Starting Permit User Sessions... Starting System Logging Service... [ OK ] Started Regular background program processing daemon. Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [** ] (2 of 2) A start job is running for…Shell server (1min 35s / 2min 52s)[ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/10/16 00:29:27 fuzzer started 2020/10/16 00:29:29 dialing manager at 10.128.0.26:38335 2020/10/16 00:29:29 syscalls: 3414 2020/10/16 00:29:29 code coverage: enabled 2020/10/16 00:29:29 comparison tracing: enabled 2020/10/16 00:29:29 extra coverage: enabled 2020/10/16 00:29:29 setuid sandbox: enabled 2020/10/16 00:29:29 namespace sandbox: enabled 2020/10/16 00:29:29 Android sandbox: enabled 2020/10/16 00:29:29 fault injection: enabled 2020/10/16 00:29:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/16 00:29:29 net packet injection: enabled 2020/10/16 00:29:29 net device setup: enabled 2020/10/16 00:29:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/16 00:29:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/16 00:29:29 USB emulation: enabled 2020/10/16 00:29:29 hci packet injection: enabled 2020/10/16 00:29:29 wifi device emulation: enabled 00:31:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, 'hsr0\x00'}, 0x18) syzkaller login: [ 330.510511][ T26] audit: type=1400 audit(1602808313.593:8): avc: denied { execmem } for pid=8513 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 332.094977][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 332.649089][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 332.952518][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.960091][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.970254][ T8514] device bridge_slave_0 entered promiscuous mode [ 333.035361][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.042894][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.052875][ T8514] device bridge_slave_1 entered promiscuous mode [ 333.192924][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.212628][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.282219][ T8514] team0: Port device team_slave_0 added [ 333.304270][ T8514] team0: Port device team_slave_1 added [ 333.365940][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.373764][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.400257][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.427104][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.434357][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.460619][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.543531][ T8514] device hsr_slave_0 entered promiscuous mode [ 333.560290][ T8514] device hsr_slave_1 entered promiscuous mode [ 333.945250][ T8514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.967888][ T8514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.991674][ T8514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.019365][ T4875] Bluetooth: hci0: command 0x0409 tx timeout [ 334.032159][ T8514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.407466][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.447799][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.457990][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.484296][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.510815][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.521183][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.531083][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.538440][ T4875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.589348][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.599662][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.610004][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.621963][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.629400][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.638825][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.660239][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.706903][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.718042][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.753574][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.765975][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.777409][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.797366][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.799619][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.852477][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.862599][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.880602][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.951963][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.959902][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.003477][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.080884][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.091423][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.168208][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.178380][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.204617][ T8514] device veth0_vlan entered promiscuous mode [ 335.217479][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.229174][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.272880][ T8514] device veth1_vlan entered promiscuous mode [ 335.365951][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.376431][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.386412][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.396842][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.425100][ T8514] device veth0_macvtap entered promiscuous mode [ 335.455677][ T8514] device veth1_macvtap entered promiscuous mode [ 335.540172][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.548143][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.559028][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.568856][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.579774][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.618934][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.627844][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.638526][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.665125][ T8514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.674813][ T8514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.683874][ T8514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.692822][ T8514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.103029][ T8736] Bluetooth: hci0: command 0x041b tx timeout [ 336.104130][ T8651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.117213][ T8651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.130126][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.271130][ T8651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.279049][ T8651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.287967][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:31:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, 'hsr0\x00'}, 0x18) 00:31:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, 'hsr0\x00'}, 0x18) 00:32:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, 'hsr0\x00'}, 0x18) 00:32:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x224, 0x17c, 0x17c, 0x0, 0x5, 0x330, 0x260, 0x260, 0x330, 0x260, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x224, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x31, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @private0, @private0, @loopback, @loopback, @loopback, @local, @empty, @private0, @private1, @loopback, @empty, @mcast1]}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@dev, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) [ 337.561602][ T8772] xt_CT: You must specify a L4 protocol and not use inversions on it 00:32:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x224, 0x17c, 0x17c, 0x0, 0x5, 0x330, 0x260, 0x260, 0x330, 0x260, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x224, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x31, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @private0, @private0, @loopback, @loopback, @loopback, @local, @empty, @private0, @private1, @loopback, @empty, @mcast1]}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@dev, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) [ 337.880263][ T8774] xt_CT: You must specify a L4 protocol and not use inversions on it 00:32:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x224, 0x17c, 0x17c, 0x0, 0x5, 0x330, 0x260, 0x260, 0x330, 0x260, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x224, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x31, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @private0, @private0, @loopback, @loopback, @loopback, @local, @empty, @private0, @private1, @loopback, @empty, @mcast1]}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@dev, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) [ 338.183804][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 338.190980][ T8778] xt_CT: You must specify a L4 protocol and not use inversions on it 00:32:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x224, 0x17c, 0x17c, 0x0, 0x5, 0x330, 0x260, 0x260, 0x330, 0x260, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x224, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x31, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @private0, @private0, @loopback, @loopback, @loopback, @local, @empty, @private0, @private1, @loopback, @empty, @mcast1]}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@dev, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454) [ 338.416735][ T8781] xt_CT: You must specify a L4 protocol and not use inversions on it 00:32:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) [ 338.734544][ T8784] tipc: Started in network mode [ 338.739792][ T8784] tipc: Own node identity aaaaaaaaaa31, cluster identity 4711 [ 338.748862][ T8784] tipc: Enabled bearer , priority 10 [ 338.811115][ T8785] tipc: Enabling of bearer rejected, already enabled 00:32:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) [ 339.035748][ T8788] tipc: Enabling of bearer rejected, already enabled 00:32:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) [ 339.214341][ T8790] tipc: Enabling of bearer rejected, already enabled 00:32:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) [ 339.480438][ T8793] tipc: Enabling of bearer rejected, already enabled 00:32:02 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @window={0x3, 0x0, 0x25b}], 0x3) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000050002000000000006000a000000000014"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000100), 0x0) 00:32:03 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @window={0x3, 0x0, 0x25b}], 0x3) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000050002000000000006000a000000000014"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000100), 0x0) [ 339.870778][ T8740] tipc: 32-bit node address hash set to aaaa9b00 00:32:03 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @window={0x3, 0x0, 0x25b}], 0x3) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000050002000000000006000a000000000014"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000100), 0x0) [ 340.264147][ T5] Bluetooth: hci0: command 0x0419 tx timeout 00:32:03 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @window={0x3, 0x0, 0x25b}], 0x3) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000050002000000000006000a000000000014"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000100), 0x0) 00:32:03 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="ce"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x802, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:32:04 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="ce"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x802, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:32:04 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="ce"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x802, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:32:04 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="ce"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x802, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:32:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc10c5541, &(0x7f0000001000)) 00:32:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc10c5541, &(0x7f0000001000)) 00:32:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc10c5541, &(0x7f0000001000)) 00:32:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc10c5541, &(0x7f0000001000)) 00:32:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x4, 0x1100082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) pipe2(0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'NETMAP\x00'}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) mq_open(0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x38, 0x0, 0x8001}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 343.262480][ T3110] blk_update_request: I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:32:06 executing program 0: openat$ttyprintk(0xffffff9c, &(0x7f0000000180)='/dev/ttyprintk\x00', 0x101000, 0x0) r0 = socket(0x11, 0x800000003, 0x8) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, 0x0, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x6, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="a27e7083af1fb7b6e0"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f0000000200)=0x53) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r5, @ANYBLOB="8cb5e878254dfc1d6372013c0cda9abe31a20e5029142e0a8a666ae4e7a5e72f784a80cdce6581be68d0207ea74bd260a18b37b22f1f22d75809366b2d510b8a9736a6c9481cc982a70168644cc6723cee501352a8531130c09f07b506a0285e5fbb4264170e9d4c6838cf0839a79df853fc58e64ce5c8f55e435724cd76704431ddc83a80800637bef0d0bc5079", @ANYRES32=0x0, @ANYBLOB="8c4b9705edea4d27486adbfd7d2dff26e61ff01c8296359dde2322cc241c992f807586a079dfbea85265"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', r5}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r2, &(0x7f00000012c0)="0c2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 343.507335][ T26] audit: type=1400 audit(1602808326.579:9): avc: denied { create } for pid=8845 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 343.559534][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:32:06 executing program 0: r0 = socket(0x10, 0x80002, 0x0) creat(0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000200)=""/102) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x1f) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00ff00109abc9b622342aa64ae49a77283d9b84977c451ec0fbf9c573ca6", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb59f6aa90fbec56b78a52078c1eed0f3"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r4, 0x3, 0x0) [ 343.954392][ C0] hrtimer: interrupt took 86131 ns 00:32:07 executing program 1: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x1, {0xe, 0x0, 0x8}}, 0x14) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x80, 0x1}}, 0x14) r0 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x701000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x20, 0x5, 0xff, 0xb}) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x810, @none, 0xc3, 0x2}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x80, 0x14, 0x0, 0x5, 0xfc, 0x1, 0xc8, 0x6, 0x400}, ["", "", "", ""]}, 0x1c}}, 0x840) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000280)=""/103) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000300)={0x4, @raw_data="c1a27f10723fddd75c9f20b4ebdac58e24c0d3715e90f03482658e41fd46d8ef037740484245a5a5adde90be863f1f1f694da579471e39542ffdddb92892c0741839e73ef148b0517d56b850b8323faefd09cb42ee944510af927f0da6306cfd240ee1eaa6b9fc925ff78f2916b837ebec0ab9f1305861732292715d824d948e30d55ff59b3ddffe4b5ecb5b614b20e21e556d4990e5423bd35085a477a21719560a7492748b17292ef315b4d3588b8571968ab830705c168df27689be8b755c1a9ee11229e6ffb2"}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d09, &(0x7f0000000440)) r3 = dup(0xffffffffffffffff) write$P9_RSETATTR(r3, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) recvmmsg(r3, &(0x7f0000003d80)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000580)=""/31, 0x1f}], 0x2, &(0x7f0000000600)=""/14, 0xe}, 0x8}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/96, 0x60}], 0x1, &(0x7f0000000780)=""/17, 0x11}, 0xffffff80}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/198, 0xc6}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/9, 0x9}], 0x5, &(0x7f0000000b80)=""/4096, 0x1000}, 0x551a}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001b80)=""/18, 0x12}, {&(0x7f0000001bc0)=""/203, 0xcb}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/202, 0xca}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/78, 0x4e}, {&(0x7f0000001fc0)=""/50, 0x32}, {&(0x7f0000002000)=""/82, 0x52}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/192, 0xc0}], 0xa, &(0x7f00000031c0)=""/241, 0xf1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000032c0)=""/162, 0xa2}, {&(0x7f0000003380)=""/77, 0x4d}], 0x2, &(0x7f0000003440)=""/214, 0xd6}, 0x4}, {{&(0x7f0000003540)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003940)=[{&(0x7f00000035c0)=""/242, 0xf2}, {&(0x7f00000036c0)=""/123, 0x7b}, {&(0x7f0000003740)=""/154, 0x9a}, {&(0x7f0000003800)=""/39, 0x27}, {&(0x7f0000003840)=""/8, 0x8}, {&(0x7f0000003880)=""/189, 0xbd}], 0x6, &(0x7f0000003980)=""/56, 0x38}, 0x100}, {{&(0x7f00000039c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a40)=""/170, 0xaa}, {&(0x7f0000003b00)=""/131, 0x83}, {&(0x7f0000003bc0)=""/186, 0xba}], 0x3, &(0x7f0000003cc0)=""/191, 0xbf}, 0x7}], 0x7, 0x8041, &(0x7f0000003e80)) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000003ec0), 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000003f00)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000003f40)) 00:32:08 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/154, 0x9a) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='nfs\x00', 0x0, &(0x7f0000000000)) [ 345.419486][ T8862] nfs: Unknown parameter './file0' [ 345.437404][ T8863] nfs: Unknown parameter './file0' 00:32:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) [ 345.897758][ T3110] blk_update_request: I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 345.909739][ T3110] blk_update_request: I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 346.100593][ T8858] IPVS: ftp: loaded support on port[0] = 21 00:32:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) [ 346.675759][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 346.687600][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) [ 347.008307][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 347.235004][ T3109] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 347.332873][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.341250][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.352591][ T8858] device bridge_slave_0 entered promiscuous mode [ 347.368232][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.376129][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.386102][ T8858] device bridge_slave_1 entered promiscuous mode [ 347.446696][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.466058][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:32:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) [ 347.535166][ T8858] team0: Port device team_slave_0 added [ 347.570893][ T8858] team0: Port device team_slave_1 added [ 347.688715][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.695985][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.724044][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.791781][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.799203][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.825974][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.940445][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 347.953963][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 347.963893][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 348.010344][ T8858] device hsr_slave_0 entered promiscuous mode 00:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) [ 348.110574][ T8858] device hsr_slave_1 entered promiscuous mode [ 348.135934][ T8858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.143745][ T8858] Cannot create hsr debugfs directory [ 348.471097][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) [ 349.001437][ T8858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.033540][ T8858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.035111][ T3110] blk_update_request: I/O error, dev loop7, sector 896 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 [ 349.118117][ T8858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.195767][ T8858] netdevsim netdevsim1 netdevsim3: renamed from eth3 00:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) [ 349.625934][ T3110] blk_update_request: I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 349.637844][ T3110] blk_update_request: I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) [ 349.827940][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.879335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.889687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.916954][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.945705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.957271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.967735][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.975280][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.023351][ T8742] Bluetooth: hci1: command 0x041b tx timeout [ 350.047910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.057566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.068066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.078307][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.085866][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.095318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.107091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.157579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.168592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.226041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.236690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.247757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.258486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.268609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.360475][ T8858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.375460][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.405311][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 350.417388][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 350.474139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.484692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:32:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) [ 350.621093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.629218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.731422][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.885669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.896185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.937192][ T3110] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 350.950111][ T3110] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 351.027047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.037155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.073150][ T8858] device veth0_vlan entered promiscuous mode [ 351.084853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.094454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 00:32:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) [ 351.135506][ T8858] device veth1_vlan entered promiscuous mode [ 351.235603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.245661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.295066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.305877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.346936][ T8858] device veth0_macvtap entered promiscuous mode [ 351.384710][ T8858] device veth1_macvtap entered promiscuous mode [ 351.453077][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 351.465955][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.480906][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.489942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.499951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.509939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.520461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.672490][ T8858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 351.684441][ T8858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.699039][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.707928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.718607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.881591][ T8858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.891047][ T8858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.900195][ T8858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.909258][ T8858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.104971][ T8742] Bluetooth: hci1: command 0x040f tx timeout [ 352.311758][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.320706][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.332659][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.473001][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.481633][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.491983][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:32:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) [ 354.184475][ T8740] Bluetooth: hci1: command 0x0419 tx timeout 00:32:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 354.278102][ T3110] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 354.290021][ T3110] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) [ 354.807089][ T3110] blk_update_request: I/O error, dev loop7, sector 896 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 354.818880][ T3110] blk_update_request: I/O error, dev loop7, sector 896 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 356.128868][ T3110] blk_update_request: I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 356.140933][ T3110] blk_update_request: I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) 00:32:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) [ 359.958310][ T3110] blk_update_request: I/O error, dev loop7, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 359.971184][ T3110] blk_update_request: I/O error, dev loop7, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) [ 360.317838][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 360.329806][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 360.657537][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:32:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) 00:32:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 361.188133][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:32:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 361.687778][ T3109] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 361.700059][ T3109] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 362.529566][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 362.541406][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) 00:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) 00:32:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) 00:32:27 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:28 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:28 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:29 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:30 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:30 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 368.600249][ T3109] print_req_error: 2 callbacks suppressed [ 368.600324][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 368.617981][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 369.295053][ T9350] IPVS: ftp: loaded support on port[0] = 21 00:32:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 370.377756][ T9350] chnl_net:caif_netlink_parms(): no params data found [ 370.844647][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.853422][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.863441][ T9350] device bridge_slave_0 entered promiscuous mode [ 370.983768][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.991590][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.001642][ T9350] device bridge_slave_1 entered promiscuous mode [ 371.125909][ T9350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.150317][ T9350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.220420][ T9350] team0: Port device team_slave_0 added [ 371.232329][ T8742] Bluetooth: hci2: command 0x0409 tx timeout [ 371.241337][ T9350] team0: Port device team_slave_1 added [ 371.354086][ T9350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.362047][ T9350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.389981][ T9350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.474494][ T9350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.481818][ T9350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.508489][ T9350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.701289][ T9350] device hsr_slave_0 entered promiscuous mode [ 371.731632][ T9350] device hsr_slave_1 entered promiscuous mode [ 371.771659][ T9350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.779843][ T9350] Cannot create hsr debugfs directory [ 372.393041][ T9350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.430324][ T9350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.488650][ T9350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.533687][ T9350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.202179][ T9350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.270340][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.281315][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.309372][ T9350] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.322704][ T8742] Bluetooth: hci2: command 0x041b tx timeout [ 373.340765][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.352589][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.362548][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.370035][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.433763][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.446130][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.456524][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.466844][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.474337][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.483716][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.495322][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.542472][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.553786][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.637811][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.648090][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.659685][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.735339][ T9350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.746868][ T9350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.782568][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.793731][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.804655][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.814893][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.836248][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.907352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.915411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.958787][ T9350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.037345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.048791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.127823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.138468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.173284][ T9350] device veth0_vlan entered promiscuous mode [ 374.182181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.192163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.264765][ T9350] device veth1_vlan entered promiscuous mode [ 374.379692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.390380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.429640][ T9350] device veth0_macvtap entered promiscuous mode [ 374.468043][ T9350] device veth1_macvtap entered promiscuous mode [ 374.543175][ T9350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.553952][ T9350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.564822][ T9350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.575455][ T9350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.590322][ T9350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.598834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.608913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.618866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.629794][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.682174][ T9350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.692883][ T9350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.703111][ T9350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.715784][ T9350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.732916][ T9350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.745616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.756838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.820093][ T9350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.829195][ T9350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.838057][ T9350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.847154][ T9350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.351435][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.360077][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.420785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.425803][ T8742] Bluetooth: hci2: command 0x040f tx timeout [ 375.490072][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.497945][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.511414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.863861][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:32:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 376.582887][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 376.595312][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 377.363079][ T3109] blk_update_request: I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 377.376143][ T3109] blk_update_request: I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 377.469736][ T8690] Bluetooth: hci2: command 0x0419 tx timeout 00:32:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) 00:32:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:42 executing program 1: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 379.821682][ T3110] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:32:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) 00:32:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:43 executing program 1: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 380.483489][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 380.495365][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_hsr\x00', {}, 0x7fff}) 00:32:44 executing program 1: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 381.193928][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 381.205910][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) close(r2) 00:32:44 executing program 1: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 381.674489][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 381.688166][ T3110] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:45 executing program 1: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) 00:32:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:45 executing program 1: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 382.482894][ T3110] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:32:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)) 00:32:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 383.043414][ T3109] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:32:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 383.456955][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 383.549276][ T3110] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 384.099608][ T3109] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) 00:32:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) [ 385.619715][ T3109] blk_update_request: I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendfile(r0, r0, 0x0, 0x2000005) 00:32:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 388.526784][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 388.539783][ T3109] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:32:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 388.954521][ T3109] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:32:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:32:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:32:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 394.421697][ T9929] IPVS: ftp: loaded support on port[0] = 21 [ 394.955786][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 395.299883][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.307608][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.319451][ T9929] device bridge_slave_0 entered promiscuous mode [ 395.366686][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.374307][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.384532][ T9929] device bridge_slave_1 entered promiscuous mode [ 395.516231][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.564380][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.670928][ T9929] team0: Port device team_slave_0 added [ 395.715064][ T9929] team0: Port device team_slave_1 added [ 395.790972][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.798823][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.826922][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.859652][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.866936][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.893358][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.000035][ T9929] device hsr_slave_0 entered promiscuous mode [ 396.017760][ T9929] device hsr_slave_1 entered promiscuous mode [ 396.030683][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.039439][ T9929] Cannot create hsr debugfs directory [ 396.379587][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 396.468673][ T9929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.490849][ T9929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.518477][ T9929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.545545][ T9929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.979150][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.035670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.045162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.078257][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.116889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.127231][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.137027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.144468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.163141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.213702][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.224109][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.233896][ T3230] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.241164][ T3230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.357283][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.368843][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.380372][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.392030][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.515508][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.525876][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.536910][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.548571][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.558578][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.618117][ T9929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.632831][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.651638][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.662827][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.804133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.812016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.881425][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.062707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.076172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.244230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.254435][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.347772][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.357503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.377457][ T9929] device veth0_vlan entered promiscuous mode [ 398.466675][ T12] Bluetooth: hci3: command 0x041b tx timeout [ 398.550758][ T9929] device veth1_vlan entered promiscuous mode [ 398.933782][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.943998][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 399.011425][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.022642][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.079870][ T9929] device veth0_macvtap entered promiscuous mode [ 399.199193][ T9929] device