[info] Using makefile-style concurrent boot in runlevel 2. [ 46.281822][ T27] audit: type=1800 audit(1585268889.603:21): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 46.326256][ T27] audit: type=1800 audit(1585268889.603:22): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2020/03/27 00:28:21 fuzzer started 2020/03/27 00:28:23 dialing manager at 10.128.0.105:44023 2020/03/27 00:28:23 syscalls: 2955 2020/03/27 00:28:23 code coverage: enabled 2020/03/27 00:28:23 comparison tracing: enabled 2020/03/27 00:28:23 extra coverage: enabled 2020/03/27 00:28:23 setuid sandbox: enabled 2020/03/27 00:28:23 namespace sandbox: enabled 2020/03/27 00:28:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/27 00:28:23 fault injection: enabled 2020/03/27 00:28:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/27 00:28:23 net packet injection: enabled 2020/03/27 00:28:23 net device setup: enabled 2020/03/27 00:28:23 concurrency sanitizer: enabled 2020/03/27 00:28:23 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 63.004692][ T7763] KCSAN: could not find function: '_find_next_bit' [ 63.647751][ T7763] KCSAN: could not find function: 'poll_schedule_timeout' 2020/03/27 00:28:28 adding functions to KCSAN blacklist: 'generic_write_end' 'copy_process' 'add_timer' 'run_timer_softirq' 'atime_needs_update' 'ep_poll' 'tick_sched_do_timer' 'ext4_mark_iloc_dirty' 'ext4_free_inodes_count' 'get_cpu_idle_time_us' 'kauditd_thread' 'find_get_pages_range_tag' 'shmem_getpage_gfp' 'wbt_done' 'do_syslog' 'tick_nohz_idle_stop_tick' 'blk_mq_get_request' '__bpf_lru_node_move_in' 'mod_timer' 'generic_fillattr' 'ktime_get_real_seconds' 'list_lru_count_one' 'lruvec_lru_size' 'do_readlinkat' 'hrtimer_interrupt' 'do_nanosleep' 'ext4_has_free_clusters' 'timer_clear_idle' 'shmem_file_read_iter' 'page_counter_try_charge' 'echo_char' 'blk_mq_dispatch_rq_list' 'do_signal_stop' 'yama_ptracer_del' '__add_to_page_cache_locked' '_find_next_bit' '__ext4_new_inode' '__delete_from_page_cache' 'audit_log_start' 'poll_schedule_timeout' 'do_exit' 'dd_has_work' 'n_tty_receive_buf_common' 'blk_mq_sched_dispatch_requests' 'pcpu_alloc' 'ext4_nonda_switch' 'xas_clear_mark' 00:31:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 225.253855][ T7765] IPVS: ftp: loaded support on port[0] = 21 00:31:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x34}}, 0x0) [ 225.322046][ T7765] chnl_net:caif_netlink_parms(): no params data found [ 225.447024][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.454260][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.462795][ T7765] device bridge_slave_0 entered promiscuous mode [ 225.471398][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.478924][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.486783][ T7765] device bridge_slave_1 entered promiscuous mode 00:31:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705000000000000000000000400", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c0002000000000000000000000000000000000000000000000000000c000d00000000000052e0db1400060000000000002000000000000000000000a1d00492c8b4f08fe7f3b1d6cf071419d9a4117c1b56df878163d7c9dd693feb8150abbb3f00000000000000000000eb2058d096ee49dffb7715c858c243d00000000000000005ac83a479d1a7e5be078ca3fa1e43ab1cafada043d3134cdf53a3c237ea5e295ac3dc7fd793ff88d6d360dcf043f9e97035c647e9db2be930090000000003000000000040000000"], 0x6c}}, 0x0) [ 225.503210][ T7771] IPVS: ftp: loaded support on port[0] = 21 [ 225.519007][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.542490][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.585556][ T7765] team0: Port device team_slave_0 added [ 225.617423][ T7765] team0: Port device team_slave_1 added [ 225.657473][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.664819][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.727427][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.759514][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.766489][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.797334][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.814876][ T7775] IPVS: ftp: loaded support on port[0] = 21 [ 225.821136][ T7771] chnl_net:caif_netlink_parms(): no params data found 00:31:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) [ 225.909703][ T7765] device hsr_slave_0 entered promiscuous mode [ 225.947673][ T7765] device hsr_slave_1 entered promiscuous mode 00:31:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000580)='fuse\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) [ 226.070194][ T7777] IPVS: ftp: loaded support on port[0] = 21 [ 226.207112][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.214343][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.237568][ T7771] device bridge_slave_0 entered promiscuous mode [ 226.282751][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.297714][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.317036][ T7771] device bridge_slave_1 entered promiscuous mode [ 226.368705][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 226.384636][ T7771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.402246][ T7783] IPVS: ftp: loaded support on port[0] = 21 00:31:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000700)={@val, @void, @mpls={[{0xd7d}]}}, 0x8) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2e4) [ 226.434184][ T7771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.489494][ T7765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.529215][ T7765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.598570][ T7777] chnl_net:caif_netlink_parms(): no params data found [ 226.606983][ T7765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.678418][ T7771] team0: Port device team_slave_0 added [ 226.690254][ T7765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.767602][ T7771] team0: Port device team_slave_1 added [ 226.774669][ T7786] IPVS: ftp: loaded support on port[0] = 21 [ 226.813015][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.820056][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.846296][ T7771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.859070][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.866033][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.892083][ T7771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.988649][ T7771] device hsr_slave_0 entered promiscuous mode [ 227.037288][ T7771] device hsr_slave_1 entered promiscuous mode [ 227.077082][ T7771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.084671][ T7771] Cannot create hsr debugfs directory [ 227.102014][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.109432][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.117532][ T7775] device bridge_slave_0 entered promiscuous mode [ 227.124792][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 227.145997][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.153335][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.161119][ T7775] device bridge_slave_1 entered promiscuous mode [ 227.188265][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.195319][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.203068][ T7777] device bridge_slave_0 entered promiscuous mode [ 227.211445][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.218619][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.226157][ T7777] device bridge_slave_1 entered promiscuous mode [ 227.247656][ T7777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.260140][ T7777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.287879][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.331641][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.351998][ T7777] team0: Port device team_slave_0 added [ 227.375489][ T7775] team0: Port device team_slave_0 added [ 227.383035][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.390168][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.398262][ T7783] device bridge_slave_0 entered promiscuous mode [ 227.407043][ T7777] team0: Port device team_slave_1 added [ 227.416439][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.428566][ T7775] team0: Port device team_slave_1 added [ 227.449140][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.456196][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.464366][ T7783] device bridge_slave_1 entered promiscuous mode [ 227.487677][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.496831][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 227.506884][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.516562][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.523685][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.549768][ T7777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.581106][ T7771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.629055][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.636053][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.663001][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.674351][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.683576][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.709630][ T7777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.729751][ T7771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.778765][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.786144][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.813080][ T7775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.845711][ T7765] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.854015][ T7783] team0: Port device team_slave_0 added [ 227.862254][ T7783] team0: Port device team_slave_1 added [ 227.868102][ T7771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.969123][ T7775] device hsr_slave_0 entered promiscuous mode [ 228.017346][ T7775] device hsr_slave_1 entered promiscuous mode [ 228.077035][ T7775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.085039][ T7775] Cannot create hsr debugfs directory [ 