[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   51.854280][   T27] audit: type=1800 audit(1571803595.181:25): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   51.893207][   T27] audit: type=1800 audit(1571803595.181:26): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   51.936794][   T27] audit: type=1800 audit(1571803595.191:27): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts.
2019/10/23 04:06:45 fuzzer started
2019/10/23 04:06:47 dialing manager at 10.128.0.26:45337
2019/10/23 04:06:47 syscalls: 2525
2019/10/23 04:06:47 code coverage: enabled
2019/10/23 04:06:47 comparison tracing: enabled
2019/10/23 04:06:47 extra coverage: extra coverage is not supported by the kernel
2019/10/23 04:06:47 setuid sandbox: enabled
2019/10/23 04:06:47 namespace sandbox: enabled
2019/10/23 04:06:47 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/23 04:06:47 fault injection: enabled
2019/10/23 04:06:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/23 04:06:47 net packet injection: enabled
2019/10/23 04:06:47 net device setup: enabled
2019/10/23 04:06:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
04:06:50 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

04:06:50 executing program 1:
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
r1 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000840)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0)

syzkaller login: [   66.971220][ T8495] IPVS: ftp: loaded support on port[0] = 21
[   67.152901][ T8495] chnl_net:caif_netlink_parms(): no params data found
[   67.164941][ T8498] IPVS: ftp: loaded support on port[0] = 21
[   67.225434][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.233372][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.241423][ T8495] device bridge_slave_0 entered promiscuous mode
[   67.252919][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.260092][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.270418][ T8495] device bridge_slave_1 entered promiscuous mode
04:06:50 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}, 0x20)

[   67.305065][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.318656][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.373897][ T8495] team0: Port device team_slave_0 added
[   67.419788][ T8495] team0: Port device team_slave_1 added
[   67.473701][ T8498] chnl_net:caif_netlink_parms(): no params data found
04:06:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000100))

[   67.556343][ T8495] device hsr_slave_0 entered promiscuous mode
[   67.603196][ T8495] device hsr_slave_1 entered promiscuous mode
[   67.675669][ T8501] IPVS: ftp: loaded support on port[0] = 21
[   67.697946][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.705167][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.713016][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.720098][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.734643][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.741811][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.750464][ T8498] device bridge_slave_0 entered promiscuous mode
[   67.774559][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.781631][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.796089][ T8498] device bridge_slave_1 entered promiscuous mode
[   67.809860][ T8503] IPVS: ftp: loaded support on port[0] = 21
[   67.828622][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.864169][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
04:06:51 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x400, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040))

[   67.905730][ T8498] team0: Port device team_slave_0 added
[   67.961697][ T8498] team0: Port device team_slave_1 added
[   68.065365][ T8501] chnl_net:caif_netlink_parms(): no params data found
[   68.088072][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0
04:06:51 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