veth1_macvtap entered promiscuous mode [ 399.378551][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.389201][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.401234][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.412167][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.422265][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.432876][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.448233][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.462947][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.473830][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.483877][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.494588][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.700928][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.713875][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.724828][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.735487][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.745509][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.756161][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.771155][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.781907][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.792730][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.842651][ T9929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.851753][ T9929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.862636][ T9929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.871582][ T9929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.514947][ T8736] Bluetooth: hci3: command 0x040f tx timeout [ 400.527535][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.535517][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.564725][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.709097][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.717353][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.746580][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:33:04 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:04 executing program 2: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:04 executing program 2: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 402.039766][T10202] FAULT_INJECTION: forcing a failure. [ 402.039766][T10202] name failslab, interval 1, probability 0, space 0, times 1 [ 402.052687][T10202] CPU: 0 PID: 10202 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 402.061445][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.071591][T10202] Call Trace: [ 402.075096][T10202] dump_stack+0x21c/0x280 [ 402.079540][T10202] should_fail+0x8b7/0x9e0 [ 402.084173][T10202] __should_failslab+0x1fd/0x2a0 [ 402.089371][T10202] should_failslab+0x29/0x70 [ 402.094077][T10202] slab_pre_alloc_hook+0xd5/0x590 [ 402.099234][T10202] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 402.105165][T10202] kmem_cache_alloc_trace+0x114/0xc90 [ 402.110682][T10202] ? kmsan_internal_set_origin+0x85/0xc0 [ 402.116551][T10202] ? alloc_pipe_info+0x167/0xbd0 [ 402.121604][T10202] ? kmsan_get_metadata+0x116/0x180 [ 402.126920][T10202] ? kmsan_get_metadata+0x116/0x180 [ 402.132229][T10202] alloc_pipe_info+0x167/0xbd0 [ 402.137147][T10202] ? selinux_file_permission+0x617/0xa90 [ 402.142887][T10202] ? kmsan_get_metadata+0x116/0x180 [ 402.148260][T10202] splice_direct_to_actor+0x121b/0x1490 [ 402.153929][T10202] ? do_splice_direct+0x5f0/0x5f0 [ 402.159104][T10202] ? security_file_permission+0x1f0/0x230 [ 402.164946][T10202] ? rw_verify_area+0x4be/0x7a0 [ 402.169914][T10202] do_splice_direct+0x39e/0x5f0 [ 402.174901][T10202] do_sendfile+0x1434/0x2620 [ 402.179637][T10202] __se_compat_sys_sendfile+0x368/0x430 [ 402.187367][T10202] ? syscall_enter_from_user_mode_work+0x51/0x100 [ 402.193954][T10202] __ia32_compat_sys_sendfile+0x56/0x70 [ 402.199746][T10202] __do_fast_syscall_32+0x129/0x180 [ 402.205073][T10202] do_fast_syscall_32+0x6a/0xc0 [ 402.210039][T10202] do_SYSENTER_32+0x73/0x90 [ 402.214720][T10202] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 402.221133][T10202] RIP: 0023:0xf7fea549 [ 402.225330][T10202] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 402.245149][T10202] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 402.253686][T10202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 402.261757][T10202] RDX: 0000000000000000 RSI: 0000000002000005 RDI: 0000000000000000 [ 402.269834][T10202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.277890][T10202] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 402.285946][T10202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:33:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 402.601513][ T8736] Bluetooth: hci3: command 0x0419 tx timeout 00:33:05 executing program 2: r0 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:05 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:06 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:06 executing program 2: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 403.351010][T10221] FAULT_INJECTION: forcing a failure. [ 403.351010][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 403.363929][T10221] CPU: 1 PID: 10221 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 403.372738][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.382861][T10221] Call Trace: [ 403.386264][T10221] dump_stack+0x21c/0x280 [ 403.390705][T10221] should_fail+0x8b7/0x9e0 [ 403.395254][T10221] __should_failslab+0x1fd/0x2a0 [ 403.400310][T10221] should_failslab+0x29/0x70 [ 403.405000][T10221] slab_pre_alloc_hook+0xd5/0x590 [ 403.410147][T10221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 403.416147][T10221] __kmalloc+0xf5/0x490 [ 403.420409][T10221] ? alloc_pipe_info+0x167/0xbd0 [ 403.425456][T10221] ? kmsan_get_metadata+0x116/0x180 [ 403.430749][T10221] ? kcalloc+0x8c/0xd0 [ 403.434921][T10221] kcalloc+0x8c/0xd0 [ 403.439622][T10221] alloc_pipe_info+0x7b3/0xbd0 [ 403.444507][T10221] splice_direct_to_actor+0x121b/0x1490 [ 403.450147][T10221] ? do_splice_direct+0x5f0/0x5f0 [ 403.455271][T10221] ? security_file_permission+0x1f0/0x230 [ 403.461103][T10221] ? rw_verify_area+0x4be/0x7a0 [ 403.466064][T10221] do_splice_direct+0x39e/0x5f0 [ 403.471048][T10221] do_sendfile+0x1434/0x2620 [ 403.475786][T10221] __se_compat_sys_sendfile+0x368/0x430 [ 403.481443][T10221] ? syscall_enter_from_user_mode_work+0x51/0x100 [ 403.487979][T10221] __ia32_compat_sys_sendfile+0x56/0x70 [ 403.493655][T10221] __do_fast_syscall_32+0x129/0x180 [ 403.498970][T10221] do_fast_syscall_32+0x6a/0xc0 [ 403.503938][T10221] do_SYSENTER_32+0x73/0x90 [ 403.508564][T10221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.514964][T10221] RIP: 0023:0xf7fea549 [ 403.519133][T10221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 403.538838][T10221] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb 00:33:06 executing program 0: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 403.547356][T10221] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 403.555408][T10221] RDX: 0000000000000000 RSI: 0000000002000005 RDI: 0000000000000000 [ 403.563480][T10221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.571538][T10221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 403.579597][T10221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:33:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:07 executing program 0: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:07 executing program 2: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:07 executing program 0: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:08 executing program 2: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:08 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x1081807, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1f) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) dup3(r0, 0xffffffffffffffff, 0x80000) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:09 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 406.190501][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 406.305689][ T26] audit: type=1804 audit(1602808389.356:10): pid=10271 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/5/bus" dev="sda1" ino=15864 res=1 errno=0 00:33:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 406.700372][ T26] audit: type=1804 audit(1602808389.755:11): pid=10273 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/5/bus" dev="sda1" ino=15864 res=1 errno=0 [ 406.725964][ T26] audit: type=1804 audit(1602808389.755:12): pid=10271 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/5/bus" dev="sda1" ino=15864 res=1 errno=0 00:33:09 executing program 0: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 407.199046][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 407.210896][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080)) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:33:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000001, 0x5) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$ttyS3(0xffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x20001, 0x0) sendfile(r0, r0, 0x0, 0x2000005) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x20, 0x28]}, 0x8, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x7, 0x8, {{0x11, 0x4, 0x2, 0x9, 0x44, 0x64, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x31, [@multicast1]}, @ssrr={0x89, 0x7, 0xc0, [@broadcast]}, @rr={0x7, 0xf, 0xcb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @generic={0x44, 0xd, "aae75744e2d795e42aed4e"}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x40, 0x7800, 0x3, 0x7, {{0x8, 0x4, 0x1, 0x9, 0x20, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @private=0xa010102, {[@timestamp={0x44, 0xc, 0x98, 0x0, 0x4, [0x5, 0x4]}]}}}}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:11 executing program 0: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x418400) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1081809, 0x80) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400040, 0x158, 0x4}, 0x18) 00:33:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:12 executing program 0: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 409.331930][ T26] audit: type=1804 audit(1602808392.385:13): pid=10323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/8/bus" dev="sda1" ino=15869 res=1 errno=0 [ 409.638684][ T26] audit: type=1804 audit(1602808392.685:14): pid=10324 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/8/bus" dev="sda1" ino=15869 res=1 errno=0 00:33:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:12 executing program 0: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x124) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x1, 0x2, 0x8}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @local}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000026c0)={'gretap0\x00', &(0x7f0000002640)={'gretap0\x00', r3, 0x10, 0x700, 0x39b4, 0x80, {{0x14, 0x4, 0x1, 0x7, 0x50, 0x65, 0x0, 0x7e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0xb, [{@loopback, 0x101}, {@rand_addr=0x64010100, 0x1}, {@broadcast, 0x2}]}, @cipso={0x86, 0x11, 0xfffffffffffffffc, [{0x0, 0xb, "9d2352738af98ad9d0"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$netlink(r5, &(0x7f0000002440)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000033c0)={'ip6tnl0\x00', &(0x7f0000003340)={'syztnl1\x00', r3, 0x29, 0x3f, 0x7f, 0xb142, 0x40, @dev={0xfe, 0x80, [], 0x24}, @mcast1, 0x8, 0xe11ca98ce06dd20c, 0x9, 0x3}}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000002400)) sendmmsg$inet(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="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", 0xfc}, {&(0x7f0000000080)="b3b6eb74a65cb731770aa7e96afc799b54", 0x11}, {&(0x7f00000002c0)="b684f88aaf6aae3d094f6bb062f7e42c29a707f9cbe4f9b3433b1536378e0b26261024", 0x23}, {&(0x7f0000000300)="0801f01071c20e6ddd5f93da32ec0d67", 0x10}, {&(0x7f0000000380)="09ae2a1c90249d569a21727f5fe3a93892f76fb874b21f412403d3e90d6bf703feca0ea455271bfef3d5ecd23d3111589bcb8c59ec3c2febced75d284711dde141eab1fd4de8ef8e9f7e354148f245a08e3c9e42c9026edd234e3dcbb1304be25a06a0de58ee1bf0eeacb01eb05f72a28230cccf6366cc0d1db1dcaca7e73e73f11ef6f2d76d4326c40ce84e7353a0b9325d0ae1b1ebd897973218e240f5610e6a", 0xa1}], 0x5, &(0x7f0000000480)=[@ip_ttl={{0x10, 0x0, 0x2, 0x81}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="263b44223d706f3dc8", 0x9}, {&(0x7f0000000500)="419fd4f552a6f47c89d04c52988c59821a87862ee9b51b06563995e41fa931e901a5b1b1a36e5ddafab8ebd11f5eb048277e4e4aaca0f4bb8055829da1a872c545c7dfa14928a92e3a4a954cb87c4541436a647083aa05cde313efd302203cc29fd590a8b2", 0x65}, {&(0x7f0000000580)="ac928769ebf193fc7185e63062d1eb016010a0e1decb685b63a17042783ed2b9466d4503df7ee4b31c753db7f3162997d08b6efcd0e5b7abb1f8c6d3e74631c53b490259b09d3dc271c6e556d1c31790805c2d9b09be441183b36013fd215c2123da9b8a2ff9ca8239399fbb767856373c1683acaf88fb6f38c3786a0eb392aa", 0x80}, {&(0x7f0000000600)="31669e52bf865c27e1865e68936ef19dd0ee24a507b0108f84aca748c5b680fbeab5a7ae0bebc2fce492a2ac0df7899d5294485ed323e58362c9ff9bb263ff8c0ceebe2fe8ec3721d6140c504175811fcb94baf33dc00c84b4643f5e443bf86bcddc13b4822f", 0x66}], 0x4}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000700)="f19998e85db18bea00a824fb58146decadd5398f63b7d58dafb5c1fc67995ff7278720c5b71bdb715d54b2e20486abb018d94877f0ece60a64be7eebe210a74e342625906e50459a55ea8bbe439fbbe3e57d6d052d9aaba8ba75c4b06575183fac7f4f0287dcfb7622dc4e2b9f560d99500ea973e85840dc601a7b896d73c63f26cbb501e2f1d0edb4d951b508517d941936c8b46e314f830b68b72d8164b756af5fdf49", 0xa4}, {&(0x7f00000007c0)="04795292c0507b0aaf92c39dacc7614e96495eb31bda857a1a501e4eaa3be2bcb174dc17e06caab0878bfa97bf24d0ff254afba18d9735bc0db27e6ba59ed6407f6b6f16abefa9619bb4aa36344f4b79f52104709c7ca6796866ee333ed9d7b2a174b1dc509326de4fdd867eb7928f9b8c8fb159c76ab6ef68a598a759ee14fffc0cfd006d9c5b54e04caa24c26d2ae120393df5fb0baeb4e6faad2500f4362e2975c82e0295e7de8b6224fa27b1ab13e46fe5923d344a1f67756de759f6c0961c2ea0a527815177784f4d612dcdf0385f17931e", 0xd4}, {&(0x7f00000008c0)="105306961288f2cd0c5d519dd26fa0970a96ca95c786e6999d82e57bac39fc3917b9dd1c907952abf4c149f1bf89f099f538b2dcfae908c61e57b8da6690e1ad9d2e892d4ecda691e488cfe81a299331bdb730d4cbfe323651f475ed462694fe550a2cf12bfd5d7790858272dc27ebffc92a", 0x72}, {&(0x7f0000000940)="5ac943ddf08ffbf4c252386e181cb095ebdcfd5665b81ee8023f29b471f20441c78738abd587f713a5502fd9414e69926c76c27887c4b0886dd4baf764e9c4643b13e251bf0890b164adfaa08fd8b8", 0x4f}, {&(0x7f00000009c0)="21ac109b8314a7f8ea4457c6a1fba3307a2358d7dda73ada8e8ccf24fa0d58d93c95138d94e0eb52a136cd3daffc4b11cc4d45d2ef9c0cc0e1489e0070121849a96195b3ca75224d1522282d4e0d0375d8d7701bd089b47f47e53fbcef2636d72b34f26d7139f0d8b71dfc364b21bd14fd53ae370ea125fe09d8a1b702de81c5043c4033060606e7ee46ed3d33a13725e66d44a34b72889d5970e482e6d5adef032306cec7a34f7811936f40f5a69a2fadfb9bed399f5e8ca3557889df99d0679d48574321bb443e5de700dcba5d5c4c2b93a0c46b3a", 0xd6}, {&(0x7f0000000ac0)="43048f40ae7caa43ea1fb29fd8805001b7643ce529b73d75e7c282653e1fa390c8aae3546902125361bd2f1e3ba00d0f96553a0fedc64d5017ce150b1f904e7252aa45fadfd57be21c970ab32d3b60b8dd6955a2b29fe774c925c4e75c4ba2410adb65e508eb5f10c85a43d25c396814c19548253280432aca9bd3a9c680d101fb1dd6534e0239a3024c394ad21f9c5dd24764b617d8e1ea10a4d800af6e3af81f92691da5187eaa1a824fdd352276768128ee1830ac72fd63", 0xb9}, {&(0x7f0000000b80)="cd6f78f7424c8450bb93043144bfe275ba121fa8f03a79496cbc478d8509817b019f898fca718bd16ff845236f448cacc290f782db085483c8a19685f50032aab29cf2db8c702e2a8703ed30b36388df95ce", 0x52}, {&(0x7f0000000c00)="73d95a3ee1b3fc38600df9c66c7fa60be35668e3872fcdfb6a355f8d2a1e6cbac7fa32af3246ef44f0b823e18ed87b27b305cffac9c3a3b5cfedfe0e5eba03e344ae87c2670d26b8a38f1e597e6b3afa2cd2e80f29625ffc8dd64c5530059aa6f3a0c9211ccdb1d0d0eaf436093408a49a", 0x71}, {&(0x7f0000000c80)="08a1f03b651ee751bf6b1558c2bed2f77e7c5cfcd929e084adad282cf741710ef01476fd9d38", 0x26}, {&(0x7f0000000cc0)="10", 0x1}], 0xa, &(0x7f0000000d80)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xa7, 0x0, 0x2, [0x4, 0x3f, 0x9, 0x1, 0x4, 0x853]}, @lsrr={0x83, 0x7, 0x1a, [@initdev={0xac, 0x1e, 0x2, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x1f, 0x3, 0x1, [{@empty, 0x81}, {@remote, 0x72}, {@empty, 0x3}, {@broadcast, 0x8}, {@empty, 0x62}, {@local, 0x6}, {@private=0xa010100, 0x6}, {@empty, 0x1}, {@loopback, 0x401}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x82, 0x0, 0x4, [0x7fff, 0x4]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0x47, [@multicast2, @multicast2]}]}}}], 0xa8}}, {{&(0x7f0000000e40)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000e80)="713e78a031bebf9ebc9ea7726198f4068d571be5658b91829af411f665de9bc28494048e431a4c2b414a51c8c8ad2633bece25520bc5535ea7ca8174a41f6f66c0e5c9461c80b8f6c3ea938cd36e29dbaa", 0x51}, {&(0x7f0000000f00)="982d4b4c634278612ef81f57f32929a5d27639f51e62c50d2e0f1b2083895048371bf812ab3adf778c0927997bd4a82890cd854d1a5f6266df2e1b58cc690d86db189fa33dc66b4fbb6adf84822950d1ce4883a11d49f44835a46ef5956564b49da87c39c76f34999cc68f7932c4115afa7831aa2ef4661977a7bacd59d0f6b6dc8971e0cdc43eb669e357536408d41e518b06f59ff683ce199ab457de813e8a657b953ebbf73c1222b41f2823d0b56ebf407d63afa3044a170e89ab4f809c32a314026d257f", 0xc6}], 0x2, &(0x7f0000001040)=[@ip_ttl={{0x10}}], 0x10}}, {{&(0x7f0000001080)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000023c0)=[{&(0x7f00000010c0)="0fd9c50928ea0eedf562661f7a987d1128f4d7595aaf5fa11ecdd32365e0858d4d12a4355b744376c8ba6910e8cf4853bc2e1039efc5248dbd72328dd72c955810df2b391698d27b5b8719aad91ffc8c0c6d7f54064c9d9114ddb4354b202046e2f0ef2dc3b03d20df6d90ce42818eabc4", 0x71}, {&(0x7f0000001140)="8ac3c5ca43bc0a53cb3b5d5a3fed03a6785a49404eaccceae1074bc2236727fd85c13b866dcdfeda6d63ef96b1e25d9c92c442d5798fa15175edfe69c8c0031e1b057dca8fd5f2228d6cea7f03ad47523067d7dff1a208b8f98283572c9b9c0bfe4ac03cd2be0e", 0x67}, {&(0x7f00000011c0)="3d319c8bf0a12e3c43ebc6dbebf8a15b88c4d31017b52fab8788ca29ebb0acde847eebc39256a9be97ca600bf5bcbe78e05f867bd286d76d7456f7c196d64de9996d38be38f024b88f09dca4412cdc2331f7cbc5b2d5f31a1300146f2ccaa9dcd6d6aad81476c48147be", 0x6a}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="5e86a51b523e9dca60e647787debc04cdcb70e0b817ca012a9f7eba7a8958b0fde64931d910d0f5f02d30886b260e9c68bc9f80b69ac7037397ea84f908fae4324bb0f2f79c3f8590682164ab08a3460bb84b580f35dc77d5ab4", 0x5a}, {&(0x7f00000022c0)="2d33f5f8fbf565a3659a2e268807a8b64ed09521a8cc46ede90a41bb0bc161caa3538e0008b713448451c29b2e83dc6fd6832e25e1bbfbda2dc568527db0757d5a49606b68d69816d96b55014fbdd8763f8dd30307ddfe9378aad8aa70ac105e6440e02f0cb614e78058272b8388353c053b52614a2958683c6f85ce8be7593883ac3f3ea2595e5872b69e5bdf3b7fafe37f7d50b1f8877525ae681c9b59cdb7f2973bfb7005eec2d82ac66a6e390a7a18aa8f", 0xb3}, {&(0x7f0000002380)="d1357190f40dc53d7408ea2f3d9681b06af7dc42d70e301d0ba8d6ec71ecd9bb7133edb0ec4eda25a476f1eb25c6f8688e10d066886d6e54d6", 0x39}], 0x7, &(0x7f0000002700)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @remote, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @loopback}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6d}}], 0x50}}, {{&(0x7f0000002780)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000027c0)="984a306f06ec0ebab2176787b4bebb2e5b0ade4e8ffae29494d0c1ead969b7cc4a350e43ac6d463eff7ea68128171ebaa8edbf3dcac3ca7060c86f8507225357e97836956dab9d2f521bdfa44601cc677e7906d4fe79784f1af9b81347ece9bf78f4b66a46512f64", 0x68}, {&(0x7f0000002840)="10a07388a66fa437d217fb3c0b7583e6bc1479e743", 0x15}, {&(0x7f0000002880)="0be735fea7e2b528ea71d9f95ed58b53a1285842f5033bd8e95b614443ee31c49be32b19ea2a8a2a91fe4030d920a06b20696702aa0eb6cd1fbc551f3bc656d5a6feb3c89ce338285c0b35d9ab4e4ece4ac4fa2ba52c287c4fe7c06d96f5ab23c9614b594816e415dade4eb61c20a84af871b55b93b3c2c1610885ce70755ff453c72dab623932372534514e3085a4f2075b78d8e875244b5538a10d9553ff80d03ab5c0dbfc23e1915162d726212032cd40a0b7b6dc39", 0xad}, {&(0x7f0000002940)="7abb91a5541d87419b7dff38d6a29ddb78cff5dfc3f313c5c3ca9805cdc13e5da15450946c1f392bc9143da65963ea92958dcf3d2df2e08cc9427e91e50cd328d7062bb5213a9ae104a685869dc38ab5b7bdbec6c18b6db01b92b4e22161fa90514fcaae5bb936f8cfa5f5c02c7782171018d72fb52487c93f9be1bbb7d9dc7e762cf8a11c35383893218ab69e06ddb482fefa7577f3aa393dc0e5aef33eab541b4d8c88b1e9528ab32068e99dda04e9b9038efc2c4e6fb33fc0d08b278a2fde34e6214b3bd65e99d19abaf8", 0xcc}, {&(0x7f0000002a40)="b1b864ca0e99b168dec0b785322387cea401641d4fecea70e350ac7aee9f5ca3a5333dec022bc98f2e11c5b62ffed769ddff4975f601e657e79c1aa842ccb2035c78b2a57d0feb0d9c2224443f81c81ddedbe068401033f900d47d7caf6d5476fc18cfb05a72baaf340e5da90e67443d544962d8054c719e4dd20742fd386734ea4691af19745f045dac75074df622caac", 0x91}, {&(0x7f0000002b00)="36fd57f8184d4ae4d0c2c5a7fc5cb9ce43b42fb7af701ec0ef7840be6e01d091cce5206ad8f9a3c2bdd1c87950061d9b9cd8ef4d34759f960d9c5a1b579cc6574b2c83dadf38e4a29ad7deb0854e7a2217db5212aacca823a3c18636662dfcf2bfc0c7319bcc29eb5ab6b8886f0f0e06c2b75b40c69b7ba971c5b6cbe6d0f42a20e33fb01ca75d9bbd5b7f93037dadb36c1d36af6a0ff5d8a36bef446412ca329826f52bdb87", 0xa6}], 