228.091564][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.099624][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.116719][ T7771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.199307][ T7777] device hsr_slave_0 entered promiscuous mode [ 228.267276][ T7777] device hsr_slave_1 entered promiscuous mode [ 228.337046][ T7777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.344743][ T7777] Cannot create hsr debugfs directory [ 228.370093][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.377492][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.403528][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.415810][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.422920][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.449147][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.461327][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.470172][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.478935][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.485964][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.493945][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.502751][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.511366][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.518416][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.527937][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.556224][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.563757][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.571645][ T7786] device bridge_slave_0 entered promiscuous mode [ 228.585394][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.592637][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.600505][ T7786] device bridge_slave_1 entered promiscuous mode [ 228.616758][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.709043][ T7783] device hsr_slave_0 entered promiscuous mode [ 228.767221][ T7783] device hsr_slave_1 entered promiscuous mode [ 228.817073][ T7783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.824654][ T7783] Cannot create hsr debugfs directory [ 228.839830][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.863525][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.877879][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.887814][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.899726][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.908407][ T7777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.943256][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.965094][ T7786] team0: Port device team_slave_0 added [ 228.972269][ T7777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.040916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.049617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.058978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.067496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.077641][ T7786] team0: Port device team_slave_1 added [ 229.084593][ T7777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.140622][ T7777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.203436][ T7765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.214460][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.222998][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.231793][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.257186][ T7775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.300173][ T7775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.369415][ T7775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.420371][ T7775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.480525][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.488407][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.514348][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.543562][ T7783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.601914][ T7783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.642966][ T7783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.679850][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.686865][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.713144][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.729028][ T7771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.744411][ T7783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.815598][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.824636][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.868980][ T7786] device hsr_slave_0 entered promiscuous mode [ 229.927276][ T7786] device hsr_slave_1 entered promiscuous mode [ 229.967041][ T7786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.974623][ T7786] Cannot create hsr debugfs directory [ 229.982645][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.991275][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.999314][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.027187][ T7771] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.062407][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.071857][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.080286][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.087372][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.106036][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.136998][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.146250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.154924][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.163408][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.170595][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.178713][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.187598][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.195289][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.217075][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.226357][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.235205][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.246044][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.254806][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.265388][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.273686][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.282002][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.291050][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.311071][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.320613][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.339558][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.357260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.365759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.374946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.382151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.390012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.398551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.406713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.413748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.426417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.454631][ T7775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.467378][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.476693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.485626][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.493169][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.518373][ T7786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.559122][ T7786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.608921][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.618531][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.627611][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.636255][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.644900][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.653663][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.663017][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.682704][ T7777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.693116][ T7777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.707535][ T7786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.742118][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.750972][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.759609][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.768610][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.776852][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.785394][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.794015][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.802568][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.812280][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.820358][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.828523][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.838270][ T7765] device veth0_vlan entered promiscuous mode [ 230.848251][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.860597][ T7775] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.869407][ T7786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.902244][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.915207][ T7765] device veth1_vlan entered promiscuous mode [ 