:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x1, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x98) r5 = dup2(r2, r4) ioctl$TCSBRK(r5, 0x5409, 0x1884) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) dup3(r5, r3, 0x0) ioctl$TIOCNXCL(r5, 0x540d) [ 217.426514][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.459113][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.477787][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.485628][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:24:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r11 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3f, 0x8000) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x76dbaac6, 0x1bb54b7b, 0x4, 0x0, 0x0, [{r0, 0x0, 0x6}, {r6, 0x0, 0x2}, {r0, 0x0, 0x7ff}, {r11}]}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) [ 217.527603][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.535477][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.581100][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.600968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.611716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.633490][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.651636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.661398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.670662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.680082][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.689077][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.696253][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.703931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.713750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.722296][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.729440][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.738136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.746740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.757955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.765756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.774207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.783747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 21:24:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'veth0_to_team\x00', {0x3, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000040)=0x8, 0x4) [ 217.849112][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.872948][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 21:24:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x15b, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x101005) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0c00df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823512b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r6, r7, 0x80, 0x31, &(0x7f0000000080)="7c39c636fdeae044efc8d64b3ca71d86a074d2a511dbd6afc35982c5e9e794d7bca440b41e191a0d06a6baff007cb9a5ac", 0x9f8, 0x6, 0x80000000, 0x3f, 0x200, 0x6, 0xffff0, 'syz0\x00'}) [ 217.910131][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.928006][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.967814][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.980585][ T8894] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 218.004003][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.022200][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.029455][ T8837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.038858][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.046864][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.073259][ T8838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.117585][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.133412][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.142589][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.152656][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.162005][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.170383][ T8865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.178162][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.186587][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.195360][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.204189][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.212767][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.245616][ T8915] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 218.251545][ T8841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.273496][ T8892] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 218.283055][ T8892] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8892, name: syz-executor.1 [ 218.292496][ T8892] 2 locks held by syz-executor.1/8892: [ 218.298136][ T8892] #0: ffffffff89998860 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 218.307351][ T8892] #1: ffff8880918a3100 (&(&sch->q.lock)->rlock){+...