0x6, &(0x7f0000002c00)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @multicast1, @broadcast}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @multicast1, @loopback}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xffffffe0}}], 0x70}}, {{&(0x7f0000002c80)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002cc0)="9f2b7083f83719b23e0589e37b6fd434aea5d7370436fca0a0daacaeddf093fe427cfeee6a29111dbce2e550b19100224950ac4d3a63ee5b80c4aec4195263d254fcd00dbebec6ac331b7735a8caa4f0505732d3bdd672d151dafa2633d02710d3145b8d19d69934f571ecc7c3fbd16e02d518287dd0114be150c269501b449d467e042ca7e347917136aee5a2339237ff9b07af23", 0x95}, {&(0x7f0000002d80)="d3e725314778a36b4ee5cb69a2138e79eddc8c0c8efc07d4ae500935645570c0628b77df767d70d8fe67a1c75fe795a86a9b57e5022574b7ea9eb567a5f49f9329a7fd27647996df74edf4f6c1b7da4173f2ccb880fe444bfed34a5b51f7a2fcdf1e53ab92fe9e68c154f6b14e796a710729ab1959a459d695e9a06685df8f004e58adccb02e7231ac614b5447ef4498c3c41feb", 0x94}], 0x2, &(0x7f0000002e80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x1, [{0x5, 0x10, "07fd3b180106c0f5122369de6dbd"}, {0x5, 0xb, "d659205c13003b5d74"}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x49, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x14, 0xcb, 0x0, 0x9, [0x4, 0x7, 0x10000, 0x6]}, @ssrr={0x89, 0xf, 0xd9, [@multicast1, @broadcast, @multicast2]}]}}}, @ip_ttl={{0x10}}], 0x7c}}, {{&(0x7f0000002f00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003300)=[{&(0x7f0000002f40)="26ee6db1d27f27e36dad8c2228732110b7671b8d0aae1ba1fcb3d605fa596088261830759487b29bbbade3c7f8a5771f0134652ea4506eed1a457db0681715da0167f7e8d18d8a13009148c9ab87b77988a60d0bd5f7f6168242027b8c878ed743a545f86105475d325a116ab153bea67f379c437e2617d0dee9fb5b948951c6a9a27fe048229662d6a47c9fe688f271182d95eaad", 0x95}, {&(0x7f0000003000)="80931f07e93cb1e003ea771853383aad26f32fe28c3acc0d73e39b19081fd9e34243ad350e1a0a8243bc7bab2975bf38b054de5017d125bb9b8f8c946791074e89abec1e7608ddbecc0808866bc42a0445632faf7023ce8fd874813c014aa1365b5bfd3a70f0f47bfae396ff0499b103f5b1660f63a157ee2f5ae4de9e994323b4dbaf613a51f1f12203496b5073fe36", 0x90}, {&(0x7f00000030c0)="540a270144d0b78a67247929e52df2ac7fcea8c86f1095084c53d697e6918693627cd2ba28687a55d375dd1c861ad44098d2e1ec0ce949089882b46d73865a406a1c53e6756dec10e15046076dd1ea45b01f19f8b34512604340a68a9167be5ee8508b4b08a1eb1572ac00a295a722a350ea42daea13140cb43d59c0ff2fe85573fe9a8a2a4b75f1a1c46c91de07fd881883f3c0ac9c7332f3c6d5cf075673ef0e816261fac7dc7f40cb15a56646222e013556d0c2deac81c6f4fc4f0e5686e7051f7dc8d3d1ef71e6f428f18794fc80e683467dfeececf3bc9976b7b135eb92e041bb371056cb615de14cb5089fc8ca48caf52cc8bee1dc24", 0xf9}, {&(0x7f00000031c0)="ccc782a56a05962f9e78e4bf487c03558f1198390f63db39c892f1429f6091309592", 0x22}, {&(0x7f0000003200)="b67230dbb3349f7bca86a4397a8c8da89f9367e017d62c27539dc08934a6f6690cf3f2a47405d713469e556a275c603bc37ddb0d8e9e62a46802e1c31ab5b13e559638f9e7aa410594af93a5d7e46ec70065656728daf7a3f82f39a227efeb4fd8a1bc6391211fe1ac336f42423263e1fb8d72ced0916e52a60bcac33919673a6b42993fe438b7b01adea5aef152ce8498d2290b9c47bcc86262777c0ac2c1158928c8e9ef74962ff4f58dcfa1758ed041d05eccbe4808c51e2ed6187ac3df0d215053f0e18705fcdc", 0xc9}], 0x5, &(0x7f0000003400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @broadcast, @broadcast}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @multicast2, @rand_addr=0x64010101}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5961}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @rr={0x7, 0x13, 0xb6, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0xf9, [@remote, @remote, @broadcast, @loopback]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x143}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0xb4}}, {{&(0x7f00000034c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004980)=[{&(0x7f0000003500)="72be99ae789cae7eca865363f5df52447cf856a5700d6c503b1f0fe3dbcaf6b2b969c805f71f9ead13ab576412dcfefc28d488b4f5bcb8f7e98c6bccfba941b0eacc31b00dde1503dc6300e1fcef64147bccd1ab7ab16de4f1a3035d4605574c1242a07907cb888b7e4e39eab18f74d9106b3f044a01325fb9c19a3bb627eb19675e53fe2e9c977326caefb13057fd31d1c6baa1b3fe7883718d5cf1bb44f61fa816f1ca832a62b62a65e676bf40791720e926e36387f80a4d0dc8ea9c5ef86706ed2bddd5e6d33e3014479b8d549d07b866184f277b20e691ebf216f9b97e2e6cc11b7f6511b1b913e67f019ba6a4f3ecbfe684a6f2d56ed194b2226923ab83ad0040eb84ce52fdbf5ffd10ef927e1d85dbc07a7293525fbc1f1d8c5ddc8a934910a7ea4b47f1db173b85752f4a63cb99baa0dca81e0e8afceb4c13c7a3fd1dded507f7f738ef1cd8e519dd9acc3aaf0391d7fc7446f77c3d48a59921e0281bc495aa775a6c033c688a762d68e34d131475a417f5128d49a0087702d4a1040b080461ccd4ec77c030fb92f8087470f4de858d2a17a9607780481b43a212de032dad39159ba7e19a236dd99a6c88166daa7cb77630e0a77c984454973e178af05ad525d18fdc3b9927c0f11de644de639214943378c8261ae86446b2adca69cb4ba168e0dc180c6c864b96e041b804b2d2813da61951f24cab5edc0198d7a159beac56a7f90bd6dd9f8c93973711e11bab3445152689ef03692124bfbcb5ab83a4a46ea989275b87dfa23e22d5eccd8128243d3e0f77b338c6b0f61443f70fcf155ed75e0a1f8596482db0fab9743db7c073eeafed94bb8b9c0cc71dbd55adad6e9c3f509822c5c10291ac9a797325a4131a3a1b85c6bc3e5b786d51f85f96077cdd7a9b3694bfa1f5f86c8aded29e2ddf90b956898ce3604d9cc78ea24a245ac010369b082cad3dda8129173206265acfff59b4c6088cd33d27ca1fa0c4d429b04bf5bf41b86c26cad22e0627b2f19b5b99da6fd2c23cf55bc1fca745d25d46c1e613c2cf103c4de5d816760aabfc3a9106421bde559b7ef9e23d512538d8acc8c44bc1d07c071cb291d49c4212eec242e58fb92ff11624eb68762ff52f78e809d7111bfbf9c72018b0bdb1145abc63eabcf49624aa0eec73d2b938dc531b394344a4a24fc030c61e45b192bae8eafb8efce27d51df8d562bfa4f191d64f8ebb7015f737e3f927aeb991db6af3b7232892e16b1e3ea8281e11f1e097703066eb5bb04866376a2d37ae1ee9d9c5b2a2fc11db922ba451ebc8c420c342edbf07c02e788b08e78a8bb45677a625addfa27eb970dabe1ffa8eb857f1a4af85a22eaef7a77b420c944f55db4543203edd8e99e5463ead1cf020d2e42d403a82bbef9a0bc66ae5b49836cf0edba051cb5c63ccb4f102a6b3087bd95001bb888e8ae29e8cb1bdec3bfefbfebd37daad93ba68328803a7ca278f89f60072813b3cd02489768b61f956a8b3ee5dd865d74d4930afc9d0a8ae42214b0855e636b7c7d250804529dd0af3017943809b3fbf0e006eebb81eabef3420cdb24fa474a695c41a9a8e4a3dc8927bd2de3be92862bff80a41ffd1685fc6e43fb9c0f59da6b5abf16d7f8d7a0d93f7261242042f3f544852f93f2fa14fd16ae688371f53194ac2a3f8e987cc4423fdc67ea3d3dc6a86b93b1f0f1967545490445c80c8437b8078a68c32be8a5cda6c1aa7c311994be1eff36052a95fc7adc08a06dca054c9299f455c619f09a7f9170f7069bccb2d546589e8a5913f03b3fa9d009b87b5c4f410f864c02ea1956186d623ebf184dbfaf437d29427fe1e64f922de7b5f31d6eae6456ce1e3f7b340e9ec3728f0e50c6a5695ee272d788e1d160e6ffe184cb2fd11a54f00f5fda9a2070fa889bd56d1678b8b70f476e7c264aae1077755bd833c98dcfb20742bb3bfa5ebf6df997895c581e848e389ed2cda04ba99559ee88b6a3e7897b3118127fc48f5bac5ac16d3428bdaad3cb8efc4ae72be534dd581f47107ec87338954ad42dddccae3404af1a7fa8b93b7016cea4cf96086139575b2aa0574ab24f6415b5d7c4efdee5c333732a3a1497dadccb904f28a2ca9a3b9097c58db4f20ab0f8731daf83815b67a1a8bdc9b572803baadf9d4dfc3a12cffa8ec6c25b85130aa169e3faef37831bd6394a68fb1e59adcc18fe03f3e1590a11a8e19932f8a1f69fab2b44f0e13ce8f60b469703ab3109104a371ccd054692b67b849f091b492133d1643e50d3bae7a180f50de6a4013acb0a21de05fba3545e56c5a2a1832a26313b150a9ae4f51f3514d94cb64fec83e534349abfc6960c4b565fa0b6ec4457333d59de30861bb6635c49aee32685bcfd35947414b90fc53dea5a31c2fc709b3d2c617c64efe7d849004dfe394a5ef7898ce00901c7f57e6d0c5b28509ddf4c9ff561fc79c7f4c0825aab457648c9d56183f8d360ff38bf2f8d3341110c6f7ab60a03b14cc20d8e31d51df421a7ec1ead0e218533f4768dfc4dd2fc574eee447deabc04383a77d877662277b24c1c894feb6d28c2fcbcbbd3ddc4b22c2606ff7b73daa98024fbedc82fa8189f5d8d9d717cb4cbb2bae7897a8fff9b5e1c9ccb88a2bb2f2268d2f968fdd4222a632e3a5c737b3548094f1637e2907c5ae98e1a90e478841cc513f1130d9943cce3020c0c80ce43f14fd7138ee478301bd48f67b7f3d3f70d4ed4e6d2f0bfbd8328c4cc39059d3fde120be7e634779e9ff3865f561da58efdb08f7cdcb6a311400a6aecc188db72f4d94bc00c128e1db0418c193284eba077fb5f7edbc52ae0b6883bb21a40410b92d3b67c77254134c0a861dc542512547fbac0a5f4584bdd15dc9b6bc59e36e8e52a1b2cd54254e667593d37f2dbebee3467f826a87bf58b38c764bce84d81c4667191d20318bd6c2902b1313e27b05d07a8c0ef2efe18d94a0703d290cb9c7d741b5f8c858dbc5d0aa90d86108e2b374c0d2289313758b50ede5847ab26f0b7693437cc882fbf2fa83d6dd0a3406d6b6ccb242550814b8b9bb4965b338fe86b6576cf259af5a6cb3b6dd9a2b837c5bf252d38cd1ed57c7bdc4ddda0b2ee10a0fd53e18a62578fc9d8cd4af79e9d44ee1398faac68dc425e42a02e516a78fcab89a005edd2a15944946b309c28d7937556e9f981d4e65f446d9dc4714e671faa660d08aad53a66e0ccfbe06ff0731e7292ae8a19d9c1d3255b46645e11e99a270e8e7ffe904e890dda8578d898261a9bd8cd03642c23418e30c551c6c3d3e5edb629e6663204a34629181404b24a49fb8b5b32132dae5d34b4f3d712b437fa105c4067f07d624029e5b981b9dd937ce84081a99162a281dd04f7c7bb9432145e2cc29b1ed70434af03fd22d532672b28f1e00daf33aaa6727cc4c6bdbb116930672986f703143478b1a1b411cf0e39688f61639854420d4628c90b4b1e6c0277790db7b25c1e71da98791866426d1e3209d04d4a873779b92c0707a76a19d28cf763af318ff8589d47d1bbbe36e2fc19709d9118fa6be4252797783d1cf71b84c52efd88654c177a19fc047c65215e2cf83af4db9a95f7ea0990c819758eb3fd859e95704e515f7319e1a5bb7bb67797d79d0b5cb5335fc91845723a6174990f75238d1076bb40f1cfbcdf844aae735ce915a8c12c5de45acf65cb2f44f456dccf41d7aa386ee31edd15cf2c38c78b79cb1de55c48c93f550581244757147c62135bae7ed3b688e937412eba96802148c625e94399cd906d7767ba0a23b32b919a83b310c8f017d0742df605e46b6f71d82819b5f61bee7e7fb57445dc6b8bae83efede826119f18ef364f1bd94aa44f859c96e8eab4d47fb8f0c0c48c32258766419cd679476722f69ad7abe7d8843f571b88ffb3da83f352de2def4e1e4d628f40c22b0ea137209201393175e2b641b2fdfb1b5de1c8f4c7f79cb76b75c25c80dac55632295ed0b7548866b7b97cc6957f4bfd4c91afa21447330f3378610138dc8addfd0e78f43549e19a11f4e9f0f96ea461f6d6ffae8f932e2deb6a58d96af1bf7efc923eb056afd5bba36366e88a595bb16b0c943e644173e015d3ee99084b1c76aad1d619da7e5abc6e72af543016bfdba21444b8ae8908f28e7c6ed771ad8b1c473d13b9868c6b6c556dafb7eccc96e0be2625ccc34c40ab3cdf7cccb1401896183645d337016e51d85953cb302d804f8ba8efa40fb7f1e34eeda8d01220ba6dec1f64d77cdbc6f22bb75a176874f0d0811fb9e3e6bd5893bc5108ec68de138c14e752359506f0fcfd8887dcc3f3d9176e1ce760e99d4c589e7859304e69b0583acebb616de05ddf2589a7cb2cce244d8dace38bd7bffbf2808a46742945b1daf6a42ef774cf0669f22f91d29ecaf58449e2339f8bad86fe922d79af1ef6f609ae0e5018aa940f944e4a9651145fcd5a13f47d48401ec94a495760ec8620c9a903ca80ad200afdef978d6bc53713a7d1aa0a9bef5f4db8bb3107812478bd273696e30613758d0d53a001d957ed1a6fb77a2b98e21f51bcb061ab497ef9c476cf4fa24402e293787872c85847e9979c605f578b4b545c48c66555bc6727deac5405139127e63e7288646f356ff5fb63543a7c8ddb3f37e6e9a65749f49a1b84b9c099ef2e11ddc23dff2cc2e115819409a80266d2ea094bcd6788360bccb0dbff280e34d79738b925a242c7decce4529a0c0e4d74512da4e9114a100e0cc9a49d94f5ceda26ae6ae3cb05ca9e90b24464b57a9881d6a1be55873f91201260f603258102c5a1c5defbe0496e2cad1a1254eb77021810474b7a0911a6162cd9b5008472c4349cc9858004c61ef66bd21e153ab26d94f5531a3068f98ea3a2c1f1a4df22ffd13840e8c9af1af87a931c1f1d0c969195a7a4bbf8bdf9db4349ad986b4ab8dcee92f50c5f13c893d4d75476e1dce3e1a94456738d4b60626192050e4732367166c9af19b63814a9ec7ee7b94e684acc3fb0ee300004d247a71c8118ab914e361367aba33b56560e36c130fc43dfe565b37a5188ff1c7bf874212d18ac3feed69ed3595a2427ba5466384d0067a818b2448e881c08134b13d9fe86523eba70e6ca4f1720d0a16c627882fd9926bd4ed8b5977e412734d4f2327da33f584c08af2e87c69dbbdd0f1c5413ec7864200ce1eb63ed1e7d733979bc965d724c22a6d86ff86d267003b1dcd3e4502743ac67fd9cf497bb050b4b3a483b1dad14ba69aae163fbbc0c60f9cb2c6e97453b8612c18a7ebe3e7af729ca16708a26ce2b5daf3c29b6380a42534bf0a21607ac5fc8011c0c5b4056b774b41af4a1fd79ac5c9101b341460b1bb726997539d6b851cd26d0b3816a4abeba3922a9a51d50326e5e41cdbd42d102dd2935c18b3992d629305564235b05e69fd408fb38004be524e74846f2cafac875c3e20cbe8d7804ca392bfa1c1fc07ae3227b45e4a1067a393f99830011807748ba09d562db8cbb474c25013500c727ea61fc9407b65abfad7dea925abb4153f7b507b411ade85bb2da9a37d3930444141ae805efeca07254e378231c13c0bf3b1745a1e8f87e5b701b2a9d9d5738bb14c0e89c89eebb387b42244b5e7b870bd5e9cafb8081628e53ea80822250444bf21ade8d649b6bbc88d763505dba1ec36555773083de11462e75bf837531421be96a77ca58168c1e24fd9ee592dc441cd56a20ed12b7382c1af08654cd71ae04a95bc95a66deb5da509e5e119b4b1a65b635cc3ec9c22ae6c30405e588b6ffcbdd2173e35af6844bb218c34a", 0x1000}, {&(0x7f0000004500)="cd7a73ac5c711adc2ec6cd2c9eba80165b2ad656e71a05bf330a504679ef88b3011653bff0d78aee0d6cdaf15bb4d1a571571d3620222d904a96402560f73b1a5ad7bc4c6cd734cdbeecd63150aef492f8bbbf987a5336065694b9259972013f25", 0x61}, {&(0x7f0000004580)="1416ccf327b2ef413a6a41bd6df8a41d8c43e536b0ab0a1130daa28d85af5bfd08666e3ad9cd6b3e8172471fde2e5367472dca05c9bb789e733b506eda2e573c22ebd4a2cf01b81e9d6e2caae635f3f7bc4fc8f19cc3f31cc0f136a198e790571da63d9a2771a1d7fb548111dad2a8d0d6c960a0a264c79cdb1d1d4f1542432fcca5566597ee8895002dbc1d92f95316cdc489eb06564c4dcf241f8ac83ae38295684e5aebc738c0c8816de5c59ccd82c44b8fbed2568dd547e484445e90120e467945804f6578ae8847acca8403f47cf5b162", 0xd3}, {&(0x7f0000004680)="960b46bfd72caa57f7f23e1b5a2ddb30ba286da7ea0515224c7f2e7895c245c3b7105c4bca1453729ee113bf37d70cd1cef8be1c7312c09d6fc7dcea79a780e2fa3c673ca0428594e3051a204a9c916f5887fbc2345dced9a71105bd781b22348046d9b846db2422426e504c1db6a63c105c179758632f9a696f82c4d4cd212a71d3493a0b84e2a149b4e059d9b6add53e36400b4fb129a3bd79211827bffcb5c48c577e76d25525c4c2ae642efc0b5fed9fff2b7bd86dd9a899a7fd283576de1cfd5484a3ed5faee2bd8e971ca077247a49ebb5b7fbcfe5104ea2827a059217e129461c", 0xe4}, {&(0x7f0000004780)="ca45284b1fb26e74ada72c33587fd05fc44747db844207ab36297db46dd063c950e015f0d80c5948cc97aece91315b9b78d26a9e9a8d750a0af788540c616b1b714d23d515939a82f439e81336609d6c28966d8175bf6be15c1847e746d07429135c609e66d887145bd355f038e21199a2ca042848b09532d195b87f37dd8f358a2513e83a8a3608f965d1f4cd4b3e96e3babd", 0x93}, {&(0x7f0000004840)="744b5f62aace18d77d8a3b6d7e864eb8fb7f116cac3d8af8787d87bfd6f7c6908961b7e66e10e298d56184a1c5e08f53008d68f346fe9e9e5500a98d0bf07969f8b884fd61db509a5606c516cb857c9ff836", 0x52}, {&(0x7f00000048c0)="6c812e892253a59f0d5689b9636b403b3a21574fe3603c2ef4e01ca27634eedc7dc72e29b13b9a1cf1acc055d33c4a824a50a89513a3f313ed31eadaf633cb29ab708b625c1d66aeda79c312b0941966d3ed1cfa967ffa67d3ecf4783c43cabf09c1f12707e8f3126f65d466f010c981cd977bbe2e7f36dce6c6f60ed05a0ba18f941155771d905212012a596baa661a15c8658c699094092083768cc5edf90260693cf3b1820a538c7dfcd0f9c009c11dbfe19eb134c5ce7df9", 0xba}], 0x7}}], 0x9, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000004b00)={0x1, 0x4, @start={0x0, 0x0, "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", "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"}, [0x100000001, 0x8001, 0xfc, 0x8, 0x2, 0x48a2, 0x8, 0x40, 0x51b, 0x3ff, 0x3, 0x0, 0x200, 0x3, 0x100000001, 0x8, 0x9, 0x0, 0xfffffffffffeffff, 0x1, 0x1, 0x34b, 0xfffffffffffffffc, 0x7, 0xfffffffffffffff9, 0x7f, 0x6, 0x7ff, 0x1, 0x9, 0x10001, 0x0, 0x3, 0xffffffff80000001, 0x7, 0x8, 0x9, 0x2f440f60, 0x4, 0x20, 0x441, 0x8, 0x7, 0x2, 0x5, 0xf0d3, 0x3, 0x10001, 0x4, 0x7fff, 0xef4, 0xffffffffffff0001, 0xa88, 0x121c, 0x20, 0x3, 0x4, 0x6, 0x1000000000000000, 0x7fff, 0x100, 0x8, 0x3f, 0x800]}) 00:33:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x1081807, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1f) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) dup3(r0, 0xffffffffffffffff, 0x80000) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 411.112479][ T26] audit: type=1804 audit(1602808394.165:15): pid=10351 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir011545517/syzkaller.8t3xxv/114/bus" dev="sda1" ino=15894 res=1 errno=0 00:33:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20900, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x3f) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x1000, 0x6, {0x77359400}, {0x1, 0xc, 0x71, 0xfe, 0x3, 0x0, "5bd98b41"}, 0x6, 0x3, @userptr=0x1000, 0xef03, 0x0, r1}) openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x204001, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7) 00:33:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 411.667462][ T26] audit: type=1804 audit(1602808394.725:16): pid=10359 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/10/bus" dev="sda1" ino=15869 res=1 errno=0 00:33:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x1081807, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1f) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) dup3(r0, 0xffffffffffffffff, 0x80000) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 411.817766][ T26] audit: type=1804 audit(1602808394.765:17): pid=10362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/10/bus" dev="sda1" ino=15869 res=1 errno=0 00:33:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x8, 0xcf061c2dd92a9629) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x12a82, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'veth0_macvtap\x00', {}, 0x1}) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 412.182948][ T26] audit: type=1804 audit(1602808395.235:18): pid=10370 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir011545517/syzkaller.8t3xxv/115/bus" dev="sda1" ino=15884 res=1 errno=0 00:33:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2008079, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r3}}]}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, 0xee01) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="ea6c261f7389d97c81866cce6787776fedbb1b47c8b3838be2f230194940ad1bcc85924247fc2dd18aa1c7b5207a9a2a298430b6e697134ce5ca939fe9c2976c548434c594b21586315cea8eca99c2dc868f38eee41ff0fd263b7ecf713e1ec39433496af7679929556bda51954f388dc8209548c162c766dd12", 0x7a}], 0x1, &(0x7f00000001c0)=[@op={0x10}, @iv={0xcc, 0x117, 0x2, 0xbb, "b22088194f1a5cea89258de8e811ccc888b994678643b5c4d513a9faac261113236ea89491261d5c823a85078f9884e4c6dda8a16f17d28b562cab827448590f2841f19048d0b2ab091b0abe060701a3cd812691f9df7ce21aaf42b245e2f9c07c994f1197c42e20ce81b9ef6ffb1375ae248c02d9b6023c26b5c0b0990207a2829170b3f210d4f5df8d6d08fccfa8f7c8db4c5c3de4affcc445e673786a7ec4a490f566438111f4235f0776a611d4a2283e340840dd2ee724e93a"}, @op={0x10, 0x117, 0x3, 0x1}], 0xec}, 0xc052) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe4) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={r2, r6, 0xee01}, 0xc) 00:33:16 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = semget(0x1, 0x2, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000000)=""/208) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'memory'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'cpu'}]}, 0x2c) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 413.743255][T10388] FAULT_INJECTION: forcing a failure. [ 413.743255][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 413.756248][T10388] CPU: 1 PID: 10388 Comm: syz-executor.0 Not tainted 5.9.0-rc8-syzkaller #0 [ 413.764999][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.775136][T10388] Call Trace: [ 413.778547][T10388] dump_stack+0x21c/0x280 [ 413.783099][T10388] should_fail+0x8b7/0x9e0 [ 413.787681][T10388] __should_failslab+0x1fd/0x2a0 [ 413.792736][T10388] should_failslab+0x29/0x70 [ 413.797444][T10388] slab_pre_alloc_hook+0xd5/0x590 [ 413.802620][T10388] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.808531][T10388] __kmalloc+0xf5/0x490 [ 413.812849][T10388] ? tomoyo_realpath_from_path+0x142/0xc30 [ 413.818782][T10388] ? kmsan_get_metadata+0x116/0x180 [ 413.824105][T10388] tomoyo_realpath_from_path+0x142/0xc30 [ 413.829864][T10388] ? kmsan_get_metadata+0x116/0x180 [ 413.835258][T10388] tomoyo_path_number_perm+0x2a4/0xaf0 [ 413.840884][T10388] tomoyo_file_ioctl+0x74/0x90 [ 413.845751][T10388] ? tomoyo_inode_getattr+0x60/0x60 [ 413.851053][T10388] security_file_ioctl+0x10a/0x210 [ 413.856320][T10388] __se_compat_sys_ioctl+0x182/0x1100 [ 413.861858][T10388] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 413.868049][T10388] ? syscall_enter_from_user_mode_work+0x51/0x100 [ 413.874582][T10388] __ia32_compat_sys_ioctl+0x4a/0x70 [ 413.880001][T10388] __do_fast_syscall_32+0x129/0x180 [ 413.885359][T10388] do_fast_syscall_32+0x6a/0xc0 [ 413.890343][T10388] do_SYSENTER_32+0x73/0x90 [ 413.894984][T10388] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.901401][T10388] RIP: 0023:0xf7efe549 [ 413.905599][T10388] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 413.925295][T10388] RSP: 002b:00000000f54f80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 413.933830][T10388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c01 [ 413.941891][T10388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.949952][T10388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.958018][T10388] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 413.966076][T10388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.977423][T10388] ERROR: Out of memory at tomoyo_realpath_from_path. 00:33:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:17 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 414.844590][T10408] FAULT_INJECTION: forcing a failure. [ 414.844590][T10408] name failslab, interval 1, probability 0, space 0, times 0 [ 414.858135][T10408] CPU: 1 PID: 10408 Comm: syz-executor.0 Not tainted 5.9.0-rc8-syzkaller #0 [ 414.866891][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.877020][T10408] Call Trace: [ 