230.945831][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.955058][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.964484][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.973399][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.981757][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.988810][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.996831][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.005724][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.014186][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.021216][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.029438][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.038534][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.045966][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.080267][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.088704][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.096618][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.105635][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.113897][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.138692][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.149860][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.159067][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.167833][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.176143][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.184691][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.193268][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.201895][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.210564][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.218840][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.227141][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.235511][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.244255][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.261669][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.273101][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.300840][ T7765] device veth0_macvtap entered promiscuous mode [ 231.309805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.318877][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.327489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.335916][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.344432][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.353850][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.360891][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.370374][ T7771] device veth0_vlan entered promiscuous mode [ 231.390373][ T7765] device veth1_macvtap entered promiscuous mode [ 231.399312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.407865][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.415554][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.425067][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.433173][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.441977][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.450369][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.457486][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.465472][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.483135][ T7775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.492853][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.500383][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.508184][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.531145][ T7771] device veth1_vlan entered promiscuous mode [ 231.542943][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.551746][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.560505][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.574747][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.583810][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.617149][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.625400][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.633960][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.643563][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.652977][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.661274][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.670246][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.678900][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.688627][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.696487][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.711119][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.719056][ T7777] device veth0_vlan entered promiscuous mode [ 231.734707][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.751917][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.760430][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.770002][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.779002][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.800837][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.809984][ T7783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.819290][ T7777] device veth1_vlan entered promiscuous mode [ 231.829333][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.838277][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.846042][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.854805][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.863927][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.872812][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.883541][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.894467][ T7771] device veth0_macvtap entered promiscuous mode [ 231.923037][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.937621][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.946241][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.955236][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.964012][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.972441][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.979654][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.988534][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.004017][ T7771] device veth1_macvtap entered promiscuous mode [ 232.037305][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.046555][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.055289][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.063687][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.070729][ T7772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.079235][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.086762][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.094452][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.107052][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.115600][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.146091][ T7775] device veth0_vlan entered promiscuous mode [ 232.162079][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.174784][ T7777] device veth0_macvtap entered promiscuous mode [ 232.182140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.190585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.204461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.213434][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.222660][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.231224][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.239936][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.249216][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.259748][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.267735][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.275744][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.300715][ T7786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.313218][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.334762][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.343452][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.352371][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.360961][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.373853][ T7775] device veth1_vlan entered promiscuous mode [ 232.382062][ T7777] device veth1_macvtap entered promiscuous mode [ 232.391931][ T7771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.403549][ T7771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.415425][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.423697][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.433009][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.442499][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.450540][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.459710][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.484228][ T7771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.496473][ T7771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.507737][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.522633][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.534411][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.544978][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.555552][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.566468][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.578882][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.587963][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.595588][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.604258][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.613242][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.622038][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.630960][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.650577][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.665434][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.680284][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.690637][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.701517][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.712882][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.732698][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.743029][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.752689][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.762355][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.777644][ T7775] device veth0_macvtap entered promiscuous mode [ 232.800345][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.815128][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.824536][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.838268][ T7775] device veth1_macvtap entered promiscuous mode 00:31:16 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @random="2a67cb76622c"}) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast}) [ 