[   68.157663][ T8498] device hsr_slave_0 entered promiscuous mode
[   68.212679][ T8498] device hsr_slave_1 entered promiscuous mode
[   68.262487][ T8498] debugfs: Directory 'hsr0' with parent '/' already present!
[   68.282701][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.290959][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.300116][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   68.316894][ T8507] IPVS: ftp: loaded support on port[0] = 21
[   68.331365][ T8510] IPVS: ftp: loaded support on port[0] = 21
[   68.347064][ T8495] 8021q: adding VLAN 0 to HW filter on device team0
[   68.370756][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.378712][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.386923][ T8501] device bridge_slave_0 entered promiscuous mode
[   68.399033][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.406749][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.434936][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.441995][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.451245][ T8501] device bridge_slave_1 entered promiscuous mode
[   68.464921][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.473731][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.482127][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.489220][ T8504] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.516165][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.525787][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.534665][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.541710][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.549302][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.598451][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.628241][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.639670][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.661929][ T8501] team0: Port device team_slave_0 added
[   68.674699][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.683983][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.692954][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.706995][ T8501] team0: Port device team_slave_1 added
[   68.738150][ T8503] chnl_net:caif_netlink_parms(): no params data found
[   68.749760][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.758678][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.835485][ T8501] device hsr_slave_0 entered promiscuous mode
[   68.892679][ T8501] device hsr_slave_1 entered promiscuous mode
[   68.942446][ T8501] debugfs: Directory 'hsr0' with parent '/' already present!
[   68.998025][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.007390][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.016331][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.025351][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.036714][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.099009][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.125396][ T8507] chnl_net:caif_netlink_parms(): no params data found
[   69.139894][ T8510] chnl_net:caif_netlink_parms(): no params data found
[   69.156732][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.173966][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.181073][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.189475][ T8503] device bridge_slave_0 entered promiscuous mode
[   69.238169][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.246536][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.254650][ T8503] device bridge_slave_1 entered promiscuous mode
[   69.265550][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.273668][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.281579][ T8507] device bridge_slave_0 entered promiscuous mode
[   69.295158][ T8498] 8021q: adding VLAN 0 to HW filter on device team0
[   69.301994][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.309307][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.320258][ T8510] device bridge_slave_0 entered promiscuous mode
[   69.329847][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.337124][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.345144][ T8510] device bridge_slave_1 entered promiscuous mode
[   69.359539][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.367639][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.375568][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.386110][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.394104][ T8507] device bridge_slave_1 entered promiscuous mode
[   69.412889][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.427923][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.436712][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.445479][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.452572][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.479745][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.493027][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.517200][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.529034][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.544627][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.556148][ T8507] team0: Port device team_slave_0 added
[   69.571793][ T8507] team0: Port device team_slave_1 added
[   69.580701][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.606658][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.615866][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.624422][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.631554][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.649157][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.679727][ T8503] team0: Port device team_slave_0 added
[   69.688869][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.720436][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.741936][ T8510] team0: Port device team_slave_0 added
[   69.756551][ T8503] team0: Port device team_slave_1 added
[   69.766845][ T8501] 8021q: adding VLAN 0 to HW filter on device team0
[   69.772277][    C1] hrtimer: interrupt took 35295 ns
[   69.789208][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.798910][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.808153][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.816757][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.824725][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.833681][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.842062][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.842251][ T8522] serio: Serial port pts1
[   69.849320][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.849891][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.869809][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.879155][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.886268][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.894128][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.901927][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
04:06:53 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   69.955287][ T8507] device hsr_slave_0 entered promiscuous mode
[   69.988865][ T8507] device hsr_slave_1 entered promiscuous mode
[   70.042439][ T8507] debugfs: Directory 'hsr0' with parent '/' already present!
[   70.052530][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.061045][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.077356][ T8527] serio: Serial port pts1
[   70.078686][ T8510] team0: Port device team_slave_1 added
04:06:53 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   70.145328][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.157877][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.169080][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.178344][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.188734][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.197947][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.235354][ T8510] device hsr_slave_0 entered promiscuous mode
[   70.262983][ T8510] device hsr_slave_1 entered promiscuous mode
[   70.280766][ T8532] serio: Serial port pts1
[   70.302539][ T8510] debugfs: Directory 'hsr0' with parent '/' already present!
04:06:53 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   70.333083][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.341065][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.360206][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.369505][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.385729][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.398705][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.410525][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.496691][ T8503] device hsr_slave_0 entered promiscuous mode
[   70.504636][ T8537] serio: Serial port pts1
04:06:53 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   70.553128][ T8503] device hsr_slave_1 entered promiscuous mode
[   70.613948][ T8503] debugfs: Directory 'hsr0' with parent '/' already present!
[   70.626935][ T8498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.655617][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.664470][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.697406][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.707741][ T8542] serio: Serial port pts1
[   70.751659][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.785842][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0
04:06:54 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   70.841820][ T8507] 8021q: adding VLAN 0 to HW filter on device team0
[   70.891105][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.900650][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.908971][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.918815][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.928202][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.935459][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.962172][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.989076][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.998137][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
04:06:54 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   71.025521][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.043561][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.050776][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.077583][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.090924][ T8503] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.114167][ T8510] 8021q: adding VLAN 0 to HW filter on device team0
[   71.124824][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.140401][ T8560] serio: Serial port pts1
[   71.145967][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.156900][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.167459][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.186598][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.198939][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.209969][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.219326][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
04:06:54 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}, 0x20)