414.880456][T10408] dump_stack+0x21c/0x280 [ 414.884902][T10408] should_fail+0x8b7/0x9e0 [ 414.889463][T10408] __should_failslab+0x1fd/0x2a0 [ 414.894516][T10408] should_failslab+0x29/0x70 [ 414.899226][T10408] slab_pre_alloc_hook+0xd5/0x590 [ 414.904390][T10408] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 414.910305][T10408] __kmalloc+0xf5/0x490 [ 414.914564][T10408] ? tomoyo_encode2+0x5ef/0xa30 [ 414.919524][T10408] ? kmsan_get_metadata+0x116/0x180 [ 414.924835][T10408] tomoyo_encode2+0x5ef/0xa30 [ 414.929632][T10408] ? kmsan_get_metadata+0x100/0x180 [ 414.934971][T10408] tomoyo_realpath_from_path+0xb0d/0xc30 [ 414.940764][T10408] tomoyo_path_number_perm+0x2a4/0xaf0 [ 414.946384][T10408] tomoyo_file_ioctl+0x74/0x90 [ 414.951255][T10408] ? tomoyo_inode_getattr+0x60/0x60 [ 414.956554][T10408] security_file_ioctl+0x10a/0x210 [ 414.961791][T10408] __se_compat_sys_ioctl+0x182/0x1100 [ 414.967336][T10408] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 414.974239][T10408] ? syscall_enter_from_user_mode_work+0x51/0x100 [ 414.981930][T10408] __ia32_compat_sys_ioctl+0x4a/0x70 [ 414.987341][T10408] __do_fast_syscall_32+0x129/0x180 [ 414.992667][T10408] do_fast_syscall_32+0x6a/0xc0 [ 414.997641][T10408] do_SYSENTER_32+0x73/0x90 [ 415.002276][T10408] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.008687][T10408] RIP: 0023:0xf7efe549 [ 415.012865][T10408] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 415.032585][T10408] RSP: 002b:00000000f54f80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 415.041111][T10408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c01 [ 415.049166][T10408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.057222][T10408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.065275][T10408] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 415.073325][T10408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.086072][T10408] ERROR: Out of memory at tomoyo_realpath_from_path. 00:33:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8800) r2 = openat$userio(0xffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x216f6c255eb0a428, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x1f) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x81, 0x0, &(0x7f00000000c0)=[r2, r0, r3, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000000)) ioctl$LOOP_CLR_FD(r0, 0x4c01) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) getsockname$l2tp(r5, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, &(0x7f0000000700)=0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) pwritev(r1, &(0x7f0000000140), 0x0, 0x1081809, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x40000}]) read$char_raw(r2, &(0x7f0000000600)={""/6695}, 0x1c00) r5 = fanotify_init(0x8, 0x8000) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000080)={0x49d}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = semget(0x1, 0x2, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000000)=""/208) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'memory'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'cpu'}]}, 0x2c) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x2) 00:33:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, 0x0, 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 417.401283][ T26] audit: type=1804 audit(1602808400.454:19): pid=10439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/15/bus" dev="sda1" ino=15910 res=1 errno=0 [ 417.497823][ T26] audit: type=1804 audit(1602808400.554:20): pid=10438 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/15/bus" dev="sda1" ino=15910 res=1 errno=0 00:33:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x10) 00:33:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x301) 00:33:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000380)={0x2, 0xffffffff, 0x1}) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x0, 0x3, 0x0, [{0x2, 0x54, 0x1, 0x6, 0x7f, 0x40, 0x3}, {0x4, 0x0, 0x5, 0x6, 0x5, 0x0, 0x7f}, {0x8, 0xffffffffffffff00, 0x20, 0x7, 0x3, 0x4, 0xf8}]}) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/68, 0x44, 0x101, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x80000) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x14801) splice(r0, &(0x7f0000000000)=0xffefffff, r4, &(0x7f0000000080)=0x1ff, 0x5, 0x9) [ 419.187710][ T26] audit: type=1804 audit(1602808402.234:21): pid=10467 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/17/bus" dev="sda1" ino=15928 res=1 errno=0 [ 419.213340][ T26] audit: type=1804 audit(1602808402.244:22): pid=10468 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/17/bus" dev="sda1" ino=15928 res=1 errno=0 00:33:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x125d) 00:33:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x14041) ioctl$USBDEVFS_BULK(r1, 0xc0105502, &(0x7f0000000080)={{}, 0xd9, 0xfffffff9, &(0x7f00000001c0)="400b979ed22a470f861fdacf2fb11c999a984cef75234b4f7668f529bc02dfe9307a70b1ee1e56e72360e52f98ba90a7b9cb9cabc91af9444666d4af2d13bd8a9e799fab056fd61496d33e32a55cc857fe8e2dbdad98bef3295f8d6e9f42c8e4472dfe0f5417a4da87c86e1779db4672dc3dbd9f0c8bfbbfee2e994c03d7d90e6e9905872fa5b6d506613b7f96d5674f5433a1eddebf8568755308e510a956c4ccd16ed2485ea61012f89d4fb57a508cc327ac8cc50bacd63afb38b6f0e61b90b11d422d5263fa0f6b6e3e830002151e0352c2036b48b385ce"}) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8802, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 420.301118][T10463] IPVS: ftp: loaded support on port[0] = 21 [ 421.160510][T10463] chnl_net:caif_netlink_parms(): no params data found [ 421.491376][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.498947][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.510396][T10463] device bridge_slave_0 entered promiscuous mode [ 421.626223][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.633607][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.644388][T10463] device bridge_slave_1 entered promiscuous mode [ 421.780574][T10463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.841252][T10463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.977709][T10463] team0: Port device team_slave_0 added [ 422.007442][T10463] team0: Port device team_slave_1 added [ 422.126688][T10463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.136335][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.162899][T10463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.189598][T10463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.196687][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.222911][T10463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.228205][ T8690] Bluetooth: hci4: command 0x0409 tx timeout [ 422.325998][T10463] device hsr_slave_0 entered promiscuous mode [ 422.399156][T10463] device hsr_slave_1 entered promiscuous mode [ 422.440312][T10463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.448285][T10463] Cannot create hsr debugfs directory [ 423.152674][T10463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.210969][T10463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 423.272946][T10463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 423.371730][T10463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.277911][ T8740] Bluetooth: hci4: command 0x041b tx timeout [ 424.727802][T10463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.815235][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.825164][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.861929][T10463] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.936458][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.946910][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.957564][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.967893][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.068872][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.079060][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.089396][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.099195][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.106491][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.123876][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.135324][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.316744][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.328605][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.339819][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 425.350910][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.361734][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.371984][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.458797][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.469100][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.479825][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.500147][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.679178][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.687045][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.789706][T10463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.336595][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.347729][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.357722][ T3230] Bluetooth: hci4: command 0x040f tx timeout [ 426.474828][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.485043][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.512199][T10463] device veth0_vlan entered promiscuous mode [ 426.523962][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.533529][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.595394][T10463] device veth1_vlan entered promiscuous mode [ 426.758509][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.769071][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.779127][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.790199][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.816619][T10463] device veth0_macvtap entered promiscuous mode [ 426.849908][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.866415][T10463] device veth1_macvtap entered promiscuous mode [ 426.966721][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.978764][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.988954][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.999603][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.009687][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.020343][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.030454][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.041213][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.056204][T10463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.071273][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.084239][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.145179][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.158425][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.169355][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.181135][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.191260][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.201965][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.212256][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.222941][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.238236][T10463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.254995][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.266715][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.353178][T10463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.365752][T10463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.375599][T10463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.384585][T10463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.932435][ T9158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.940746][ T9158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.952887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 428.066590][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.078045][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.092759][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.445894][ T8740] Bluetooth: hci4: command 0x0419 tx timeout 00:33:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = semget(0x1, 0x2, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000000)=""/208) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'memory'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'cpu'}]}, 0x2c) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x125e) 00:33:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1005080) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x2000000000000208, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) sendfile(r0, r0, 0x0, 0x2000005) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x110}, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x20900) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000380)={{r0}, "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"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x125f) 00:33:32 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:33 executing program 4: r0 = socket(0x25, 0x4, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 00:33:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1261) 00:33:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(r0, 0x0, 0x0) 00:33:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) [ 430.816021][ T3110] blk_update_request: I/O error, dev loop0, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1262) 00:33:34 executing program 3: mlockall(0x1) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1081846, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) r3 = pidfd_getfd(r1, r1, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x5) dup3(r5, r4, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000), 0x40000}]) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000080)) 00:33:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000010) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1263) [ 431.801171][ T3110] blk_update_request: I/O error, dev loop0, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 431.813104][ T3110] blk_update_request: I/O error, dev loop0, sector 1024 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1264) [ 432.731250][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 432.743227][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:36 executing program 1: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="16cfe96ee8894e68d931fed0a22b6e9149b365585d6d22c8fa8af547072b1949ce914f82b5e8be110c0859069c9414bfd8b1578fa8178b289119aae7d692972863a35ed4cfce083b86815c9d2ffb7b5e0165f3c6753cb0d39e5c1dc3e63bed443638a9ff49d6649fcb4ff68180c3ff43332177012cd8d003cb565df2e4ecd9611d8ba82e2b9d7e4fd8ba3ae0289f17b3e1ae3156f3e4df38cc3a7e1fc82949c9e03d1fde8dbf0871463a4a4ae753e129751cc797f04324d7d589", 0xba}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 433.457596][ T26] audit: type=1804 audit(1602808416.512:23): pid=10779 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 00:33:36 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) [ 433.669145][ T26] audit: type=1804 audit(1602808416.562:24): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 [ 433.694807][ T26] audit: type=1804 audit(1602808416.572:25): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 [ 434.307656][ T26] audit: type=1804 audit(1602808417.361:26): pid=10818 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 [ 434.367392][ T26] audit: type=1804 audit(1602808417.411:27): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 [ 434.392513][ T26] audit: type=1804 audit(1602808417.411:28): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/22/bus" dev="sda1" ino=15956 res=1 errno=0 00:33:38 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1265) 00:33:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:38 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) 00:33:38 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) 00:33:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1267) 00:33:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:39 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x3, 0x0, [0x9, 0x897f, 0x0, 0x7, 0x5], [0x6, 0x10001, 0xffff, 0x1, 0x5, 0x3, 0x4e, 0x4, 0x4, 0x2, 0x8000, 0x3, 0x80000000, 0x0, 0x6, 0x9, 0x0, 0x7, 0x7, 0x6, 0x0, 0x4, 0x5, 0x3, 0x8000, 0x5230, 0xc55, 0x100, 0x1, 0x3, 0x1da, 0x81, 0x0, 0x5, 0xffffffffffffc99b, 0x5, 0x0, 0x3, 0x9, 0x5, 0x2, 0x4f3e93b4, 0x1, 0x7fff, 0x101, 0x10001, 0x7, 0x6, 0x5, 0x757, 0x400, 0x7fff, 0x95, 0x4, 0x250, 0x400, 0x9, 0x6d9, 0x1, 0x0, 0x1, 0x1, 0x4, 0xffffffffffffffe0, 0x0, 0x1, 0x3, 0x8000, 0x2, 0xfffffffffffffff8, 0x1ff, 0x8, 0x2, 0x37, 0x8, 0x6, 0x81, 0xb6a8, 0x2, 0x4, 0x5, 0x0, 0x2, 0x9, 0xa99, 0x5, 0x7f86, 0xcd8, 0x3, 0x4, 0x1, 0x2, 0x10000, 0x0, 0x200, 0x81, 0xedc8, 0x6, 0x5, 0x7, 0x1, 0x2, 0x5, 0x90b3, 0x6, 0x96, 0x9, 0x800, 0x100, 0x5, 0x40, 0x6, 0x0, 0x6, 0x3, 0x1, 0x4c9, 0x8, 0x3, 0x7ff, 0x1]}) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:39 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1268) 00:33:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:40 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1269) 00:33:40 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1260) 00:33:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:41 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) 00:33:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1274) 00:33:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccccccccccd26, &(0x7f0000000080)}) 00:33:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1275) 00:33:41 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) 00:33:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000000)={0xffffffff, "5b98b32c938b6957fc5b000ae306de1e814b9d9f89ce5bb65227fc636a11f3c0", 0x0, 0x1}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1276) 00:33:42 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1260) 00:33:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7f, 0x1124082) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x101, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x2) 00:33:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) 00:33:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccccccccccd26, &(0x7f0000000080)}) 00:33:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r5 = dup2(r3, r1) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40086437, &(0x7f0000000080)={0x0, 0xffffffe1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x7, 0xff, 0x8eaa1ae, 0x4, 0xfffffffa, 0x583, 0x3f, 0x2, 0x1ff, 0x1f, 0x12}) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x100, 0x8000) open_by_handle_at(r6, &(0x7f0000000240)={0x77, 0x9b, "2709263e4f0d14c0c9eb277b18a9e367ba79a3221ac88cc39ae67f72051a5cff383c7232ab839a9c042dbe9e79138ccd10577c5026a976dbd6b21dd42089248d11d3d925fe3e4e3b3e5717e5873ccef4f991a6dc2085a1203fc86f9e06455e08fc463fb6e46f6654ac9696611886e6"}, 0x10180) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r4 = syz_io_uring_complete(0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000000)={0x0, 0x1ff, 0x9, 0x1f, 0x1ff, 0xffff}) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1278) 00:33:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x10082, 0x0) fallocate(r2, 0x5, 0x3204, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccccccccccd26, &(0x7f0000000080)}) 00:33:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 441.621849][ T26] audit: type=1804 audit(1602808424.680:29): pid=10917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/29/bus" dev="sda1" ino=15986 res=1 errno=0 [ 441.763953][ T26] audit: type=1804 audit(1602808424.760:30): pid=10917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/29/bus" dev="sda1" ino=15986 res=1 errno=0 00:33:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x454, [0x20000380, 0x0, 0x0, 0x20000588, 0x200007a4], 0x0, &(0x7f0000000000), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x40, 0x806, 'veth0_virt_wifi\x00', 'veth1_macvtap\x00', 'veth0_to_hsr\x00', 'ip6erspan0\x00', @empty, [0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xca, [], [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffd}}}], @common=@mark={'mark\x00', 0x8, {{0xfffffff0, 0xfffffffffffffffe}}}}, {0x9, 0x20, 0x18, 'syzkaller0\x00', 'virt_wifi0\x00', 'veth0_virt_wifi\x00', 'geneve0\x00', @empty, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@ip6={{'ip6\x00', 0x0, 0x4c}, {{@remote, @ipv4={[], [], @loopback}, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0x1010000ff, 0xffffff00], 0x40, 0xc, 0x36, 0x0, 0x4e22, 0x4e24, 0x4e23, 0x4e22}}}], [], @snat={'snat\x00', 0xc, {{@broadcast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x2, 0x8884, 'hsr0\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', 'wg2\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x24}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xce, 0xf6, [], [@arpreply={'arpreply\x00', 0xc, {{@dev={[], 