232.942739][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.971239][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.991223][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.002270][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.012453][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.023300][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.034811][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.042343][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.052075][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.061290][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.069572][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.078349][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.097108][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.106172][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.114222][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.127208][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.135424][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.145776][ T7783] device veth0_vlan entered promiscuous mode [ 233.154093][ T7857] device vlan0 entered promiscuous mode [ 233.189522][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 233.216946][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.226793][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 233.238987][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.251361][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 233.262487][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.274958][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.291872][ T7786] device veth0_vlan entered promiscuous mode [ 233.298867][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.310265][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.319046][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.327813][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.344658][ T7783] device veth1_vlan entered promiscuous mode 00:31:16 executing program 0: [ 233.421015][ T7786] device veth1_vlan entered promiscuous mode [ 233.483575][ T7783] device veth0_macvtap entered promiscuous mode [ 233.499826][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.511809][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.520245][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 00:31:16 executing program 0: [ 233.529421][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.538969][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.558277][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.566215][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.578912][ T7783] device veth1_macvtap entered promiscuous mode 00:31:17 executing program 0: [ 233.624501][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.633533][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.643693][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.667536][ T7786] device veth0_macvtap entered promiscuous mode [ 233.698981][ T7786] device veth1_macvtap entered promiscuous mode [ 233.737140][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.745269][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 00:31:17 executing program 0: [ 233.775795][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.796931][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.806875][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.820486][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.830953][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.854470][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:31:17 executing program 0: [ 233.873718][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.884603][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.897479][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.910470][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:31:17 executing program 0: [ 233.936141][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.952947][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.964575][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.975269][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.986293][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.998332][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.009184][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.019309][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.032654][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.046061][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.065876][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.081164][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.090302][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.101809][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.122008][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:31:17 executing program 1: [ 234.156533][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.167937][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.178878][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.199994][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.223572][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.243543][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.254163][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.268246][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.281652][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.320479][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.340950][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.351685][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.363118][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.374289][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.384503][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.395299][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.405470][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.416292][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.427779][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.436242][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.445409][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.454251][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.462674][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:31:17 executing program 2: 00:31:17 executing program 0: 00:31:18 executing program 4: 00:31:18 executing program 1: 00:31:18 executing program 3: 00:31:18 executing program 2: 00:31:18 executing program 0: 00:31:18 executing program 5: 00:31:18 executing program 1: 00:31:18 executing program 2: 00:31:18 executing program 4: 00:31:18 executing program 5: mkdir(&(0x7f0000000140)='.\x02', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 00:31:18 executing program 3: 00:31:18 executing program 0: 00:31:18 executing program 1: 00:31:18 executing program 4: 00:31:18 executing program 2: 00:31:18 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 00:31:18 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 00:31:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10000c0}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 00:31:18 executing program 4: 00:31:18 executing program 1: 00:31:18 executing program 5: 00:31:18 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x31, 0x0, &(0x7f00000000c0)) 00:31:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 00:31:19 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc37, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:31:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) [ 235.883405][ T8046] xt_CT: You must specify a L4 protocol and not use inversions on it 00:31:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) [ 235.924343][ C1] hrtimer: interrupt took 25774 ns 00:31:19 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x31, 0x0, &(0x7f00000000c0)) [ 235.953354][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 235.953374][ T27] audit: type=1804 audit(1585269079.273:31): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir168831356/syzkaller.odphSe/6/bus" dev="sda1" ino=16552 res=1 00:31:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 00:31:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 00:31:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {0x87}, {0x6, 0x0, 0x0, 0x50000}]}) 00:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5413, 0xfffffffffffffff8) 00:31:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9ad8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 00:31:20 executing program 3: prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) socket(0x10, 0x803, 0x0) 00:31:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) [ 237.450404][ T27] audit: type=1804 audit(1585269080.773:32): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir168831356/syzkaller.odphSe/6/bus" dev="sda1" ino=16552 res=1 [ 237.554955][ T8096] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.682788][ T27] audit: type=1804 audit(1585269081.003:33): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir168831356/syzkaller.odphSe/6/bus" dev="sda1" ino=16552 res=1 00:31:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:31:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 00:31:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) 00:31:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:31:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 237.858243][ T8106] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:31:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 00:31:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='ip6_vti0\x00', 0x10) [ 237.974649][ T27] audit: type=1804 audit(1585269081.293:34): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir168831356/syzkaller.odphSe/7/bus" dev="sda1" ino=16553 res=1 00:31:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0xc) sendto$inet(r0, 0x0, 0x0, 0x8090, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 00:31:21 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r0, r0, &(0x7f0000000200), 0xa198) [ 238.244103][ T8122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:31:21 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) 