}, at: sfb_change+0x257/0xe90 [ 218.316668][ T8892] Preemption disabled at: [ 218.316685][ T8892] [] sfb_change+0x257/0xe90 [ 218.327190][ T8892] CPU: 1 PID: 8892 Comm: syz-executor.1 Not tainted 5.3.0-next-20190920 #0 [ 218.335774][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.345933][ T8892] Call Trace: [ 218.349232][ T8892] dump_stack+0x172/0x1f0 [ 218.353572][ T8892] ? sfb_change+0x257/0xe90 [ 218.358066][ T8892] ___might_sleep.cold+0x1fb/0x23e [ 218.363196][ T8892] __might_sleep+0x95/0x190 [ 218.367713][ T8892] __mutex_lock+0xc5/0x13c0 [ 218.372210][ T8892] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 218.378883][ T8892] ? save_stack+0x5c/0x90 [ 218.383202][ T8892] ? save_stack+0x23/0x90 [ 218.387531][ T8892] ? mutex_trylock+0x2d0/0x2d0 [ 218.392294][ T8892] ? fifo_set_limit+0x1a9/0x210 [ 218.397131][ T8892] ? fifo_create_dflt+0x90/0xf0 [ 218.401996][ T8892] ? sfb_change+0x18d/0xe90 [ 218.406506][ T8892] ? tc_modify_qdisc+0xfcf/0x1c50 [ 218.411543][ T8892] ? rtnetlink_rcv_msg+0x463/0xb00 [ 218.416649][ T8892] ? netlink_rcv_skb+0x177/0x450 [ 218.421580][ T8892] ? rtnetlink_rcv+0x1d/0x30 [ 218.426167][ T8892] ? netlink_unicast+0x531/0x710 [ 218.431188][ T8892] ? netlink_sendmsg+0x8a5/0xd60 [ 218.436297][ T8892] ? sock_sendmsg+0xd7/0x130 [ 218.440891][ T8892] ? ___sys_sendmsg+0x803/0x920 [ 218.445732][ T8892] ? __sys_sendmsg+0x105/0x1d0 [ 218.450500][ T8892] ? __x64_sys_sendmsg+0x78/0xb0 [ 218.455431][ T8892] ? do_syscall_64+0xfa/0x760 [ 218.460262][ T8892] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.466414][ T8892] ? __kasan_check_read+0x11/0x20 [ 218.471440][ T8892] ? mark_lock+0xc2/0x1220 [ 218.475867][ T8892] mutex_lock_nested+0x16/0x20 [ 218.480642][ T8892] ? mutex_lock_nested+0x16/0x20 [ 218.485569][ T8892] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 218.492078][ T8892] ? __kasan_check_read+0x11/0x20 [ 218.497093][ T8892] ? mark_lock+0xc2/0x1220 [ 218.501512][ T8892] tcf_block_put_ext.part.0+0x2a/0x80 [ 218.506887][ T8892] tcf_block_put+0xbf/0x110 [ 218.511387][ T8892] ? tcf_block_put_ext+0x40/0x40 [ 218.516400][ T8892] ? sfb_destroy+0x80/0x80 [ 218.520799][ T8892] ? sfb_destroy+0x80/0x80 [ 218.525219][ T8892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.531458][ T8892] ? prandom_u32+0x7d/0xb0 [ 218.535871][ T8892] ? sfb_zero_all_buckets+0x20/0x20 [ 218.541059][ T8892] sfb_destroy+0x37/0x80 [ 218.545293][ T8892] qdisc_destroy+0x11f/0x630 [ 218.549888][ T8892] qdisc_put+0x85/0xa0 [ 218.554006][ T8892] sfb_change+0x3d8/0xe90 [ 218.558338][ T8892] ? __sanitizer_cov_trace_cmp8+0x20/0x20 [ 218.564053][ T8892] ? sfb_graft+0x5f0/0x5f0 [ 218.568488][ T8892] ? nla_strcmp+0xe3/0x120 [ 218.572894][ T8892] ? sfb_graft+0x5f0/0x5f0 [ 218.577299][ T8892] tc_modify_qdisc+0xfcf/0x1c50 [ 218.582161][ T8892] ? qdisc_create+0x1210/0x1210 [ 218.587051][ T8892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.593443][ T8892] ? qdisc_create+0x1210/0x1210 [ 218.598354][ T8892] rtnetlink_rcv_msg+0x463/0xb00 [ 218.603291][ T8892] ? rtnl_bridge_getlink+0x910/0x910 [ 218.608695][ T8892] ? netlink_deliver_tap+0x22d/0xbf0 [ 218.613968][ T8892] ? find_held_lock+0x35/0x130 [ 218.618888][ T8892] netlink_rcv_skb+0x177/0x450 [ 218.623663][ T8892] ? rtnl_bridge_getlink+0x910/0x910 [ 218.628957][ T8892] ? netlink_ack+0xb50/0xb50 [ 218.633554][ T8892] ? __kasan_check_read+0x11/0x20 [ 218.638593][ T8892] ? netlink_deliver_tap+0x254/0xbf0 [ 218.643899][ T8892] rtnetlink_rcv+0x1d/0x30 [ 218.648339][ T8892] netlink_unicast+0x531/0x710 [ 218.653203][ T8892] ? netlink_attachskb+0x7c0/0x7c0 [ 218.658334][ T8892] ? _copy_from_iter_full+0x25d/0x8c0 [ 218.663847][ T8892] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 218.669568][ T8892] ? __check_object_size+0x3d/0x437 [ 218.674771][ T8892] netlink_sendmsg+0x8a5/0xd60 [ 218.679540][ T8892] ? netlink_unicast+0x710/0x710 [ 218.684467][ T8892] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 218.690003][ T8892] ? apparmor_socket_sendmsg+0x2a/0x30 [ 218.695454][ T8892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.701698][ T8892] ? security_socket_sendmsg+0x8d/0xc0 [ 218.707156][ T8892] ? netlink_unicast+0x710/0x710 [ 218.712184][ T8892] sock_sendmsg+0xd7/0x130 [ 218.716705][ T8892] ___sys_sendmsg+0x803/0x920 [ 218.721439][ T8892] ? copy_msghdr_from_user+0x440/0x440 [ 218.726984][ T8892] ? __kasan_check_read+0x11/0x20 [ 218.732190][ T8892] ? __fget+0x384/0x560 [ 218.736366][ T8892] ? ksys_dup3+0x3e0/0x3e0 [ 218.740915][ T8892] ? __fget_light+0x1a9/0x230 [ 218.745591][ T8892] ? __fdget+0x1b/0x20 [ 218.749653][ T8892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.755910][ T8892] __sys_sendmsg+0x105/0x1d0 [ 218.760511][ T8892] ? __sys_sendmsg_sock+0xd0/0xd0 [ 218.765536][ T8892] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 