[   71.283003][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.295988][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.314366][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.321553][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state
04:06:54 executing program 1:
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
r1 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000840)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0)

04:06:54 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

[   71.347127][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.410273][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.441075][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.448231][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.465789][ T8572] serio: Serial port pts1
[   71.498909][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.518225][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.534536][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.559296][ T8507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.583885][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.609073][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.625355][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.636226][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.649346][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.658795][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.666671][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.675554][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.684652][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.693711][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.702229][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.710956][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.719388][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.729511][ T8503] 8021q: adding VLAN 0 to HW filter on device team0
[   71.746690][ T8510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.758222][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.766291][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.774670][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.783629][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.809033][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.817696][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.826919][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.834105][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.841804][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.863068][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.871563][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.884173][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.891237][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.903752][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.918344][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.930778][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.940687][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.960509][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.976561][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.985714][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.994722][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.003307][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.011730][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.025082][ T8503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.036788][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.046132][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.070253][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.079744][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.119713][ T8503] 8021q: adding VLAN 0 to HW filter on device batadv0
04:06:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000100))

04:06:55 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}, 0x20)

04:06:55 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

04:06:55 executing program 1:
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
r1 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000840)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0)

04:06:55 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

04:06:55 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x400, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040))

04:06:55 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}, 0x20)

04:06:55 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x400, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040))

04:06:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000100))

04:06:55 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

04:06:55 executing program 1:
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
r1 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(&(0x7f0000000840)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0)

04:06:55 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

04:06:56 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x400, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040))

04:06:56 executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x7)
getpgrp(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
read(r1, 0x0, 0x6c00)
dup3(r1, r0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0])

04:06:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000100))

04:06:56 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

04:06:56 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

[   72.928419][ T1080] ------------[ cut here ]------------
[   72.933957][ T1080] WARNING: CPU: 0 PID: 1080 at mm/khugepaged.c:1643 collapse_file+0x1f9d/0x4170
[   72.942983][ T1080] Kernel panic - not syncing: panic_on_warn set ...
[   72.949601][ T1080] CPU: 0 PID: 1080 Comm: khugepaged Not tainted 5.4.0-rc4-next-20191022 #0
[   72.958179][ T1080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   72.968226][ T1080] Call Trace:
[   72.971530][ T1080]  dump_stack+0x172/0x1f0
[   72.975855][ T1080]  ? collapse_file+0x1ef0/0x4170
[   72.980798][ T1080]  panic+0x2e3/0x75c
[   72.984695][ T1080]  ? add_taint.cold+0x16/0x16
[   72.989370][ T1080]  ? printk+0xba/0xed
[   72.993345][ T1080]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[   72.998805][ T1080]  ? __warn.cold+0x14/0x35
[   73.003200][ T1080]  ? __warn+0xd9/0x1d0
[   73.007262][ T1080]  ? collapse_file+0x1f9d/0x4170
[   73.012181][ T1080]  __warn.cold+0x2f/0x35
[   73.016417][ T1080]  ? report_bug.cold+0x63/0xb2
[   73.020979][ T3883] kobject: 'loop2' (00000000e8b0f9a4): kobject_uevent_env
[   73.021191][ T1080]  ? collapse_file+0x1f9d/0x4170
[   73.028461][ T3883] kobject: 'loop2' (00000000e8b0f9a4): fill_kobj_path: path = '/devices/virtual/block/loop2'
[   73.033213][ T1080]  report_bug+0x289/0x300
[   73.033233][ T1080]  do_error_trap+0x11b/0x200
[   73.033250][ T1080]  do_invalid_op+0x37/0x50
[   73.033262][ T1080]  ? collapse_file+0x1f9d/0x4170
[   73.033276][ T1080]  invalid_op+0x23/0x30
[   73.033289][ T1080] RIP: 0010:collapse_file+0x1f9d/0x4170
[   73.033306][ T1080] Code: a1 c0 ff 31 c9 ba 01 00 00 00 4c 89 fe 48 8b bd c0 fe ff ff e8 e4 e9 ec ff e9 b4 fd ff ff 4c 8b bd 88 fe ff ff e8 93 a1 c0 ff <0f> 0b 4c 8b a3 50 ff ff ff c7 85 80 fe ff ff 00 00 00 00 e9 05 f6
[   73.075983][ T3883] kobject: 'loop4' (0000000098a72db2): kobject_uevent_env
[   73.090883][ T1080] RSP: 0018:ffff8880a7d47ad0 EFLAGS: 00010293
[   73.090895][ T1080] RAX: ffff8880a7e96440 RBX: ffff8880a7d47c88 RCX: ffffffff81b2b688
[   73.090902][ T1080] RDX: 0000000000000000 RSI: ffffffff81b2b9ad RDI: 0000000000000001
[   73.090910][ T1080] RBP: ffff8880a7d47cb0 R08: ffff8880a7e96440 R09: fffff94000475da9
04:06:56 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0)