00:31:21 executing program 0: 00:31:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x158, 0x0, 0x158, 0x0, 0x158, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'pptp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5ffa, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "5276ee798a229cbc9c628bb5d2835e23e3a986bb1c205d499fc9a0df6eccb5155624d7de4ded9dbdeadb8c7c3240ad14a79f938202d1202b00"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 00:31:22 executing program 0: keyctl$KEYCTL_MOVE(0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xdc98, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 00:31:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:31:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 00:31:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x44, 0x0, 0x0) 00:31:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000002600f9680000000000000000ff01000000eecd3f39a86461f4542bf0f7e8cdc2ba00000000000000001c0001fe880000000000000000008042f520e40500000000016dffb5bd6c677621367b792da40c6a151de85eff1f2da808eaab0310140dc680a44f0fafa53c8080d50a19ab614dea389befbfe569", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008a00"], 0x50}}, 0x0) 00:31:23 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x25, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="535d7d5c833f3d7d9641591d9efb0a18", 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 00:31:23 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x1b3}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:31:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000200000003000000100200000000004c00000000080100000000000008010000e0010000e0010000e0"], 0x1) 00:31:23 executing program 3: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0x0, 0x0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0) 00:31:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9ad8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 00:31:23 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000140)="240000001c005f0214fffffffff807000000000000000000000008000400010000b70000", 0x24) 00:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x398e, 0x0, 0x0, 0x0, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 239.790878][ T8183] ptrace attach of "/root/syz-executor.4"[8181] was attempted by "/root/syz-executor.4"[8183] [ 239.813177][ T8184] xt_hashlimit: overflow, rate too high: 0 00:31:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) gettid() 00:31:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc) [ 240.018818][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.032867][ T8206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:31:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:23 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x2) 00:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 00:31:23 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x42, 0x0, &(0x7f00000000c0)) 00:31:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 240.643889][ T27] audit: type=1804 audit(1585269083.963:35): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/14/bus" dev="sda1" ino=16571 res=1 [ 241.314792][ T27] audit: type=1804 audit(1585269084.633:36): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/14/bus" dev="sda1" ino=16571 res=1 [ 241.350937][ T27] audit: type=1804 audit(1585269084.663:37): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/14/bus" dev="sda1" ino=16571 res=1 [ 241.378577][ T27] audit: type=1804 audit(1585269084.683:38): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/14/bus" dev="sda1" ino=16571 res=1 00:31:25 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000080)) 00:31:25 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x24, 0x0, &(0x7f00000000c0)) 00:31:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 00:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) io_getevents(r3, 0x22, 0x0, 0x0, 0x0) 00:31:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:25 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000400090000b70000", 0x52) 00:31:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 00:31:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 242.173716][ T27] audit: type=1804 audit(1585269085.493:39): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/15/bus" dev="sda1" ino=16586 res=1 00:31:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000300)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 00:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) [ 242.297078][ T8276] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 00:31:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) 00:31:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 242.553122][ T27] audit: type=1804 audit(1585269085.873:40): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir267616861/syzkaller.vFtyMl/16/bus" dev="sda1" ino=16588 res=1 00:31:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f0000001140)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000000)=@un=@file={0xa, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 00:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) 00:31:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {0x61}, {0x6}]}) 00:31:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) 00:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 00:31:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:26 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) [ 243.308741][ T27] audit: type=1804 audit(1585269086.633:41): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir267616861/syzkaller.vFtyMl/16/bus" dev="sda1" ino=16588 res=1 00:31:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x3, 0x0, &(0x7f00000000c0)) 00:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f00000016c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "76142b", 0xf98, 0x2f, 0x0, @rand_addr="14e05762fd57bcde02f8707d7c805593", @remote, {[@hopopts={0x0, 0x17, [], [@jumbo, @jumbo, @jumbo, @generic, @generic={0x0, 0xa3, "e6da690a293dbbc12e853fb871244d124760babff2909792bd8f2a0042b56be08e6061ced99de32f867c8c082ec43d286fa1ddd60249fa04d0ed40da64601e043c9a9650b16f45cd0c6fe38c4b88b098826e49a1e7ddfc53421e96d8126db4887e430493c2b001c724ea23122965214fa7603c77b55bf469a75985fd90f56708e42dd7bf91fa058cc85d6415ddb41f9edc9e2c3af226f195ef86587d71e2470125dc2d"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc15, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0, 0x0], "29a294bb1c728bab43a22bc13836a8c54b06d1d1b6bb14754d6317ca13ae64e8014778a1597e64de31b4764a3096731a7cbe2bc476fbf24dd1311a3e37fa1dacaea5c2c4e638fbe759bf794e2f85b96cda1a101189930f0bbeb5cc2dc41b7f3e9e7d2dadeccfbf4c8c553328f126592c1beaa95dce5762f1038b5cbfd2bea5911418b562844f2de8fc5d2903acad2fa3a286e0cae260bce8460adf2ef2855122af27bebfdf7cfe16752b40170c4b217a23b0dcb43f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "2a5ec2bb01e6ef900459c90f3967953e6a24b263f638c7379f49f35c71114271b297b4fc0dc4dd6fce75665e8475ae31dbe7a32dc4a488245af29cbf3b5a3df3fea3db605b2b4082ecbd6968870a6c3e0556624e4556baa949d40926e1ba06ae8deafb5c804796c76bbb86e6ba4e425dbedc1de92cba378aa140ccde1d167fbd2c4e5ce52566ec7479287b37b57513a150db99efd0b5756178db7c4c8f20e4ebafbac78d2910084729815588f2a5ae3794cc2f3decbbb77cda55ab1c0d4532a4410d0173"}, {}, {}, {0x8, 0x6558, 0x0, "7ee31949d8e082e7dfe0b04645df3b2a6e803c9d414e90b06e20cc5270ee456d2088f967d8c4322f7cc9a5882436ba6680b05f115c92693338d8b3608cba9fc6302741416aafbd9ddea4da49312f14db86dd92fc76ad9821a1c85361f29aa6c32f14f140da1bf68d6957cf6a4607b5f8ab61f26306e8124d6f28db390aa9a0345ad2a58a2e7be5c8e595440462df12f16cd129f12af61edee56272654585b604b7d3634ec136660e3169e0cf4c295061d727fda77d5d02fdb02d7440dfbe53bef2890561fb4a14d6c2ad9ded42593be9829d2e1ec885ac3377793a1dfd8ea4ec3f571b8b9b58fac327d6e41e1bdd4579718343727bfa94bd"}}}}}}, 0xfca) 00:31:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 243.714272][ T27] audit: type=1804 audit(1585269087.033:42): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir267616861/syzkaller.vFtyMl/17/bus" dev="sda1" ino=16592 res=1 00:31:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:31:27 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5423, 0xfffffffffffffff8) [ 244.103117][ T27] audit: type=1804 audit(1585269087.423:43): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir516951175/syzkaller.HdhAPU/29/bus" dev="sda1" ino=16583 res=1 00:31:27 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5423, 0xfffffffffffffff8) 00:31:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f00000016c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "76142b", 0xf98, 0x2f, 0x0, @rand_addr="14e05762fd57bcde02f8707d7c805593", @remote, {[@hopopts={0x0, 0x17, [], [@jumbo, @jumbo, @jumbo, @generic, @generic={0x0, 0xa3, "e6da690a293dbbc12e853fb871244d124760babff2909792bd8f2a0042b56be08e6061ced99de32f867c8c082ec43d286fa1ddd60249fa04d0ed40da64601e043c9a9650b16f45cd0c6fe38c4b88b098826e49a1e7ddfc53421e96d8126db4887e430493c2b001c724ea23122965214fa7603c77b55bf469a75985fd90f56708e42dd7bf91fa058cc85d6415ddb41f9edc9e2c3af226f195ef86587d71e2470125dc2d"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc15, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0, 0x0], "29a294bb1c728bab43a22bc13836a8c54b06d1d1b6bb14754d6317ca13ae64e8014778a1597e64de31b4764a3096731a7cbe2bc476fbf24dd1311a3e37fa1dacaea5c2c4e638fbe759bf794e2f85b96cda1a101189930f0bbeb5cc2dc41b7f3e9e7d2dadeccfbf4c8c553328f126592c1beaa95dce5762f1038b5cbfd2bea5911418b562844f2de8fc5d2903acad2fa3a286e0cae260bce8460adf2ef2855122af27bebfdf7cfe16752b40170c4b217a23b0dcb43f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "2a5ec2bb01e6ef900459c90f3967953e6a24b263f638c7379f49f35c71114271b297b4fc0dc4dd6fce75665e8475ae31dbe7a32dc4a488245af29cbf3b5a3df3fea3db605b2b4082ecbd6968870a6c3e0556624e4556baa949d40926e1ba06ae8deafb5c804796c76bbb86e6ba4e425dbedc1de92cba378aa140ccde1d167fbd2c4e5ce52566ec7479287b37b57513a150db99efd0b5756178db7c4c8f20e4ebafbac78d2910084729815588f2a5ae3794cc2f3decbbb77cda55ab1c0d4532a4410d0173"}, {}, {}, {0x8, 0x6558, 