218.771002][ T8892] ? do_syscall_64+0x26/0x760 [ 218.775668][ T8892] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.781727][ T8892] ? do_syscall_64+0x26/0x760 [ 218.786409][ T8892] __x64_sys_sendmsg+0x78/0xb0 [ 218.791199][ T8892] do_syscall_64+0xfa/0x760 [ 218.795733][ T8892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.801623][ T8892] RIP: 0033:0x459a09 [ 218.805512][ T8892] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.825112][ T8892] RSP: 002b:00007f7596715c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.833539][ T8892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 21:24:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = msgget(0x2, 0x600) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000380)=""/102) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x5473, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VT_SETMODE(r1, 0x5602, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) vmsplice(r5, 0x0, 0x0, 0xc31a8fc6cfdb4b53) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @link_local, 'bridge_slave_1\x00'}}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0xffffffff}, 0xb) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) [ 218.841531][ T8892] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 218.849663][ T8892] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 218.857746][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75967166d4 [ 218.865720][ T8892] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff 21:24:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x15b, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x101005) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0c00df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823512b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r6, r7, 0x80, 0x31, &(0x7f0000000080)="7c39c636fdeae044efc8d64b3ca71d86a074d2a511dbd6afc35982c5e9e794d7bca440b41e191a0d06a6baff007cb9a5ac", 0x9f8, 0x6, 0x80000000, 0x3f, 0x200, 0x6, 0xffff0, 'syz0\x00'}) [ 218.972410][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.984831][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.002349][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.015194][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.056890][ C1] hrtimer: interrupt took 34466 ns [ 219.065051][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.074642][ T8865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.113925][ T8844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.124917][ T8844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.161926][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.175355][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.185124][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.194100][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.207977][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.218641][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.232143][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.274666][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.672007][ T8949] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 21:24:52 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffffffffffffffc1, 0xfffffffffffffffc, 0x7fff, 0x400, 0x3ff, "c59b008788d6d290933a458e71c9f7fe5e1978", 0x9, 0xffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r1, &(0x7f0000000380)=""/4096, 0x1000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r5 = dup2(r2, r4) open(&(0x7f00000000c0)='./file0\x00', 0x400601, 0x2) dup3(r5, r3, 0x0) 21:24:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r11 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3f, 0x8000) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x76dbaac6, 0x1bb54b7b, 0x4, 0x0, 0x0, [{r0, 0x0, 0x6}, {r6, 0x0, 0x2}, {r0, 0x0, 0x7ff}, {r11}]}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) 21:24:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3, 0x100000000}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) 21:24:52 executing program 2: lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x100000000, 0x40}]}, 0xc, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) 21:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100300000000000000000001000000002f76440ac31019da8be82b40278836226edb841000ad773135c082a78fcadda732ceaf648f3997c2992146979379c1f625fb17480d7542244f0171be88d86604c4da", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000008b27cba3cc03d8f8272bb1bb63e5627ed52d27c84496a107a4c305ccc916ecf920ac6b89a7f0792e7ce067158e82d928f5c8af4ac07e171ca1aa592cb938deda7ebe10cc0f1cbe1cf1e8153995aa04224cdd66f3d3a2564748ad8c540cb58262a819297aceb4b14ec7874984c01a29ed6927a73193ca3c2b", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000002400"/64], 