0x21}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0xc, {{@local, 0xfffffffffffffffe}}}], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffe}}}, {0x11, 0x1, 0x890d, 'hsr0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', 'syzkaller0\x00', @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="ab4ed25d8747", [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x96, 0xc6, 0xf6, [@connlabel={{'connlabel\x00', 0x0, 0x4}, {{0x5, 0x1}}}], [@arpreply={'arpreply\x00', 0xc, {{@multicast, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0xc, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x4a4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1279) [ 441.962237][ T3109] blk_update_request: I/O error, dev loop0, sector 640 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x101001, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x5) dup3(r4, r3, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccccccccccd26, &(0x7f0000000080)}) 00:33:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127a) 00:33:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x269) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 442.754150][ T26] audit: type=1804 audit(1602808425.800:31): pid=10938 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/86/bus" dev="sda1" ino=15986 res=1 errno=0 [ 443.084022][ T26] audit: type=1804 audit(1602808426.140:32): pid=10938 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/86/bus" dev="sda1" ino=15986 res=1 errno=0 00:33:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 00:33:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127b) 00:33:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1304082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 00:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127c) 00:33:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$FICLONE(r2, 0x40049409, r1) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x20, r4, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000380)={0x800, {{0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x26}, 0x1}}, {{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x34}, 0x81}}}, 0x104) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x170, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe60}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b171490}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @loopback, 0xe3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4800}, 0x4000841) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 444.753466][ T26] audit: type=1804 audit(1602808427.810:33): pid=10970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/32/bus" dev="sda1" ino=15794 res=1 errno=0 00:33:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) socket(0x11, 0x800000003, 0x0) [ 444.899921][ T26] audit: type=1804 audit(1602808427.890:34): pid=10970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/32/bus" dev="sda1" ino=15794 res=1 errno=0 00:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127d) 00:33:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_setup(0x144, &(0x7f0000000000)=0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000040)="70f6df9b716e4085bc572550c8366090586c694338cc6c6e5e9f5ec1ffa84766a66dd92b", 0x24, 0x100, 0x0, 0x1}, &(0x7f00000000c0)) [ 445.194141][ T3109] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:33:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 445.545141][ T3109] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 445.556872][ T3109] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x20004804) 00:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x3, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127e) 00:33:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 00:33:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127f) 00:33:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104482) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@rose, @default, @default, @bcast, @default, @null, @bcast, @null]}, &(0x7f0000000300)=0x48) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000080), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x0, 0x4, 0x3}) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000080)={0x6, 0x6}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4b47) 00:33:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 00:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) sendfile(r2, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643aa72030303030303030303030370ab7bd4235d28e2f3200"], 0x2b, 0xfffffffffffffffd) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getpid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={r3, 0xa7}, &(0x7f0000000080)=0x8) r4 = socket(0x11, 0x800000003, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={0x0, 0x3}) bind(r4, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000380)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4b49) 00:33:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) 00:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7fff, 0x1144082) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x241c0, 0x0) r2 = memfd_create(&(0x7f0000000000), 0x1) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x7f, 0x7, 0x6, "edce31aeb9dac963ffb57ebb86cf408e7cdc908e39b0d7fae3ab5e601cba796e3b5120ba9f99e4ec06fca2f563988ebf6cb48dac2ed9fa569445f754", 0x23, "c8e01ea5f19d3ea922b55abbbc2fbe9f855a361dd78cc7c76dd5b128ff9bc7dc9a41b9f6f1c3260181f512b7f80855bd49145e3e7aad60575695f57c"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c00) 00:33:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x1081809, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c02) 00:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x6, @multicast2, 0x4e22, 0x4, 'wrr\x00', 0x20, 0x3, 0x43}, {@multicast1, 0x4e24, 0x10000, 0xffffffff, 0x5, 0x2}}, 0x44) 00:33:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) signalfd(r0, &(0x7f0000000000)={[0x4, 0x5]}, 0x8) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c03) 00:33:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') bind$rose(r1, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), 0x4) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0x2b, 0x80000001, 0x0, 'queue1\x00', 0x9}) getpriority(0x2, 0xffffffffffffffff) 00:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c04) [ 451.489895][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:33:54 executing program 1: ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000040)=';\xde(W\xfd?\xf9\xef\xbc\x12\xe3\t\xe8\xcaE\x987\x03\xb6)~\xabL\xe1\xab\t7L\xef\xaf\xbd\x106\xda\xcc+\x0e\xc2\xab\x82r\xc2<\xce4\xb0\x1a\xffv\x97G\x1d\x87Z\xae\xf9\xad\xcc\x0e\xe4;', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) fcntl$getflags(r0, 0x401) 00:33:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:33:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0xfff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xcc76, {0x4, 0x1000, 0x401, 0x8, 0x16}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fcntl$getflags(r0, 0x401) 00:33:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f00000001c0)='o\x1c\xb19c\xefs\xd0\x82\x16\xe4s\x98\xc67o\xcc\x10u\f\r?\xe0\x9bI0C\xd4\xb6m1\x84\xcan\xdeRx\xca\xb6\x04\xdd\xe2\x1f_\xf8\x89\xf5\xa4\xbeyX\xea\xb2\xd2\x91Z\xcfA8nt4\x05\xf2+Q?\x86\x16\'=n\xad\xd4\x15\xac\r[\xd5\x8d\x02\xb9\xd8[\xb5\x84Pd\xaf\x9b\xa4\x02\rQ\x99\xdc\xc3\x8b\x9d\x81d-6\"!\x99?\x8a\xf4\xda\bb\xce;\xa1\xcd\xf2p\xd2\x93S\xbdd*\xado\xabz\xb6\x93!\x12Z\x94\xe6;\x13t\x11\x9c\xcd\xf8q5A\x98\xb3E\xc2\x8eR\xa1L]G\xb3\xc6\x13\x83\\\\\x1cY\n\xde\x10%\xa7\xd2\xa5\xe6\x94\xfb\x1b\x82\x14\np\x9a\xdd\xf3%\xad\xde|4\xba\x8b\x1b@\x8f\x98\x85`\xac\xc3\xd1h\xba\x81\xd5\xba\xf6\x00'/213, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r4 = openat$ttynull(0xffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:33:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) fcntl$getflags(r0, 0x401) 00:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c06) 00:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x0) ftruncate(0xffffffffffffffff, 0x821) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="1088e0ca533ed4a392b91e90f7edf6ae9663f79c312bfebb1bbec51feb3495b85848f1aed4f81e60bbb357028762c9420b990cce376173f00295535157664cefb9c9b62ea9955f1056e57b6b4a841f512c52314d2a0194a36f43880a1395277adbe3ca7b7ffc15e629a5e0fca65ebafd7f4bbec5c574901e562f791ca7e3c1aae818b8deb0a6649da42759e9", 0x8c, 0x6, 0x0, 0x3}]) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x8000, "e80bbf8a919738e3abf19a2db1f998fb2c26e68c5a141747b8518edb794cbf2c", 0x3, 0x20, 0xc8000000, 0x1, 0x10, 0x4, 0x1000}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) mq_open(&(0x7f0000000080)='/dev/loop#\x00', 0x800, 0x43, &(0x7f00000001c0)={0x4, 0x4, 0x1f, 0x3}) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) munlockall() 00:33:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 00:33:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) [ 454.695224][ T26] audit: type=1804 audit(1602808437.749:35): pid=11157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/40/bus" dev="sda1" ino=16049 res=1 errno=0 00:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c07) 00:33:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) fcntl$getflags(r0, 0x401) 00:33:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f0000001640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x2, 0x3, 0x2, 0x2}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000016c0)="e7ca36ccda677423e9f77f21ec7adcb921460851e37fc6fb4e0f6d3efc56da8539c60ad57c65db2b3f91e2faee0822e767f51941ee57b4e79d9850e58b29a8a9c99cca51b2c874b591bf419740bbbb6413a8b8b4ace8903c2ba44d32d4a53f62bb383cc5044b303e995becba0cd8f77f9bb3ecd219883fbab491585a2bbfe773c5095c23569f708d8cd8fe2be0b32af88ca19d3cbf5bf4d692ce94a2c5032e3d0b5bf8d765c44b3b", 0xa8}, {&(0x7f0000001780)="462a78648eaa2a29d4f25a3fbb913d228f54b3f263761df40a9ff44fdbdcfa9863c4cacb924ab739ae5b7ae45eeb5a52245095ec5d7048787081594ab1eb5b541222cc719c96b9ad477968de", 0x4c}, {&(0x7f0000001800)="127659e59419b1ca1c0e99e762015346ea53513307c84aa68ad9d07acf66dbd94112a5f4064ae3b5ff795116633e1fda950811dad8e83be6ea1eb5568d48b2915e4de7a3dd4ede3555638c02b83ca477d0107b7405e090edb12e9326e28a3092d875a04c28c0856ce9aad57cf1f2079acb16ffadf3e4ae8628977efb434527ebcac2117b6e0611ec61857736f3a29c6770afb7c2a3e8428b804de71069f14a83", 0xa0}], 0x3, &(0x7f0000001900)=[@txtime={{0x14, 0x1, 0x3d, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0xffff}}], 0x24}, 0x44000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) r3 = openat$autofs(0xffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x20800, 0x0) dup2(r3, r1) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe4) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000480)={0x3, @null, r5}) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xe4, 0x17, 0x200, 0x70bd28, 0x25dfdbfb, {0x16}, [@nested={0xd0, 0xc, 0x0, 0x1, [@generic="1a81a5303da60d773b81b7097796d2f9be4c1dcba697b54b9914b270088fbb9cefa3a57d9be139ebcccc47dd18944e9831920628cb0e25cc8d1053b50b619871304d551befb78c1b90917748d3114f0e9fa455cbcb1301bbe5f02df4461aadf2e2c564e35cbef9034df955d12e6ae5602ab2a65252cd9fbc9c390963dcce11e0552c2e0304fe9fa1bfbfa2049f68f1b8ef499283078c6d2993b970ff33e477248c859bd2dd810eb5ad2413e0d9276d8752cc6becb5d42bf7ce604a4b146188bcd938bf95e8db38e623156342"]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) [ 454.932034][ T26] audit: type=1804 audit(1602808437.799:36): pid=11157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/40/bus" dev="sda1" ino=16049 res=1 errno=0 00:33:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x400c4152, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[&(0x7f0000000040)="683280db6af03d76b39ee36f7428d3a4a1c48e", &(0x7f0000000080)="c89855686cc8d1a70ccb86bad4f0dd06707f7f1d7ecd115bb611ba34263db86ceceee7735c0cd637cd228ed56520cb71d155b53dc0d556c4c4869e8b34250b91680320aebee8e7418e535e83faf911056db08e961be9671c22a50bf393f9b9f47b90a044256964e8e7bc5ea0bfe4e4a78d535ab37ff7bc6528061e3df730fde52ac895b3a05aba28317034e729b946aacd6a9d6c1b5fe262f92a3093f115dc61d5ede72cd441040e00347c2ba7c6a83d374d3158", &(0x7f0000000380)="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", &(0x7f00000001c0)="5c316549df318555a34d1f72474c9a7efcf1"], 0x6}) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000080)=""/128, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 455.535559][ T3110] blk_update_request: I/O error, dev loop0, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 455.547414][ T3110] blk_update_request: I/O error, dev loop0, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:33:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f00000001c0)='\x86\x02\x88\xaf\x1c\xcf\x99\x00\x00\xb9\xd7T\x12\xdfC\x91\x9c\x18\x9a\xe4\xe6<+\t\x99 \xe2_\xe4\x15@\xc6j\xa4!\a\xf9\xba&\xfaj\x0f\x8f\x9b\xaa\xd55E^y95\x8d\xb8M\x9e\xd7U\x9eW[\xed\xb9\xda\'U\"\xf4\xcd\xdb\xd1\xa4L1\x8f\xf4\x80%\xb4o\xe4\xc2\xa6\x81%!\xe8;9-\xa7\xfd\xb43,\xce\xaaM\x18V\x8f[\b\xa5\xfd8\xc0\"DU\x06\x9b\x92\xe7\xe9?\xa3\x06\x9f\x8d\x01r\xc2m\x05d\x05[\x9b\xfc \x98Z\xa3d\b`}b\xdcU\xb9i\xca\x89~\xb7\xeeN\xde\x89\xd43!Z&\xc5\x95\xc6\x9c\x1d\xfa\x963[\x87Sr}\xef~\xdc\x00&\x9a\xb7\x8a\r\x9d\xbbG\x1dm#\xa81\xd65\xfd[\xc4K\x82!\x81\xfcX\xe1B\xea\xd4\xd0bw\x91\x94\xdc_\xb5\x89\x7f\x87\x98M:\xbf\xdb\x06]6\x05\x0fIU\xa4\x80\xd0H\x01\xe5n\xb0e\x1b\xd6\x9co\xb4\xee\xfex\f\x14', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0xffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/234) fchmod(r2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x2, [], "d786d66400434cb34bd065e8ff84d6c8"}) getegid() sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x3, 'bridge0\x00', {}, 0x3}) r4 = dup2(r1, 0xffffffffffffffff) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000011, 0x50, r4, 0x0) 00:33:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x81) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:33:59 executing program 4: fcntl$getflags(0xffffffffffffffff, 0x401) 00:33:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c08) 00:33:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000080)=""/128, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:33:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x40, 0x5, 0x4, 0x0, 0x8000, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x4, @perf_config_ext={0xa9, 0x62}, 0x4, 0x4, 0x3, 0x4, 0xfff, 0x3, 0x3a3a}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r3 = dup(r0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000380)={{r2}, "82b8da7763b47dafb8d8d7ba1cca11d411d882638803049832e80479dace163432dc1262e8fe8cf57c3390a9a3ebf2ca66b2bff6d12b326c3c56a3eeef0d73d98e72cca338bff019fc3d912da82092072a052134914d79edadb8496a8ba9679a0efa9b67f11d5ac830f4b71f6de1fef2a0a72b5484a891f8c3f66ae1223a4d0199848c9a1783f12fb85a027834fdd3412c1dbb7574f8f44e50384151d4c0bc9318efbde4290c0ddb6af332d990447e10c1c2b03d34481eb43f624d3d9d664c7101d15041860f241dffa708a77038120075333a4b04230b4b680a4c36b20cc676d15924f6f484413ce96ec1495104dedfe8d5d6f53839f1d13af7e7ec2766f24a9dda061cf068499450ec5e9a022d1ca260070d7ec48227c4fb5256d4ac9196c908fb314b9a561c5561f89d951690a40dad9b0c72c6458936334b05cf6431dc91420e0656e25a1410ba0905b74c46aa4899b8e364ff5ba1c5b08dfcdf362498e3995a59f7631332a142903a254dfd13fdd23f105eb767f18e368120de26a009d8737b891443f061590427ea6718301e401daf2731f3693136025fa8121be5026eecb6008c66be81cf6964bbd25f2b441882edfc87fe7f69970df516d08f7ea4eebecea20f3a71b86ffd8b824bbd5118f958f412f4fce6a84c094db30c2426ec2325ad2b670bea643f8f514637beb73db7748d0c9c838250cbae6e684f8dc0035a87b14c46d243b3561f6a54fd422731e105365d6ff466c96128cdbd39690860e2473ca81046b5657122b1974b51bf954530848d22632d1c5cb659346897243abdc491a1ebc125741a2a5c9c1f2edea3b67d820a2a83b263525cf8dacd890f752d00742f46197c0b599e874818aa47f8a9bb1cbee2fa67ab6489460a14f4633145dae5a1f95c435c6dc1c72bc4c9196a708a32715b40765d9dafa816d9758b0aadb3ea525ff0e4822e73938c5132aeec2d740eeb92dadfab2e88b3cf467bc7c652131d55eea55848998cc41484b18d704496ea2326b8cc6a7b65676da5850a53b27ee48e2a77ed1661a70bc6e809f7681841e123a05fff38b577d0a31bf87a4b56a6327236a8905dbbbfe147f8930cd1c51d37ee818ff0f8f2b86ca7f2648e9932b35678e47e1983c90830742d727c08d5158188ad335100ce7b6fe749571735669e557b82a7a56905cb77a2866c760322929b87d924b2f7ae111249c48520294090839efb93cd47b33fbb92ddfba6b2d5340ef2f4c9414107acf55bf4a9411101a5ec67583816bc0d5c27db20a59970dee1e657673ee67990b8c7978ff6a5abad7f908954b5548717a7b55f62201fd4a365964f52bb92aa33bb6f73c276ca918587ce054ea50c81eebfc2d81c448fc59892237b0c5596e67f1bada23b24bb65e3bf1ffe67171a256ea350cf85d6a44b7061a6158293a92318c0501de1cd0b6555cf426e8a5fe0cea21932a302463c93cd43a3ba70b512286ab0d6b1d67637fa9093bf4729f24760f57d3bb765447c88f127c64a74cb26668c17bc3c98545ea02d8340e9939798919020c2a6a60195ceaaf4aaf1fe05f871177433c6304670d08ad3dfe1591dd8091619660f8becb7022f76edf293615d2e6f80fcf5fce55b88fa12dd1e38aa2fb264b84340acb43f864286330ecb855573726790907345df56347082d2198db200a4ed55e6c56e995b283089bb0c0718a7e4108182e971954dd41895dd68cec7ec48ba03881e0a6f744ca146b0ffb550710b34c9d7cd7f75d59f7e331dd850b203a84746716b548f2bf015317a3edd75b7d517b9294410e052fe5bb406066716d797ac4ca1508fba39da63bad448690a0f5755e9791ec90d8fa6ea99925fc8feabb42ec55b6364e77c907ab7e6fff55cc3c65deae03d70972f07d6b6f0c261e1870d98dda4468fbd77e20fa7e14892d04d0961c3dd9e204ceb75dd66e09a8f62b331f9bc2c5a3d1835edc2c260704a16cac282c158731986eab585eed171ade526369ff52a6878ed319d7b9a8a528aabfd2ed3a08d98c3eaa6259701b6b570ee5a3fea0a16fce94901e9cff75cf7cc846112b7361a6ce697daebaccf844fda4ecce6a0a25f7e90236b82e20a8aa7a90fce993d16f8325f1b701938099ee816725ecd320fea7d66f054b686d69b5cbeca43bc70ded66811ff3dab819e853093658d5f8a761c4a64e583b794aa06c298114992071f0e181a213fc1a868087a55ebf8ce1a2e06bdad8ea621ca66a5e8f6ae7dc661d1007f1fc9ca3cb0781efe191acb67172c70b6e2bb0791adec38846b85fa475db6be7252f51246247d3140296173673c04c524dab3192f1897d796acb7cd6307ab93a39137a8c9ac09eb53b8ab0b48fd3a269cf0a277117bd0639d9713723df2dc8e7ec6191bb5de652e22eb1b3b1df179468e2e92949bd08900bbade106cf72b03a5d6db9d4d5c9b1517acfd59a7b78c6c20624e8c650d99f62e6ac08bd4ce3969e44d9181d7e5f014334d65c7387dd7dc2ac71e65df64d47d4243d8ae5c55ec283305cbd24c43958ef280fbf6e311256a444016d286d343cab8c483b4a9de00d608ddfb1b99b4d7213d589855904968f3d18878e6de1075868becbc6f62d98f2fb8633822d2454e83ef69bf957c40dd33d550f4bb9e06d2bb7fc73d1f0e2214071819734b96345b4f2a09b421da693ff064e2c8bd07501f9c59b4b39b8c951b5228f316a5a04c8abf79f94576cfc29620ff78a0ec822809309e0af7c726933de7896331fa94ec86c92c57e1f200a1a97231d3b3efb2b5cbfaec0f339249ce1cf1867da19077101b1238f1e6112008b9e0b7776a3a796972a229c909a971d3cd13adb8c0f9d4b3fab1010cbd23f5d420dfe17320bb69919e954cde0d48b47286a158696170bf5f703fc451398c9cfcf75bf6c795ea7f4bc954fbbad71d125672cc38adcdc58d43cb98c86db1521ea3f408bf0b14b349ca6d819bde5581e971a8ec19d34f7a8a6eba5417f302993293d826f62768738b4faf044fdc0deb6c7a3e43b4e554cf63b7ff35b4b6100307a593d8bd6661aec4e0d4c768bb1e5d524c5a21720706c4c78de09731b864307d3f85773cf1dd78b246b6e93ed4e121ecdcd2ae22ec1554a799b9f9122fa7ae38995a4955a513bb0573a01f0fd4a78667ec0d90a75134e8520a88dffd72266a061a0a7f3f31bf4492009d847d047ebc41aac1e419caf1e6c53a0827ddb479ce39557636d2a7e0421191ca348a7233d10323ad08cc5314ec094fe470b3fe91bf27cc06ff843182bb2db7ef7beaa2719683c800ad32d264e3370a50d0f1f9147ec4aec2a32e872a22d32739f9f388e98610581de846509cfca939ee90def1a59dffc15dd3b338391eef5edc0ca7f0916eef2ecc0b3cb1f9b4c720ce91954bd2f10c81e47283dbb7dba2a772b80a486ab9d1188b9ca6b8720b63ac0212100100be96bb403bb9eafdd4d53d147c83ee17d71a0c5f3dea6524bfce00caa642ee7a5d62ca10b7ff2797a36b7a4529b04f4ea5d04ca07252c8f0b9ef60b2ca18c40681ffa7dc6283600e3c386196e284b11da30f216c236255d75f912cb0078dc27b4e8ee7dbb16ccab7840ede6a9622c57b9051673cffaa14a2752e985ae68c7c644482ac95deec8032c791c54ac08ff780eb7d34bd9d6d35d209db48ca287dc0b391af4db8b8249d0cde4ca9ac7a9a0b92865281b2705bff710ee6cde83af6b0bcdf5a4127ff6b770bf68e37df2b7edc4a5a008662b63d24b8f86e6f8ea05dd18d3e5be67ab2c2c29c68f08075ca5c6c58f5578f4e1d105191451f7e404b15bb9a896dd5113aa7cb6bbbc5d12dade06582fa204f976a1ef96588439f913c6f96875a6ae223456542e8b00f6d051a7240d9d6d7910dc59d43f6fb6b5ab009efd042465b64155dd8b477b59ac4282b85271158de59c94e798a34c5ca2908d89af8f18ad284a8a9254fde89a64805fedc6ee4682b51860ead721f5f1dc8d77cc5da73a439bbb092a4bddfb7e8cea76abb3402dc20804d3d20116894d22a954842a65196f587a3fccf1c8a740a68dd472cfc8d054c6131d2831673c21844c17a3f13c9cbdbc8c895284c3182a0a10272bd3a91bff2f749f4427063054672b8931a108b62261775e6e7cfdfe6a05deb7952cf7800f66c83ad8527a5d373416177b360eb1d941a227c944a74647c596833c40f31bad17bcd679b44b804f5b471fcaf960382bb7e135a92480844e71f9c392d00f5667926ed50075ef7afd0ce0eaa565541d668bc139191551fa9a2ee12ba524a9a136ed700cc065abfeb51acd6383c95e5b8041e857339676f1a02de958cc6b2c00b9731c2830e5a0f9c9a60ee48ed46cc57323c19752635257ad962f287bc048043f0da2e035b9577cf18ab98b02ec1b5f2740cf2c0ad2e5d90f6791d29f9505950b861bb1652a67c1b90ca706b09a83b0bfd18229e9d3a9a82a072daf44faab42b3318c862b9cab1601afb978eef218f146c98c62674854804da9133388a9b0c0896e3a4d32cc9c9bb2f7a76594a1661175ebf14a83a91f5f27d1fcc0b8355f73daf568a8e6c05596b3254946ee470ee9bfc097b28ee974b364cc4dff0c8e9e004092e24507f4b3076b475cfea0aba3f415ce3e9b022a3c7f83056985b16bf4a9955b6c933e332aa3f17e3293875ecd407f87011b887621685bc8f4ac6adbf8005f7ab88946caeffa2a9941af5134e0d3aedba7727d5e70a0f09af8b6099c72d93f83ff1a6c92d3080d5896cd2680e5adbb8162806c7d35b129340d71de7301a844c4d5b6c4ae1f417ca0f41a812eaeb3be5510ae05621301253a6c94cd9ee00566d7326c000bc99b84b77ffa0cec34eedd6e3bb7d209982aa2eb25642b2e20dafa4a9d5f647dd1a2a2f7fd985eedc21f1804ad073ffa74dd4240cb19355c72bad88808197cebe540e474e99fb2f4d21d30677fba2caad97fa1c34c751997630e193460dbda941ac81b8f557fa01544c161b8f151c105f21e0c49fef12b982cb35add0917ee7d8773b4991de5bcbf1cceeb378236d8e679716988026ed37a7a7a573b5e7acfd3f770c4a2e7bfa5ca1424b841af61aec74f3d6c235dd480618b47661db1a7e86dd86eadd0849d1b5eb9d86400bd1930be8c6d36ef843bf2cf211b9b2b8d22e5187beaccf798903a3ccf81ea2d1b084d3a9fbf6f65f9c085ae2e6726da7e4093a65cdca8331ffa6939645428276f84d052627631b4e0fbba54f174fb804f7070298689b55c772850478e481bc977a8324957e10933c99d2e6383cea634b51331a7bb2deae9467cb3b80d318c5ab1f1ed2694104812232e9a5d36854ebdedaa57d7c0da2f5a3b3b683289a9d7a696c7242f1568722ec3dd2850d6ce2f9c06231e5ea0a515b3ae929391a9a19f4c288dc00ddcae45b05ad51b1b33f7c354df69f72d7c2c96b2cef0b6e2643a3beeeeec6444875c3c11a1f44d44cb55b69b86b75661ceba84c822fe7f2355a016a4b8b4d224ec5b73175535080f074f34d194fb4c5a627dec68820b9abf0fa1a29c4616990680d7b3c1a4026c333d2ffca2b762d23c35c959b0154bf46681dd43cd4cfb9f04464c76a0e92896dc13a3d82842db17a35b70cfc881067b9f02acf55e00bbeea6dbafbdc2cd559c52f0d20cf0803c56518bd381fe4e4bcbdc164123b6e2bb7544a9e168567e131b94be7308bec7b2fcb6c119c7c80c301ace4c14f48974bfb4ef0263c655bf676a880c83f47505fa44f5d1b85f6fc721cbeb70efd2dda4461e923be2e6e1cde4ee054c8229a7"}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x5) dup3(r5, r4, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000000c0)={0xff, 