0x0, "7ee31949d8e082e7dfe0b04645df3b2a6e803c9d414e90b06e20cc5270ee456d2088f967d8c4322f7cc9a5882436ba6680b05f115c92693338d8b3608cba9fc6302741416aafbd9ddea4da49312f14db86dd92fc76ad9821a1c85361f29aa6c32f14f140da1bf68d6957cf6a4607b5f8ab61f26306e8124d6f28db390aa9a0345ad2a58a2e7be5c8e595440462df12f16cd129f12af61edee56272654585b604b7d3634ec136660e3169e0cf4c295061d727fda77d5d02fdb02d7440dfbe53bef2890561fb4a14d6c2ad9ded42593be9829d2e1ec885ac3377793a1dfd8ea4ec3f571b8b9b58fac327d6e41e1bdd4579718343727bfa94bd"}}}}}}, 0xfca) 00:31:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f00000016c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "76142b", 0xf98, 0x2f, 0x0, @rand_addr="14e05762fd57bcde02f8707d7c805593", @remote, {[@hopopts={0x0, 0x17, [], [@jumbo, @jumbo, @jumbo, @generic, @generic={0x0, 0xa3, "e6da690a293dbbc12e853fb871244d124760babff2909792bd8f2a0042b56be08e6061ced99de32f867c8c082ec43d286fa1ddd60249fa04d0ed40da64601e043c9a9650b16f45cd0c6fe38c4b88b098826e49a1e7ddfc53421e96d8126db4887e430493c2b001c724ea23122965214fa7603c77b55bf469a75985fd90f56708e42dd7bf91fa058cc85d6415ddb41f9edc9e2c3af226f195ef86587d71e2470125dc2d"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc15, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0, 0x0], "29a294bb1c728bab43a22bc13836a8c54b06d1d1b6bb14754d6317ca13ae64e8014778a1597e64de31b4764a3096731a7cbe2bc476fbf24dd1311a3e37fa1dacaea5c2c4e638fbe759bf794e2f85b96cda1a101189930f0bbeb5cc2dc41b7f3e9e7d2dadeccfbf4c8c553328f126592c1beaa95dce5762f1038b5cbfd2bea5911418b562844f2de8fc5d2903acad2fa3a286e0cae260bce8460adf2ef2855122af27bebfdf7cfe16752b40170c4b217a23b0dcb43f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "2a5ec2bb01e6ef900459c90f3967953e6a24b263f638c7379f49f35c71114271b297b4fc0dc4dd6fce75665e8475ae31dbe7a32dc4a488245af29cbf3b5a3df3fea3db605b2b4082ecbd6968870a6c3e0556624e4556baa949d40926e1ba06ae8deafb5c804796c76bbb86e6ba4e425dbedc1de92cba378aa140ccde1d167fbd2c4e5ce52566ec7479287b37b57513a150db99efd0b5756178db7c4c8f20e4ebafbac78d2910084729815588f2a5ae3794cc2f3decbbb77cda55ab1c0d4532a4410d0173"}, {}, {}, {0x8, 0x6558, 0x0, "7ee31949d8e082e7dfe0b04645df3b2a6e803c9d414e90b06e20cc5270ee456d2088f967d8c4322f7cc9a5882436ba6680b05f115c92693338d8b3608cba9fc6302741416aafbd9ddea4da49312f14db86dd92fc76ad9821a1c85361f29aa6c32f14f140da1bf68d6957cf6a4607b5f8ab61f26306e8124d6f28db390aa9a0345ad2a58a2e7be5c8e595440462df12f16cd129f12af61edee56272654585b604b7d3634ec136660e3169e0cf4c295061d727fda77d5d02fdb02d7440dfbe53bef2890561fb4a14d6c2ad9ded42593be9829d2e1ec885ac3377793a1dfd8ea4ec3f571b8b9b58fac327d6e41e1bdd4579718343727bfa94bd"}}}}}}, 0xfca) 00:31:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$netlink(r0, &(0x7f0000000040), 0xc) 00:31:28 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 00:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5452, 0xfffffffffffffff8) 00:31:28 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5423, 0xfffffffffffffff8) 00:31:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7]}, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) 00:31:28 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x30, 0x0, &(0x7f00000000c0)) 00:31:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x50000}]}) 00:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:28 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xa, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 00:31:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x13, 0x4) 00:31:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) [ 245.192146][ T8408] x_tables: duplicate underflow at hook 3 00:31:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) 00:31:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x600, 0x1000000}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 00:31:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x25, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="535d7d5c833f3d7d9641591d9efb0a18", 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 00:31:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) 00:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:28 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x5, &(0x7f00000006c0)=""/18, 0x12}, 0xf5a9}, {{&(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/29, 0x1d}, {&(0x7f0000002d80)=""/220, 0xdc}, {&(0x7f0000002e80)=""/77, 0x4d}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/78, 0x4e}], 0x5, &(0x7f0000003040)=""/76, 0x4c}, 0x7}, {{&(0x7f0000003600)=@ax25={{0x3, @netrom}, [@null, @default, @default, @rose, @bcast, @default, @default, @bcast]}, 0x80, 0x0, 0x0, &(0x7f0000003980)=""/64, 0x40}, 0x7}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000039c0)=""/85, 0x55}], 0x1, &(0x7f0000003a80)=""/4096, 0x1000}, 0x9}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x70bd26, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 245.428358][ T8432] xt_hashlimit: overflow, rate too high: 0 00:31:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @array]}}, &(0x7f0000000100)=""/140, 0x4a, 0x8c, 0x8}, 0x20) 00:31:28 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/141, 0x8d}], 0x1, &(0x7f0000000b40)=""/159, 0x9f}}], 0x2, 0x62, 0x0) 00:31:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) [ 245.642013][ T8448] BPF:[2] ARRAY (anon) [ 245.654343][ T8447] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.662139][ T8448] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 245.681482][ T8448] BPF: [ 245.684415][ T8448] BPF:Invalid elem [ 245.688501][ T8448] BPF: [ 245.688501][ T8448] [ 245.712022][ T8448] BPF:[2] ARRAY (anon) [ 245.724863][ T8448] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 245.737462][ T8448] BPF: 00:31:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 245.743397][ T8448] BPF:Invalid elem [ 245.755619][ T8448] BPF: [ 245.755619][ T8448] [ 245.760368][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.771349][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.778907][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.925091][ T27] audit: type=1804 audit(1585269089.243:44): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/21/bus" dev="sda1" ino=16587 res=1 [ 246.732689][ T27] audit: type=1804 audit(1585269090.053:45): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/21/bus" dev="sda1" ino=16587 res=1 [ 246.762799][ T27] audit: type=1804 audit(1585269090.083:46): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/21/bus" dev="sda1" ino=16587 res=1 [ 246.790836][ T27] audit: type=1804 audit(1585269090.113:47): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/21/bus" dev="sda1" ino=16587 res=1 00:31:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:31:30 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001c005f0214fffffffff807000000000000000000000008000400090000b70000", 0x52) 00:31:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:30 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x6, 0x0, &(0x7f00000000c0)) 00:31:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) 00:31:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) [ 247.324020][ T8477] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 247.343517][ T27] audit: type=1804 audit(1585269090.663:48): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/24/bus" dev="sda1" ino=16609 res=1 [ 247.413034][ T27] audit: type=1804 audit(1585269090.733:49): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/22/bus" dev="sda1" ino=16610 res=1 00:31:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0xdc], 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 00:31:30 executing program 5: r0 = socket$inet(0x2, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 00:31:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) [ 248.157602][ T27] audit: type=1804 audit(1585269091.483:50): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/24/bus" dev="sda1" ino=16609 res=1 [ 248.310486][ T27] audit: type=1804 audit(1585269091.523:51): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/24/bus" dev="sda1" ino=16609 res=1 [ 248.384839][ T27] audit: type=1804 audit(1585269091.533:52): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/24/bus" dev="sda1" ino=16609 res=1 [ 248.420274][ T27] audit: type=1804 audit(1585269091.563:53): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/24/bus" dev="sda1" ino=16609 res=1 00:31:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 00:31:32 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 00:31:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) 00:31:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:33 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x4, &(0x7f0000000100)=[0x0, r4, 0x0, r6]) [ 249.692359][ T27] audit: type=1804 audit(1585269093.013:54): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/23/bus" dev="sda1" ino=16613 res=1 00:31:33 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) 00:31:33 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f00000000c0)) 00:31:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) 00:31:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="535d7d5c833f3d7d9641591d9efb0a18", 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 00:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0xfffffffffffffff8) 00:31:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 250.820102][ T8565] xt_ecn: cannot match TCP bits for non-tcp packets 00:31:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) 00:31:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) 00:31:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) 00:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) 00:31:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0xfffffffffffffff8) 00:31:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7]}, 0x2}, 0x1c) 00:31:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0x0) 00:31:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) [ 251.835721][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 251.835754][ T27] audit: type=1804 