0x3}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000020000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000005730879a937b7c2fae18d3aeabb217bf0fe82b902ac9e3f4fd3a962ced60220b6216a4ff78b3922d8f390a7a4eea278185d8b81ad4679388f9de2076635100"/108, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000003c0)="f2ae1d09f619f7671895b2756ecf71b5c2bb138606b2c4e7dd6b913d9432a5ad1e09589dce7384e750a6b3b589e904edb6b2e1a741298538f1785a651d0cb589000464ddcf98cdff62ad7c6f2d994a74904cd2c6d3dc0152e8e3e6d06fa1de032ebdf545f7843a51f449ba778eb087fc2696478f42", 0x75) 21:24:52 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x10, 0x809, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="000000000000ffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000000000000000000304d6fed121138e7a20bd96469d228aa09446d93609d5a6244082d49bc8b551a31d9ba394a264e761bf121394bf133d438a480cc54122e5a4ce53e2991cef979b83a2f6accf31ec4664b1d2c71943d"], 0x58}}, 0x0) ftruncate(r1, 0x8b8) fallocate(r0, 0x3, 0x0, 0x8020003) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0xb0, 0x400101) r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000100)=0x2) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r7, 0x0, 0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000003c0)=0x4) 21:24:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6c0bcfe47bf070") sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'hwsim0\x00', @ifru_flags=0x2000}) 21:24:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') getsockname(r0, &(0x7f0000000240)=@ax25={{0x3, @default}, [@bcast, @bcast, @default, @rose, @remote, @default, @default, @netrom]}, &(0x7f00000002c0)=0x80) exit(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x7d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r2, r0) [ 220.191863][ T8981] Unknown ioctl -1072409599 21:24:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a300"], 0x4) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070f3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x40001ff) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000280)=0x8, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r5, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x20, r5, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000200)=0x4, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x7, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x40001ff) [ 220.290589][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 220.290604][ T26] audit: type=1804 audit(1569187492.420:31): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir205879535/syzkaller.nXB1eF/1/bus" dev="sda1" ino=16522 res=1 [ 220.369401][ T8967] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 21:24:52 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$cgroup_int(r1, &(0x7f0000000000)=0x100000001, 0x12) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) tkill(r0, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:24:52 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x10, 0x809, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="000000000000ffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000000000000000000304d6fed121138e7a20bd96469d228aa09446d93609d5a6244082d49bc8b551a31d9ba394a264e761bf121394bf133d438a480cc54122e5a4ce53e2991cef979b83a2f6accf31ec4664b1d2c71943d"], 0x58}}, 0x0) ftruncate(r1, 0x8b8) fallocate(r0, 0x3, 0x0, 0x8020003) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0xb0, 0x400101) r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000100)=0x2) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r7, 0x0, 0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000003c0)=0x4) 21:24:52 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x10, 0x809, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="000000000000ffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000000000000000000304d6fed121138e7a20bd96469d228aa09446d93609d5a6244082d49bc8b551a31d9ba394a264e761bf121394bf133d438a480cc54122e5a4ce53e2991cef979b83a2f6accf31ec4664b1d2c71943d"], 0x58}}, 0x0) ftruncate(r1, 0x8b8) fallocate(r0, 0x3, 0x0, 0x8020003) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0xb0, 0x400101) r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000100)=0x2) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r7, 0x0, 0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000003c0)=0x4) [ 220.708034][ T26] audit: type=1804 audit(1569187492.850:32): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir205879535/syzkaller.nXB1eF/1/bus" dev="sda1" ino=16522 res=1 21:24:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3, 0x100000000}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) [ 220.817967][ T26] audit: type=1804 audit(1569187492.900:33): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir590512233/syzkaller.9tfkUj/8/file0" dev="sda1" ino=16546 res=1 