0x1, 0x7}) [ 456.935644][ T3230] Bluetooth: hci0: command 0x0406 tx timeout [ 457.219164][ T26] audit: type=1804 audit(1602808440.268:37): pid=11203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/43/bus" dev="sda1" ino=16078 res=1 errno=0 [ 457.315239][ T26] audit: type=1804 audit(1602808440.358:38): pid=11207 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/43/bus" dev="sda1" ino=16078 res=1 errno=0 [ 458.007619][T11194] IPVS: ftp: loaded support on port[0] = 21 [ 458.651530][T11194] chnl_net:caif_netlink_parms(): no params data found [ 458.964013][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.972147][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.982380][T11194] device bridge_slave_0 entered promiscuous mode [ 458.997664][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.011479][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.022012][T11194] device bridge_slave_1 entered promiscuous mode [ 459.085682][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.110442][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.180364][T11194] team0: Port device team_slave_0 added [ 459.208526][T11194] team0: Port device team_slave_1 added [ 459.273646][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.280738][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.311674][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.379778][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.387151][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.418084][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.533343][T11194] device hsr_slave_0 entered promiscuous mode [ 459.548795][T11194] device hsr_slave_1 entered promiscuous mode [ 459.569603][T11194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.577487][T11194] Cannot create hsr debugfs directory [ 459.972631][ T8740] Bluetooth: hci5: command 0x0409 tx timeout [ 460.030144][T11194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.055179][T11194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.095841][T11194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 460.143405][T11194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 460.811605][T11194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.877936][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.888055][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.917363][T11194] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.981524][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.992812][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.002897][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.010171][ T3230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.167282][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.177553][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.187971][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.199594][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.206971][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.216262][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.227830][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.336432][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.347652][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.454143][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.467816][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.479134][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.601833][T11194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.613073][T11194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.679925][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.690326][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.701703][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.712596][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.856439][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.963377][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.973571][ T3230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.053995][ T12] Bluetooth: hci5: command 0x041b tx timeout [ 462.087615][T11194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.882463][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.894874][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.066826][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 463.077283][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 463.131979][T11194] device veth0_vlan entered promiscuous mode [ 463.141559][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.151755][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.220345][T11194] device veth1_vlan entered promiscuous mode [ 463.451753][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 463.462235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 463.473145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.483652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.524354][T11194] device veth0_macvtap entered promiscuous mode [ 463.555405][T11194] device veth1_macvtap entered promiscuous mode [ 463.647304][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.659169][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.669305][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.679977][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.690056][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.700664][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.710713][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.721386][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.731461][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.742078][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.757524][T11194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.765893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.776266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.786412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.797119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.874449][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.885176][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.895309][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.905913][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.915997][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.926596][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.936678][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.947370][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.957487][T11194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.968208][T11194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.983397][T11194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.996257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 464.007662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.052001][T11194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.061008][T11194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.071099][T11194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.080065][T11194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.127262][ T8736] Bluetooth: hci5: command 0x040f tx timeout [ 464.464066][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.471999][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.480340][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.680644][ T8651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.689365][ T8651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.703955][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:34:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:34:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000080)=""/128, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:08 executing program 4: fcntl$getflags(0xffffffffffffffff, 0x401) 00:34:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x1000000, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c09) 00:34:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000b1400df2508003f0004000000080003000400000008003f000500000008003f000300000008003f0003000000000000000000002626f797842bb892036348b89641d0101a1a3bd453b814cc5efc18100e94e2feb56bce2e04504214be7172b94e05278aae1fc18befa6cfaee2d96137c34095b94c26cef06ef692724f78ef95bb0adc0ace09c1cf3d64e3fa087a186c20d106b30439b85193912d8deacf7457ce5ded9504"], 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x40000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:08 executing program 4: fcntl$getflags(0xffffffffffffffff, 0x401) [ 465.316507][ T3109] blk_update_request: I/O error, dev loop6, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 465.328705][ T3109] blk_update_request: I/O error, dev loop6, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:34:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000080)=""/128, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c0a) 00:34:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000001c0)={0x2, @vbi={0x9b5, 0x20, 0x2, 0x4745504a, [0x3, 0x7], [0xf4, 0x2]}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1}, 0x8c) 00:34:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x306, @random="3206b340004a"}, 0x44, {0x2, 0x4e23, @multicast1}, 'batadv_slave_1\x00'}) get_thread_area(&(0x7f00000000c0)={0x1000, 0x20000800, 0x1000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r2 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x2000005) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x17, 0xd0, &(0x7f00000001c0)="82dee26bedee5d52ea6a87ba407652ff4ecda1f05d537d9f640a22a69c34c2e23602266aba150c7ba3121ea07f957fa216bda122dd5d0546e61fdf48f7f10b6c31de1ba8c503ead6152041d7252bc48339c1da4874849833ae38f2440f1e98af917ddb078f9c47451e9a58b121799ec4794b409bb390848ad0152aa158bb44fcb40c86f8f1b441f3fc1bf4773c7bd99ad3c6501e16ddb4a3d79d821baddbac0331ae3ddd58c8483b18d4c126c8ed8d6994251434fc1cba54e4a33d3f36fb208ec81efc3cf084b6e0985e3a22cccb3207"}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x2, 0x1, 0x0, 0x800, 0x9, 0x10001, 0x8, 0x4}}) 00:34:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:34:09 executing program 4: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) fcntl$getflags(r0, 0x401) [ 466.208036][ T12] Bluetooth: hci5: command 0x0419 tx timeout 00:34:09 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x1f) 00:34:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x541b) [ 466.514754][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 466.526729][ T3110] blk_update_request: I/O error, dev loop0, sector 768 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:34:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0x2, 0x2, 0x2}, {0x100, 0xff, 0x7, 0x10000}, {0x2, 0x38, 0x3, 0x8001}, {0x8, 0x1, 0xcf}, {0x81, 0x1f, 0x6, 0x2b75}, {0x7, 0x2, 0x9, 0x7}]}) 00:34:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x202) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2}]) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:09 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x541b, &(0x7f0000000140)) 00:34:10 executing program 4: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) fcntl$getflags(r0, 0x401) 00:34:10 executing program 5: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) 00:34:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5421) [ 467.464216][ T26] audit: type=1326 audit(1602808450.507:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11500 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f07549 code=0x0 00:34:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) [ 467.507356][ T3109] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 467.617167][ T26] audit: type=1804 audit(1602808450.667:40): pid=11511 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/46/bus" dev="sda1" ino=15810 res=1 errno=0 [ 467.703836][ T26] audit: type=1804 audit(1602808450.747:41): pid=11511 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/46/bus" dev="sda1" ino=15810 res=1 errno=0 00:34:10 executing program 4: r0 = syz_open_dev$loop(0x0, 0x7, 0x1104082) fcntl$getflags(r0, 0x401) 00:34:11 executing program 5: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) 00:34:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 468.124275][ T26] audit: type=1326 audit(1602808451.167:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11500 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f07549 code=0x0 00:34:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:34:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) fcntl$getflags(r0, 0x401) 00:34:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5450) 00:34:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) r3 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x408000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x0, 0x0, 0xb, 0x2, 0x4, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000200), 0x0, 0x5, [], 0x0, 0xa, r3, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x400, 0xfff}, 0x10, 0xffffffffffffffff, r3}, 0x74) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000300)={0x0, 0x1, 0x6}) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000400)={&(0x7f0000000200)}) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x5) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000), 0x40000}]) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:11 executing program 5: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) 00:34:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="16", 0x1}, {&(0x7f00000001c0)="3d6e5bcc6c0b3e407c210f6d5f8e76ee60a94887880c6424078fc049cbd599a0997984fb4358f9d0e96e84140bc2d54b7398c079172a338904062a3034c69d48e08be8f4e0ae45fb4ab138301793ba2a94334478bd78555db285acf31f7000d010c0c7d6640811436c264b7abf204c929db3de4426f2d02082d27037eb54ea1cc4dca73403ba3761334381f05d6bbe86e06c23253705dcfee057abc488743256a55b1b0af957f14fc7594e262a8bf3f37692a06a53c9113d0fe79ac9ad86763511f4b52a043c3f9a3d9b355d0b39f3050450bee00c24087db3", 0xd9}, {&(0x7f00000002c0)="5f704231ab56a908b27a1ab2f4a815cdf8eb87a7f936861c0cde0b53e5405318c2bd335772a7e671f416e901c40c33932308b16004baa24551c8ff93ecd60d618fff681f4344bb1662e953ced77fd454172f653b18427b4c3fb993a317c6050a9b21479ec8ba6cf829cb9a5e07138fd0e708b502", 0x74}], 0x3, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r2 = openat$char_raw_ctl(0xffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x40000, 0x0) lseek(r2, 0x5, 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) [ 469.131493][ T26] audit: type=1804 audit(1602808452.177:43): pid=11541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/101/bus" dev="sda1" ino=15748 res=1 errno=0 00:34:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5451) 00:34:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) fcntl$getflags(r0, 0x401) [ 469.435322][ T26] audit: type=1804 audit(1602808452.487:44): pid=11539 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/101/bus" dev="sda1" ino=15748 res=1 errno=0 00:34:12 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:34:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:34:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5452) 00:34:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) 00:34:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:13 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:34:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 471.034516][ T3110] blk_update_request: I/O error, dev loop0, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 471.046451][ T3110] blk_update_request: I/O error, dev loop0, sector 640 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:34:14 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x2f}], "000022ebffff10e4"}}}}}}}, 0x0) 00:34:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001200000004000300820ede603d2e41a7be9aa4f6def6ed0000fa7dfbd8b719c49f6651a2861546737e14da7af4ff984faa6d972bd086332c71db00803f2f4014f5f0bf99c1b5dfff88259a7cff16954ae15347c38dd70da34d39424615e0ea6808dfca85790238a9f85722287abd402c11666e3182716691de0a98d2b0521a26a30c38ed853e5ee00eb484454370deff0000000000"], 0x18}}, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5460) 00:34:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) 00:34:14 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c05) 00:34:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x401081806, 0xffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x2, 0x80}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000480)={r3, 0x4f, 0x8}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000500)={0x401, 0x3f, 0x0, 0x4, 0x6d, 0x8a, 0x0, 0x3c9f, r4}, 0x20) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="7d65423bfa728c696f05d46a192256c76829afeb3e916584cc7e425127822a614da9ddefeab379410cd73ba8c6da08c5c99732bb3c2d805dc5b32d13b508bfdfe7ca97a2c359ccbd862abadcdef714dd99c10c2e13dd7457592237c8f2c70f", 0x5f}, {&(0x7f00000001c0)="5428a86e3c23fda497d54ae6bcf0e78464f2c133b2d02baf54301ce585a1eecbc7628afd6e9d36de46e151f70ab5a0aece3069ae75b01d3a8fc73a8ddaba000fc91b4b84f7b3a660997d17", 0x4b}], 0x2, &(0x7f0000000380)=[@authinfo={0x10, 0x84, 0x6, {0x2f3}}, @sndinfo={0x1c, 0x84, 0x2, {0x4, 0xa, 0x4, 0x4, r3}}, @dstaddrv6={0x1c, 0x84, 0x8, @ipv4={[], [], @remote}}, @sndinfo={0x1c, 0x84, 0x2, {0x3, 0x8208, 0xf87, 0x3}}, @init={0x14, 0x84, 0x0, {0x401, 0x1, 0x3c5c, 0x6}}, @init={0x14, 0x84, 0x0, {0xffff, 0x8, 0x26}}, @init={0x14, 0x84, 0x0, {0x401, 0x1f, 0x7, 0x800}}], 0xa0, 0x20044000}, 0xc8d0) 00:34:15 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x2f}], "000022ebffff10e4"}}}}}}}, 0x0) [ 472.065825][ T3110] blk_update_request: I/O error, dev loop0, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 472.077699][ T3110] blk_update_request: I/O error, dev loop0, sector 384 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 472.292143][ T9159] Bluetooth: hci1: command 0x0406 tx timeout 00:34:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x8913) 00:34:15 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 00:34:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:15 executing program 5: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) 00:34:15 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x2f}], "000022ebffff10e4"}}}}}}}, 0x0) 00:34:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 473.120620][ T26] audit: type=1804 audit(1602808456.167:45): pid=11615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/51/bus" dev="sda1" ino=16139 res=1 errno=0 [ 473.273169][ T26] audit: type=1804 audit(1602808456.257:46): pid=11615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/51/bus" dev="sda1" ino=16139 res=1 errno=0 00:34:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x8914) 00:34:16 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 00:34:16 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x2f}], "000022ebffff10e4"}}}}}}}, 0x0) 00:34:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:16 executing program 5: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) 00:34:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @local, 0x2}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x6, 0x110, 0x8, 0x3e4e1380, 0x401, 0x9, 