audit(1585269095.153:62): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir168831356/syzkaller.odphSe/27/bus" dev="sda1" ino=16533 res=1 00:31:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) [ 252.271197][ T27] audit: type=1804 audit(1585269095.423:63): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir516951175/syzkaller.HdhAPU/35/bus" dev="sda1" ino=16635 res=1 [ 252.429447][ T27] audit: type=1804 audit(1585269095.593:64): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/27/bus" dev="sda1" ino=16536 res=1 00:31:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0x0) 00:31:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7]}, 0x2}, 0x1c) 00:31:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:36 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d9f858c9980d1e", 0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc}, &(0x7f00000003c0)={0x1055, 0x0, 0x1000000006, 0x7, 0x100, 0x0, 0x20, 0x3f}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x31405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x8000, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) 00:31:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5423, 0x0) [ 252.718137][ T27] audit: type=1804 audit(1585269096.023:65): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/25/bus" dev="sda1" ino=16632 res=1 00:31:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="290000002100190000003fffffffda260200000000e80001", 0x18}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 00:31:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:36 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d9f858c9980d1e", 0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc}, &(0x7f00000003c0)={0x1055, 0x0, 0x1000000006, 0x7, 0x100, 0x0, 0x20, 0x3f}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x31405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x8000, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) [ 253.049024][ T8631] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. 00:31:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x13, 0x4) [ 253.133590][ T27] audit: type=1804 audit(1585269096.453:66): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/26/bus" dev="sda1" ino=16575 res=1 [ 253.138127][ T8635] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. 00:31:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) [ 253.313428][ T27] audit: type=1804 audit(1585269096.633:67): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir516951175/syzkaller.HdhAPU/36/bus" dev="sda1" ino=16625 res=1 00:31:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="290000002100190000003fffffffda260200000000e80001", 0x18}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 00:31:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x398e, 0x0, 0x0, 0x0, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 253.497318][ T27] audit: type=1804 audit(1585269096.773:68): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/28/bus" dev="sda1" ino=16628 res=1 [ 253.522622][ T27] audit: type=1804 audit(1585269096.823:69): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/27/bus" dev="sda1" ino=16540 res=1 00:31:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x398e, 0x0, 0x0, 0x0, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 00:31:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x398e, 0x0, 0x0, 0x0, 0x0, "0c9908dd468cd596f1207f16fafe1f158d0141"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 253.813348][ T8659] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. 00:31:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:31:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0xc) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 00:31:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000000000404b2953c8fee05ad8c60e94b52ef7a57bfb29091f18326f3bba09dd5aab02ca49af0b7e2a34c6bb2354c91d203dcc3f15b0dd25f03f8b9a98740020e4329f939cc39af003fb48e952d7191fb94dd329fcf0d07168495674154c29c70595e8dc4c421d28eceb83ac4037ec4e79eb26417735c09c2e887b56"], 0x48}}, 0x0) 00:31:37 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:31:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) 00:31:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:31:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000000000404b2953c8fee05ad8c60e94b52ef7a57bfb29091f18326f3bba09dd5aab02ca49af0b7e2a34c6bb2354c91d203dcc3f15b0dd25f03f8b9a98740020e4329f939cc39af003fb48e952d7191fb94dd329fcf0d07168495674154c29c70595e8dc4c421d28eceb83ac4037ec4e79eb26417735c09c2e887b56"], 0x48}}, 0x0) 00:31:37 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc37, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 254.534550][ T27] audit: type=1804 audit(1585269097.853:70): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir347839923/syzkaller.kGRSp0/29/bus" dev="sda1" ino=16626 res=1 00:31:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:31:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x0, 0x2}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="535d7d5c833f3d7d9641591d9efb0a18", 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 00:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 254.708812][ T8708] xt_CT: You must specify a L4 protocol and not use inversions on it 00:31:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x13, 0x4) 00:31:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, &(0x7f00000000c0)=@ax25={{0x3, @rose}, [@netrom, @null, @null, @remote, @rose, @rose, @netrom, @null]}, &(0x7f0000000040)=0x80) [ 255.106748][ T27] audit: type=1804 audit(1585269098.423:71): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/31/bus" dev="sda1" ino=16522 res=1 00:31:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) 00:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200f9680000000000000000ff01000000eecd3f39a86461f4542bf0f7e8cdc2ba00330000000000001c0001fe880000000000000000008042f520e40500000000016dffb5bd6c677621367b792da40c6a151de85eff1f2da808eaab0310140dc680a44f0fafa53c8080d50a19ab614dea389befbfe569", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008a00"], 0x50}}, 0x0) 00:31:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 255.497179][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:31:39 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x5, 0x0, &(0x7f00000000c0)) 00:31:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 00:31:39 executing program 5: prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 00:31:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005180)=[{{&(0x7f0000001140)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x20008010) 00:31:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) 00:31:39 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001c005f0214fffffffff807000700000000000000000008000400090000b70000", 0x52) 00:31:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x28, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) 00:31:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x1) 00:31:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 256.522958][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:31:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0x40045567, 0x0) memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d9f858c9980d1e", 0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x9}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x162, 0xc}, &(0x7f00000003c0)={0x1055, 0x4000000000000001, 0x1000000006, 0x7, 0x100, 0x0, 0x20, 0x3f}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x95b, 0x0, 0x8, 0xfffffffd, 0x1f}, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x31405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x8000, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16000000}, 0x3c) dup(0xffffffffffffffff) [ 256.581230][ T8789] tipc: Enabling of bearer rejected, failed to enable media 00:31:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}) 00:31:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9ad8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0xfffffffffffffe41, 0x100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922", 0x23, 0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 00:31:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00', 0x0}, {'rose0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="535d7d5c833f3d7d9641591d9efb0a18", 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) [ 256.927376][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 256.927397][ T27] audit: type=1804 audit(1585269100.253:79): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/36/bus" dev="sda1" ino=16659 res=1 00:31:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) [ 257.592588][ T27] audit: type=1326 audit(1585269100.913:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8804 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f68a code=0x0 00:31:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) 00:31:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@rand_addr="f8f64ba2c69defe2b730f337b8fdf520", 0x0, 0x6c}, 0x2, @in=@empty, 0x0, 0x1}}, 0xe8) 00:31:40 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0x40045567, 0x0) memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d9f858c9980d1e", 0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x9}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x162, 0xc}, &(0x7f00000003c0)={0x1055, 0x4000000000000001, 0x1000000006, 0x7, 0x100, 0x0, 0x20, 0x3f}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x95b, 0x0, 0x8, 0xfffffffd, 0x1f}, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x31405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x8000, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16000000}, 0x3c) dup(0xffffffffffffffff) 00:31:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f00000000c0)) [ 257.677873][ T27] audit: type=1804 audit(1585269101.003:81): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/37/bus" dev="sda1" ino=16609 res=1 00:31:41 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f6414fffffffff807000000000000000000000008000400090000b70000", 