21:24:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x3c) r1 = dup3(r0, 0xffffffffffffffff, 0x100000) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x2, 0x16, 0x81, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x7, 0x4, 0x400}]}, 0x30}}, 0x1000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r0, 0x0, &(0x7f0000000000), 0x6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000180)}, 0x20) r2 = syz_open_dev$dmmidi(&(0x7f00000009c0)='/dev/dmmidi#\x00', 0x1, 0x42400) write$P9_RREAD(r2, &(0x7f0000000a00)={0x4a, 0x75, 0x2, {0x3f, "ada5c606a76182bf72b26386ac72102c57bd8ffd548be24b940ddc210d4944f2ae08adfbedbd5b2cdcea20bb5cab83ab58c19de5c2e4047fbfb57f1416da7d"}}, 0x4a) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000980)={0x8, 0x1204}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) process_vm_readv(r4, &(0x7f0000000740)=[{&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f00000006c0)=""/70, 0x46}], 0x9, &(0x7f0000000940)=[{&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/177, 0xb1}], 0x2, 0x0) [ 221.004147][ T26] audit: type=1800 audit(1569187493.100:34): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=7374617409C0D2FEBCF9DF2DEAC8C177FF1712481193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC378116B34D31B05AFF01E79524EC9C656 dev="sda1" ino=16547 res=0 [ 221.053248][ T9031] Unknown ioctl -1072409599 [ 221.141976][ T26] audit: type=1800 audit(1569187493.100:35): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=7374617409C0D2FEBCF9DF2DEAC8C177FF1712481193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC378116B34D31B05AFF01E79524EC9C656 dev="sda1" ino=16547 res=0 [ 221.174129][ T26] audit: type=1804 audit(1569187493.260:36): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir205879535/syzkaller.nXB1eF/2/bus" dev="sda1" ino=16532 res=1 21:24:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{}]}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000640)="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", 0x2c6, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 21:24:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xb51a, 0x4) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 21:24:53 executing program 4: r0 = socket(0x8, 0x6, 0x1) write(r0, &(0x7f0000000400)="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", 0xfc) connect$netrom(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) preadv(r2, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000080)='c\xff\xff\xff\xff\xff\xff\xff\xdd', 0x6) [ 221.411848][ T9051] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:24:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r2, 0x0, 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x1) ioctl$TIOCCONS(r1, 0x541d) 21:24:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3, 0x100000000}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) 21:24:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xd0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000200)) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 21:24:53 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00\x00\xe0\xff\xff\xff\xff\x7f\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000002740)='/dev/vbi#\x00', 0x0, 0x2) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000002780)) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff0000000008000100736662002c000200280001eace00000000000000000000000023d9ec6a00"/61], 0x58}}, 0x0) mkdir(&(0x7f00000027c0)='./file0\x00', 0x172) sendmsg$nl_route_sched(r2, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)=@hci={0x1f, r5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="f19416904ce57d2798b6739f26634d5ea870dab0f941d029feb961e8a336cd421c8321b51e8654528b14", 0x2a}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="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", 0x1000}], 0x3, &(0x7f0000002200)=[{0x108, 0x1, 0x5, "332395593b6649441e2c4922e6de01f693952194aa8b4e0ccf85367440286fb0bb2490068bd877fcf5b312eb652cebdc12381d0d98249b74d2ce99d11ebbed4a43ae3e52e1fc586bd244ecf6cde511bfa29849749ee5b38544bb9d1390968d71e0ab39c020de54eefd03cb300b655a59beb111085c023d8bdd0a8e555be15b95be60cf91c3e62979d482cc85a290c30749d19b686ed01d1623865b3f487b68e0c82ec71d68b2b42f3712b6e7946206b56303cde0161e2d1255bc4c17dd4d49f49adc041f98e1344719b245ecd23a04b5a72a4be23a6e99e6fd43d37bd443bc8e07c2d325bcec1b3a1bd1f10ac206b21705e5951683"}, {0x60, 0x29, 0xc3, "41e0a1faf0ba22084626bf0b201aee6c4dc49f228f0363efc28546a2f5ce6fad0b4770aedb809a825c61a3435520b9e6457d44208544c7f1acaa8ab977c2aade63fd71ad8ffd0f7efa46a6"}, {0x100, 0x100, 0xffffffff, "656ba2e807d3a4b85f10d0ca9b4fbaf89c51ee9109815d6dd540be089e62f4792574645bd85d87ea15aa377c5146145a03c7ef10903405c3e9ed523cd0b047066a4db53ee0df8452bebb285bd530c52eac386d66938460074c9d21375dc12964f54e56b29b485c1badb429d04cea02718695e3e9846caeee9d67d1fe9f9451778250272b8db74eb4e243a989180b4ac9f58b782e8eb3e24d7111d35f5ed76023e9aa9bb481e2a159860ec98ef2544b48c1c2517c0a87f2aa089813751b52257ef965ba64dd6b17e2d5bd8396b58631b43ecd67ef1726986cadb6457af3aaa036e330d43856c5651d42ccc77051db12"}, {0x50, 