04:06:56 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x400, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040))

[   73.090923][ T1080] R10: fffff94000475da8 R11: ffffea00023aed47 R12: 0000000000000001
[   73.101031][ T3883] kobject: 'loop4' (0000000098a72db2): fill_kobj_path: path = '/devices/virtual/block/loop4'
[   73.104055][ T1080] R13: ffffea00023de888 R14: 0000000000000000 R15: ffffea0001bb8000
[   73.104084][ T1080]  ? collapse_file+0x1c78/0x4170
[   73.104097][ T1080]  ? collapse_file+0x1f9d/0x4170
[   73.104117][ T1080]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[   73.104138][ T1080]  ? khugepaged+0x21d0/0x4360
[   73.104156][ T1080]  ? trace_event_raw_event_mm_collapse_huge_page_isolate+0x370/0x370
[   73.174858][ T3883] kobject: 'loop3' (000000005d9aa6db): kobject_uevent_env
[   73.182766][ T1080]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   73.182784][ T1080]  ? khugepaged_find_target_node+0x142/0x180
[   73.196101][ T3883] kobject: 'loop3' (000000005d9aa6db): fill_kobj_path: path = '/devices/virtual/block/loop3'
[   73.201544][ T1080]  khugepaged+0x2da9/0x4360
[   73.201564][ T1080]  ? __kasan_check_read+0x11/0x20
[   73.201579][ T1080]  ? __lock_acquire+0x16f2/0x4a00
[   73.201599][ T1080]  ? _raw_spin_unlock_irq+0x23/0x80
[   73.231397][ T1080]  ? finish_task_switch+0x147/0x750
[   73.236593][ T1080]  ? _raw_spin_unlock_irq+0x23/0x80
[   73.241791][ T1080]  ? lockdep_hardirqs_on+0x421/0x5e0
[   73.247087][ T1080]  ? collapse_pte_mapped_thp+0xbe0/0xbe0
[   73.252723][ T1080]  ? lock_downgrade+0x920/0x920
[   73.257577][ T1080]  ? finish_wait+0x260/0x260
[   73.262163][ T1080]  ? lockdep_hardirqs_on+0x421/0x5e0
[   73.266959][ T3883] kobject: 'loop2' (00000000e8b0f9a4): kobject_uevent_env
[   73.267446][ T1080]  ? trace_hardirqs_on+0x67/0x240
[   73.276516][ T3883] kobject: 'loop2' (00000000e8b0f9a4): fill_kobj_path: path = '/devices/virtual/block/loop2'
[   73.279538][ T1080]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[   73.279553][ T1080]  ? __kthread_parkme+0x108/0x1c0
[   73.279565][ T1080]  ? __kasan_check_read+0x11/0x20
[   73.279581][ T1080]  kthread+0x361/0x430
[   73.310094][ T1080]  ? collapse_pte_mapped_thp+0xbe0/0xbe0
[   73.315725][ T1080]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[   73.321453][ T1080]  ret_from_fork+0x24/0x30
[   73.327158][ T1080] Kernel Offset: disabled
[   73.331534][ T1080] Rebooting in 86400 seconds..