0x52) 00:31:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 257.870539][ T8842] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 00:31:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) [ 258.011893][ T27] audit: type=1804 audit(1585269101.333:82): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/38/bus" dev="sda1" ino=16664 res=1 00:31:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 00:31:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) 00:31:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 258.243027][ T27] audit: type=1804 audit(1585269101.563:83): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/39/bus" dev="sda1" ino=16642 res=1 [ 258.343581][ T8861] xt_CT: You must specify a L4 protocol and not use inversions on it 00:31:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) 00:31:42 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 00:31:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdc8, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="8f0000000000000014001280090001007663616e00000000040100802101832592f33ca0b07bffed0f34a5d53fa2a93ff62b3b4954dd150c859b19e9ce1a34aca96b232eca4fc7a5e6400c9d699fd56e6fb9148932cc8f06050000001303a94776d5f51937f8644514a1785ed30f46416d5f9c322ce15e17d56f8caa0a167f7a3fe06c2a5ac60f2d37571e1d308c003a07651eb9828803194893a63d961be4c8eeeb2f48d84891a2f7563273d257a645c9cb2bd5a208ef"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @mcast2, @rand_addr="51631a7d265a096c713e6124b8154709", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 00:31:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4), 0x10) [ 258.817935][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 258.838181][ T27] audit: type=1804 audit(1585269102.163:84): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/40/bus" dev="sda1" ino=16677 res=1 00:31:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0xffffffffffffffff) 00:31:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdc8, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="8f0000000000000014001280090001007663616e00000000040100802101832592f33ca0b07bffed0f34a5d53fa2a93ff62b3b4954dd150c859b19e9ce1a34aca96b232eca4fc7a5e6400c9d699fd56e6fb9148932cc8f06050000001303a94776d5f51937f8644514a1785ed30f46416d5f9c322ce15e17d56f8caa0a167f7a3fe06c2a5ac60f2d37571e1d308c003a07651eb9828803194893a63d961be4c8eeeb2f48d84891a2f7563273d257a645c9cb2bd5a208ef"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @mcast2, @rand_addr="51631a7d265a096c713e6124b8154709", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 258.874048][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready 00:31:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 00:31:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x8090, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x80, 0x10001, 0x81, 0x8, 0x0, 0xfffff000, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) io_setup(0x0, 0x0) io_setup(0x441, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 259.044323][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 259.056293][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan2: link becomes ready [ 259.169731][ T27] audit: type=1804 audit(1585269102.493:85): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/41/bus" dev="sda1" ino=16676 res=1 00:31:42 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 00:31:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 259.276727][ T27] audit: type=1804 audit(1585269102.543:86): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir516951175/syzkaller.HdhAPU/46/bus" dev="sda1" ino=16677 res=1 00:31:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe) 00:31:43 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 00:31:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:31:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 259.925479][ T27] audit: type=1804 audit(1585269103.243:87): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir961694741/syzkaller.0xRzMv/42/bus" dev="sda1" ino=16679 res=1 00:31:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xc918331882cd4887}, {{@in6=@rand_addr="f8f64ba2c69defe2b730f337b8fdf520"}, 0x0, @in=@empty}}, 0xe8) [ 260.002123][ T27] audit: type=1804 audit(1585269103.313:88): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir516951175/syzkaller.HdhAPU/46/bus" dev="sda1" ino=16677 res=1 00:31:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200f9680000000000000000ff01000000eecd3f39a86461f4542bf0f7e8cdc2ba00320000000000001c0001fe880000000000000000008042f520e40500000000016dffb5bd6c677621367b792da40c6a151de85eff1f2da808eaab0310140dc680a44f0fafa53c8080d50a19ab614dea389befbfe569", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008a00"], 0x50}}, 0x0) 00:31:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:31:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 260.447296][ T8923] ================================================================== [ 260.455455][ T8923] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 260.463688][ T8923] [ 260.466035][ T8923] write to 0xffff8881251b6778 of 8 bytes by task 8928 on cpu 1: [ 260.473680][ T8923] writeback_single_inode+0x1fc/0x2f0 [ 260.479077][ T8923] sync_inode_metadata+0x75/0xa0 [ 260.483052][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 260.484022][ T8923] ext4_sync_file+0x47a/0x8b0 [ 260.484039][ T8923] vfs_fsync_range+0x7c/0x150 [ 260.484066][ T8923] ext4_buffered_write_iter+0x211/0x280 [ 260.508526][ T8923] ext4_file_write_iter+0xf4/0xd30 [ 260.513653][ T8923] do_iter_readv_writev+0x4a7/0x5d0 [ 260.518864][ T8923] do_iter_write+0x137/0x3a0 [ 260.523463][ T8923] vfs_iter_write+0x56/0x80 [ 260.527973][ T8923] iter_file_splice_write+0x530/0x830 [ 260.533360][ T8923] direct_splice_actor+0x97/0xb0 [ 260.538344][ T8923] splice_direct_to_actor+0x22f/0x540 [ 260.543746][ T8923] do_splice_direct+0x152/0x1d0 [ 260.548616][ T8923] do_sendfile+0x396/0x810 [ 260.553045][ T8923] __x64_sys_sendfile64+0xb8/0x140 [ 260.558170][ T8923] do_syscall_64+0xc7/0x390 [ 260.562687][ T8923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 260.568672][ T8923] [ 260.571008][ T8923] read to 0xffff8881251b6778 of 8 bytes by task 8923 on cpu 0: [ 260.578567][ T8923] __mark_inode_dirty+0xb6/0x940 [ 260.583516][ T8923] generic_write_end+0x1ba/0x1f0 [ 260.588469][ T8923] ext4_da_write_end+0x162/0x670 [ 260.593420][ T8923] generic_perform_write+0x1d7/0x320 [ 260.598717][ T8923] ext4_buffered_write_iter+0x14e/0x280 [ 260.604275][ T8923] ext4_file_write_iter+0xf4/0xd30 [ 260.609395][ T8923] do_iter_readv_writev+0x4a7/0x5d0 [ 260.614607][ T8923] do_iter_write+0x137/0x3a0 [ 260.619204][ T8923] vfs_iter_write+0x56/0x80 [ 260.623715][ T8923] iter_file_splice_write+0x530/0x830 [ 260.629096][ T8923] direct_splice_actor+0x97/0xb0 [ 260.634048][ T8923] splice_direct_to_actor+0x22f/0x540 [ 260.639432][ T8923] do_splice_direct+0x152/0x1d0 [ 260.644288][ T8923] do_sendfile+0x396/0x810 [ 260.648808][ T8923] __x64_sys_sendfile64+0x121/0x140 [ 260.654109][ T8923] do_syscall_64+0xc7/0x390 [ 260.658726][ T8923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 260.664611][ T8923] [ 260.666936][ T8923] Reported by Kernel Concurrency Sanitizer on: [ 260.673094][ T8923] CPU: 0 PID: 8923 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 260.681685][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.691743][ T8923] ================================================================== [ 260.699810][ T8923] Kernel panic - not syncing: panic_on_warn set ... [ 260.706414][ T8923] CPU: 0 PID: 8923 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 260.715001][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.725091][ T8923] Call Trace: [ 260.728396][ T8923] dump_stack+0x11d/0x187 [ 260.732740][ T8923] panic+0x210/0x640 [ 260.736649][ T8923] ? vprintk_func+0x89/0x13a [ 260.741268][ T8923] kcsan_report.cold+0xc/0xf [ 260.745881][ T8923] kcsan_setup_watchpoint+0x3fb/0x440 [ 260.751797][ T8923] __mark_inode_dirty+0xb6/0x940 [ 260.756843][ T8923] ? __read_once_size+0x2f/0xd0 [ 260.761707][ T8923] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 260.767623][ T8923] generic_write_end+0x1ba/0x1f0 [ 260.772591][ T8923] ext4_da_write_end+0x162/0x670 [ 260.777590][ T8923] ? ext4_write_end+0x7f0/0x7f0 [ 260.782656][ T8923] generic_perform_write+0x1d7/0x320 [ 260.787966][ T8923] ext4_buffered_write_iter+0x14e/0x280 [ 260.793530][ T8923] ext4_file_write_iter+0xf4/0xd30 [ 260.798661][ T8923] ? common_file_perm+0x1d1/0x490 [ 260.803696][ T8923] ? generic_update_time+0x189/0x270 [ 260.808996][ T8923] do_iter_readv_writev+0x4a7/0x5d0 [ 260.814214][ T8923] do_iter_write+0x137/0x3a0 [ 260.818900][ T8923] ? __kmalloc+0x21c/0x640 [ 260.823336][ T8923] vfs_iter_write+0x56/0x80 [ 260.827850][ T8923] iter_file_splice_write+0x530/0x830 [ 260.833250][ T8923] ? page_cache_pipe_buf_release+0xf0/0xf0 [ 260.839070][ T8923] direct_splice_actor+0x97/0xb0 [ 260.844025][ T8923] splice_direct_to_actor+0x22f/0x540 [ 260.849419][ T8923] ? generic_pipe_buf_nosteal+0x20/0x20 [ 260.854990][ T8923] do_splice_direct+0x152/0x1d0 [ 260.859869][ T8923] do_sendfile+0x396/0x810 [ 260.864322][ T8923] __x64_sys_sendfile64+0x121/0x140 [ 260.869550][ T8923] do_syscall_64+0xc7/0x390 [ 260.874079][ T8923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 260.879975][ T8923] RIP: 0033:0x45c849 [ 260.883969][ T8923] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.903921][ T8923] RSP: 002b:00007f7259156c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.913208][ T8923] RAX: ffffffffffffffda RBX: 00007f72591576d4 RCX: 000000000045c849 [ 260.921180][ T8923] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 260.929153][ T8923] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.937132][ T8923] R10: 00008400fffffffb R11: 0000000000000246 R12: 00000000ffffffff [ 260.945107][ T8923] R13: 00000000000008d4 R14: 00000000004cb786 R15: 000000000076bf0c [ 260.954634][ T8923] Kernel Offset: disabled [ 260.959012][ T8923] Rebooting in 86400 seconds..