0x101, 0x100000000, "e380423391894306d367a409b629692578885ff97439885180e9fe6739daf4ba5c18a81e402f11921701b93c82fedccc967f9b57a78c11d99047b46fc008"}, {0x110, 0x114, 0x1000, "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"}, {0x40, 0x18a, 0x7, "9ad29680916e879e137aea2adc2be7f79449236ef559e22d6cfdf55cc95311d2ba51d28551723a4bff15"}, {0xf0, 0x113, 0x0, "1bb8643263732333cbd4efec81f84add13fb106afa686f1ed322f947d39873e7bfdb78a687aa6d5ddb0a929b6878f675c8ae36c5d7473df104c13083da451752f359503671d2be76309c78c1250b74edc0358126d089fcdaee29ec11c4acb846f584d84111fd7a64790000e7315f8ef39f6c1331d109f651af1dc3a174bd8cc650587ce7420aea54b1ec8fbf3059d3e388811137f280c42144df73ad2c920438e714fe5f423baca08d89616f416de7c65829c6c496407de90eaa760babac9dd9e34ec8b34e2cee2ceed843868185fa0fb3affb5e50148db9ce56306d3a3a89"}, {0x48, 0x113, 0x219ddd63, "21d52e33d7e8c8159d7a0a822264d1538bc1d37116179695f7ba2752f57b24c9e78755e83efbc04a298c0626a0ba9ae95c6ffe"}], 0x540}}], 0x1, 0x8008010) [ 221.619737][ T9066] Unknown ioctl -1072409599 21:24:53 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vi\x00\x00\x00\x00\x00\x01', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r1, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)) msgrcv(r5, &(0x7f00000000c0)={0x0, ""/72}, 0x50, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r10, r11) r12 = fcntl$getown(r10, 0x9) msgctl$IPC_SET(r5, 0x1, &(0x7f00000002c0)={{0x8000, r6, r7, r8, r9, 0x10, 0x1}, 0x1000, 0x8, 0x1000, 0x7, 0x7f, 0x0, 0x0, r12}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r12) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000280)={0x980002, 0x1}) r13 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x80) ioctl$VIDIOC_G_CTRL(r13, 0xc008561b, &(0x7f0000000080)={0xffffffffffffa105, 0x2}) 21:24:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400004000000703000000000000000000ff10"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[], 0x0, 0x802}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_NMI(r7, 0xae9a) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x90b3, 0x9}, 0x8) [ 221.762261][ T26] audit: type=1804 audit(1569187493.900:37): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir205879535/syzkaller.nXB1eF/3/bus" dev="sda1" ino=16548 res=1 21:24:54 executing program 3: socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x710140) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) syz_open_dev$video4linux(&(0x7f0000000240)='/dev/HK\xd8\x8asubdev#\x00', 0xfffffffffffffffc, 0x321000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000280)={0x5, 0x7, 0x34, "83ad0083ff5a81b7f5870f1f85fff4d248696bc831a5b5abb7a66d9b805ec71b772e671fbbbb277d97fa2cff5223ae073cd7e0cc58b9c63bfdf53c13", 0xd, "2ea9e0fe1ddf390d94635c88b5a35c8d2a6f6e8aacf69b37f18a8850d016829944a05bcf4b9c520dd608101d266e4eb640757c7da16cb186b5a3150c", 0x8}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:24:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000540)) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/72}, 0x50, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = dup2(r6, r7) r9 = fcntl$getown(r6, 0x9) msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x8000, r2, r3, r4, r5, 0x10, 0x1}, 0x1000, 0x8, 0x1000, 0x7, 0x7f, 0x0, 0x0, r9}) r10 = getpgid(r9) syz_open_procfs(r10, &(0x7f0000000100)='net/bnep\x00') setns(r8, 0x48020000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) 21:24:54 executing program 4: syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="366cc7350bf70180c2000200810000008848"], 0x0) 21:24:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3, 0x100000000}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) [ 222.368444][ T9096] Unknown ioctl -1072409599 21:24:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xd0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000200)) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 21:24:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xd0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000200)) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') [ 222.467368][ T26] audit: type=1804 audit(1569187494.600:38): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir205879535/syzkaller.nXB1eF/4/bus" dev="sda1" ino=16551 res=1 [ 223.787697][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 223.794400][ T9074] Bluetooth: hci0: sending frame failed (-49) [ 225.867152][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 225.873272][ T9074] Bluetooth: hci0: sending frame failed (-49) [ 227.947143][ T17] Bluetooth: hci0: command 0x1009 tx timeout