0x9, r3}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x9}, &(0x7f0000000040)=0x8) [ 473.970871][ T26] audit: type=1804 audit(1602808457.017:47): pid=11631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/105/bus" dev="sda1" ino=16133 res=1 errno=0 [ 474.048537][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:34:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x8933) 00:34:17 executing program 4: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 00:34:17 executing program 5: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c05) [ 474.333031][ T26] audit: type=1804 audit(1602808457.137:48): pid=11627 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/105/bus" dev="sda1" ino=16133 res=1 errno=0 00:34:17 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x2, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 00:34:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xe4, 0x0, 0x1a4, 0xffffffff, 0xffffffff, 0x29c, 0x29c, 0x29c, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@remote, @loopback, 0x0, 0xff, 'wg0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x4d, 0x3}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@ah={{0x2c, 'ah\x00'}, {[0x7, 0xca37], 0x1}}, @common=@ttl={{0x24, 'ttl\x00'}, {0x3, 0x3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffffff, 0xffffff00, 'sit0\x00', 'hsr0\x00', {0xff}, {}, 0x5c, 0x3, 0x44}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c, 'ah\x00'}, {[0x0, 0x41d]}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffff00, 'veth0_virt_wifi\x00', 'netpci0\x00', {0xff}, {0xff}}, 0x0, 0x9c, 0xf8, 0x0, {}, [@common=@ah={{0x2c, 'ah\x00'}, {[0x101], 0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x8, 0x4, [0xa, 0x36, 0x10, 0x1e, 0x2d, 0x2f, 0xa, 0x31, 0x3d, 0x6, 0x31, 0x16, 0x33, 0x27, 0x36, 0xb], 0x0, 0x6, 0x3}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$CHAR_RAW_BSZSET(r0, 0x40041271, &(0x7f0000000000)=0x800) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40041271) 00:34:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x2, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 00:34:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 00:34:18 executing program 5: io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000200)) [ 475.167078][ T3110] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:34:18 executing program 3: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x604400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee00) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1f) r2 = dup2(r1, r0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/79) r3 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000005) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x8, 0x1f, 0x7, 0x2, 0x4196, 0x7, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x3}}, 0xb9fc, 0x20, 0x3d59, 0x9eb, 0x7}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x9, @remote, 0xdd}}, 0x2, 0x4}, &(0x7f0000000380)=0x88) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prctl$PR_SET_UNALIGN(0x6, 0x1) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r3, 0x0, 0x0) close(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'syz_tun\x00', {0x5}, 0x7ff}) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x1000) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000040)) 00:34:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x400448c9) 00:34:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x2, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 00:34:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 00:34:19 executing program 5: io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000200)) [ 476.475941][ T3110] blk_update_request: I/O error, dev loop0, sector 384 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 00:34:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x2, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) 00:34:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x400448dd) 00:34:19 executing program 1: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000100), 0x0, 0x401081806, 0x84b) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="0cb17913ab6098a42fa3d138f83032b741b11b681e0e6c56ef3d98e9408ce40e530d13670ef5374eb3e89bece27e04715469f2fcc59420af30071f090d9ed771c999b02917260b878afd890a2da79d690e5bfe243d5622d8e0a4e90991f2e35dab07a29aa083f3c0b5ee5c98f0e47d8a70cde3e8c08a0b7fae7d742cb33e4a63b9470755d832c3850a355680d7cbbe97c8213fe92ef39d734ae72e537880b0428fc6b4691de54e5acad643d4c5f6", 0xae}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="000126bd7000fbdbdf2546000000080001007063690011000200303030303a30303a31302e3000000000082745b0b3008e00000000000c008f001e070000000000000c00900002000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0004000000000000000c009000f9ffffff"], 0x90}, 0x1, 0x0, 0x0, 0x78811}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sendfile(r0, r0, 0x0, 0x2000005) r3 = openat$autofs(0xffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4980, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)=r3) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 00:34:20 executing program 5: io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000200)) 00:34:20 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000240), &(0x7f0000000040)) 00:34:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="966ff7cca97b268edf42a8b5f2668f0f", 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @remote, 0x0}, &(0x7f00000002c0)=0x59) getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r5, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x20, 0x29, 0x32, {@private2, r7}}}], 0x20}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf25110000003800018008000300000000001400020067656e65766530000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="24000180080003000100000008000300030000000800030002000000080003000000000070000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100cc110ab2f1b701712e536409b15159cff9ad3287fac5bcbff41458dafa3e52013b5175664da86bf3acb5f110748c86cab8a2ee88521888403f6f60f77425ec762e5fa30a722119234186c810db7436e47ffaa13fab59f0b6799d", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e0000000000001400020076657468315f746f5f7465616d0000000800030001000000"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r8, r2, 0x0) ioctl$VIDIOC_G_FBUF(r8, 0x802c560a, &(0x7f00000001c0)={0x40, 0x20, &(0x7f0000000040)="015e86064a7e95e915c850200228b64e6f93641d97c9e5fc9babb56956aab069802ec521fbb9051917904677719a618af030463f4fa56d2c1cc6b397522e8eadb8ccc69e7843817aca414018bb3fb17537f40ef3cb6162bdffa99343ac43869aba6eedfbf5ae175b3c45dd97a6bdcea00d46872619d52f476e65d8368e33d51d901182ed9a46c49d8b3dd2551eb8c780b4b43d39a5163a291dc26ab2824719923d7a23e496058139a69e51157ca76cad98a1be9ad52f37e25416a164eef2e6f0553c946dc0b838054c2f3d6f3599b82f9b4cf4", {0x101, 0xf1, 0x20363159, 0x9, 0x7fff, 0x701, 0x3, 0x85a5}}) 00:34:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x400454ca) 00:34:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x7ffffffe, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x801a, 0x0, "31766c42886afdf7d341b12f87ddb45e6497d00320a0f1a4fcbf8fdf435fdb98b23c1646ab07164b657d9beb2c615888e970b5d79b2544175a8c2fac2e11ea04", "cc041f34db4d0820c7e987ee4933208f54b679aa51599132750a3156ae15073f467cf9afeb6741e42176b8c073458f83e17f1a7bf0bc56bd33f706e7897226f3", "50a6f710bf5cf4c3881344a5424cef6ddc60c33cbf00", [0x200, 0x5]}) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0xffffffa8}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x1f) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x1f) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffff002) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:21 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000240), &(0x7f0000000040)) 00:34:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 478.454954][ T26] audit: type=1804 audit(1602808461.496:49): pid=11725 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/109/bus" dev="sda1" ino=16130 res=1 errno=0 00:34:21 executing program 5: io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000200)) [ 478.873327][ T26] audit: type=1804 audit(1602808461.786:50): pid=11728 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/56/bus" dev="sda1" ino=16150 res=1 errno=0 00:34:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40049409) [ 479.025999][ T26] audit: type=1804 audit(1602808462.076:51): pid=11725 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir512738970/syzkaller.ZjlZPR/109/bus" dev="sda1" ino=16130 res=1 errno=0 00:34:22 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000240), &(0x7f0000000040)) 00:34:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='\t', 0x1}], 0x1, 0x3081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 479.376362][ T26] audit: type=1804 audit(1602808462.426:52): pid=11729 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/56/bus" dev="sda1" ino=16150 res=1 errno=0 00:34:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40086602) [ 479.764486][ T8736] usb 5-1: new high-speed USB device number 2 using dummy_hcd 00:34:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 480.004702][ T8736] usb 5-1: Using ep0 maxpacket: 8 00:34:23 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000240), &(0x7f0000000040)) [ 480.060603][ T3110] blk_update_request: I/O error, dev loop0, sector 256 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 480.072858][ T3110] blk_update_request: I/O error, dev loop0, sector 256 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 00:34:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 480.145967][ T8736] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 480.155410][ T8736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.184198][ T8736] usb 5-1: config 0 descriptor?? [ 480.231967][ T8736] cp210x 5-1:0.0: cp210x converter detected 00:34:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104083) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="9a08dc9a142f093429fd90f800699ce3232475ce69a192cf66cdd6e1368c0a3f296ab22fbe3476336a657b40ceec5b110c2a19165a8ca76e2e370a02881ad1f6c3b7b97b00c8bb3446c70b35a7ed732ca7287547bcc1ab44aba802fa95cee2c9f01a5d58717886397510268131b99541edfe18cecbad1c777ed1676d4ebc39a88e36e2dd2412b5a9e6d943a02fc7ef5a950e3fa24e3eeb9279b78a551e0fa3999187259baf94898e78d173ee675e4b24ba07832e61c4a533008d4076310b6fc6ad19bb30046784748515bad8138eb91cb1d6a4e1a9225395258adf7edaeb3315469612d5b6f67f4af7054df68f63f2e8b238755737dd", 0xf6}, {&(0x7f0000000140)="06fe667f9287fac097b5040900000100016122277d9b611c4bf6158a0e9ab000b471797e1c79f476bc2de4", 0x2b}, {&(0x7f0000000180)="aa3ef7275a81569730dd825edf0d9a741bc3a5c59d33718df17b1db059135b0702ae27b72c5e81d2bf100994b63feb268fe54f4cc91273ff7edf98df76b8eb15104d5cfa5bc98e7c1551eadf1a18668cde146f4f78836d0b0aa83aa784c11dc6a5b8be41c864c2e1251fbd9586e79633cfcc285f0bb10a3b263f1408e0e2f998db49f355fe2e0a65504f83979928365e413167593519dc5334cb", 0x9a}, {&(0x7f0000000240)="f91c43ef7438c712a6658847c1a1d05de74b3bb4c1ca6714bb70f71ce6ba48c162dd4ff880d1348cdf21135672e963adb2897379f8f17698c96654922cd153acd34b1cecb3008b98c616ee06db36019810fb60fd11a8921c3990c65addee25d28198a8b0e88d06c43ccf90e846bf798958b0b1d5a9218b671f48f049ccf4b58ab77fb3c4b20f7f15d0c35f45836dfa4a83b8fac21585b3904985786cc7eda4a8e6491f508d75474d33ae5622a2546748184abb7bdd243e30e8d3cea67f03199d4f8e99f64490b01d65df7e1835c2510111698cf4ddc2c0c9e336b8a5", 0xdc}, {&(0x7f0000000380)="964ea3cb7a97d85e07f92536e24eb45cc5a28d3e43844bedeacd10d3566aacdc0912ae6fd35257e98befaf1e4033e4b1dc891594c2c1dca515", 0x39}, {&(0x7f00000003c0)}], 0x6, 0x401081806, 0x3ffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x3, 0x6}) 00:34:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40087602) [ 480.585380][T11761] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 480.636794][ T26] audit: type=1804 audit(1602808463.686:53): pid=11763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/57/bus" dev="sda1" ino=16126 res=1 errno=0 [ 480.772396][ T26] audit: type=1804 audit(1602808463.786:54): pid=11763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/57/bus" dev="sda1" ino=16126 res=1 errno=0 00:34:23 executing program 2: clock_settime(0xffc99a3b, &(0x7f0000000040)={0x77359400}) [ 480.895322][ T8736] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 480.903258][ T8736] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 480.981573][ T8736] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 480.989202][ T8736] cp210x: probe of ttyUSB0 failed with error -71 [ 481.146354][ T8736] usb 5-1: USB disconnect, device number 2 [ 481.154862][ T8736] cp210x 5-1:0.0: device disconnected [ 481.784890][ T8736] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 482.024907][ T8736] usb 5-1: Using ep0 maxpacket: 8 [ 482.148434][ T8736] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 482.158179][ T8736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.202308][ T8736] usb 5-1: config 0 descriptor?? [ 482.253570][ T8736] cp210x 5-1:0.0: cp210x converter detected 00:34:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:34:25 executing program 3: sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x18, 0x0, 0x303, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x20, 0x29, 0x32, {@private2, r2}}}], 0x20}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r3, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x20, 0x29, 0x32, {@private2, r5}}}], 0x20}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r6, r6, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r6, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:25 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/241, 0xf1}], 0x1) ioctl$TCSETS(r1, 0x5437, 0x0) 00:34:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40101283) 00:34:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1184883) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:25 executing program 2: clock_settime(0xffc99a3b, &(0x7f0000000040)={0x77359400}) [ 482.475200][ T8736] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 482.483063][ T8736] cp210x 5-1:0.0: querying part number failed [ 482.587696][ T8736] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 482.596701][ T8736] cp210x: probe of ttyUSB0 failed with error -71 [ 482.724160][ T8736] usb 5-1: USB disconnect, device number 3 [ 482.732900][ T8736] cp210x 5-1:0.0: device disconnected 00:34:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x1) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x1a3e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = dup(r1) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x18) 00:34:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40101286) 00:34:26 executing program 2: clock_settime(0xffc99a3b, &(0x7f0000000040)={0x77359400}) 00:34:26 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/241, 0xf1}], 0x1) ioctl$TCSETS(r1, 0x5437, 0x0) 00:34:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)) [ 483.515197][ T3230] usb 5-1: new high-speed USB device number 4 using dummy_hcd 00:34:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40101287) [ 483.780754][ T3230] usb 5-1: Using ep0 maxpacket: 8 [ 483.916816][ T3230] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 483.926187][ T3230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.005671][ T3230] usb 5-1: config 0 descriptor?? [ 484.051810][ T3230] cp210x 5-1:0.0: cp210x converter detected [ 484.696375][ T3230] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 484.704357][ T3230] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 484.792706][ T3230] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 484.800436][ T3230] cp210x: probe of ttyUSB0 failed with error -71 [ 484.929474][ T3230] usb 5-1: USB disconnect, device number 4 [ 484.938407][ T3230] cp210x 5-1:0.0: device disconnected 00:34:28 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:34:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) r5 = epoll_create1(0x0) r6 = dup3(r4, r5, 0x0) setns(r6, 0x44020000) r7 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) getpeername$l2tp(r7, &(0x7f0000000040), &(0x7f0000000080)=0x10) r8 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x10001, 0x3, 0x6}, &(0x7f0000000200)=0x10) sendfile(r0, r0, 0x0, 0x2000005) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:34:28 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/241, 0xf1}], 0x1) ioctl$TCSETS(r1, 0x5437, 0x0) 00:34:28 executing program 2: clock_settime(0xffc99a3b, &(0x7f0000000040)={0x77359400}) 00:34:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40101288) 00:34:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1104082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="c54348225a891bce6b46c09cbf055e842606e48b8cf9e883db995f6721822d76764501f87d4abb2c169fb214d44bd62f2a5c1fd466a873aed3873b7e97e846d918058047d11af9aff2d5cc5f6ab24b97b8a1d8f9c8ad26fd25a49fd4adacba7970299ba9d900af917a98ae5cfc55f1052cd93cc2efe973617b85a479fa7c333bd58e5d91f0eecaae11e1740eb157fb6d902ebcab69645585ad29f77b3eca6abec4978c2e1b0f3a3060a252ac8d66cc71cefd6b897c857f76883526a5dfcb950f6b5ab9f5", 0xc4}], 0x1c, 0x401081806, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x9) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0xa16, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x51}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) [ 485.712107][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 00:34:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x401070c9) 00:34:28 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/241, 0xf1}], 0x1) ioctl$TCSETS(r1, 0x5437, 0x0) 00:34:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) 00:34:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x119c082) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048001) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x4, @random="700c4ca45192", 'veth0\x00'}}, 0x1e) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x3, 0x3, 0x5, {0x4, 0x622a, 0x0, 0x4}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffdeb, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) r2 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getpeername$ax25(r4, &(0x7f00000003c0)={{}, [@bcast, @netrom, @remote, @null, @netrom, @default, @rose, @default]}, &(0x7f0000000100)=0x48) sendmmsg$inet6(r3, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x20, 0x29, 0x32, {@private2, r5}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r5, 0x7, 0x20, 0x800, 0x80, {{0x2a, 0x4, 0x2, 0x32, 0xa8, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @empty, {[@generic={0x94, 0xa, "78785dc6cfc10228"}, @timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x1, [{@remote, 0xb4}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x12, [@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast]}, @cipso={0x86, 0x68, 0x0, [{0x1, 0xa, "b5cf6c0f0bd5c9cc"}, {0x6, 0xf, "c03dd6815c6343a350472978a4"}, {0x0, 0x3, '?'}, {0x1, 0xc, "bfa6ab9a111427b585f3"}, {0x0, 0x7, "b90f9f4ba0"}, {0x5, 0xa, "60c76808df1c8e8a"}, {0x0, 0x4, "25be"}, {0x0, 0x7, "6840420e30"}, {0x0, 0xe, "c128b9deb299c47b570da0ec"}, {0x1, 0x10, "c3215298df316b762b047345cc5c"}]}, @ssrr={0x89, 0x3, 0xf3}]}}}}}) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 486.295161][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 486.341073][ T26] audit: type=1804 audit(1602808469.385:55): pid=11886 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/61/bus" dev="sda1" ino=16201 res=1 errno=0 [ 486.536465][ T5] usb 5-1: Using ep0 maxpacket: 8 00:34:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x401070ca) [ 486.644131][ T26] audit: type=1804 audit(1602808469.485:56): pid=11892 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir130105296/syzkaller.6ZEpUz/61/bus" dev="sda1" ino=16201 res=1 errno=0 [ 486.684713][ T5] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 486.694573][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.736035][ T3110] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 486.785430][ T5] usb 5-1: config 0 descriptor?? [ 486.829385][ T5] cp210x 5-1:0.0: cp210x converter detected [ 486.877043][ T3109] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 [ 487.476346][ T5] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 487.484229][ T5] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 487.526432][ T5] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 487.534025][ T5] cp210x: probe of ttyUSB0 failed with error -71 [ 487.578511][ T5] usb 5-1: USB disconnect, device number 5 [ 487.587082][ T5] cp210x 5-1:0.0: device disconnected 00:34:31 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:34:31 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1) write$qrtrtun(r0, &(0x7f0000000000)="030700d4", 0xe4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x1) write$qrtrtun(r1, &(0x7f0000000000)="030700d4", 0xe4) 00:34:31 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) 00:34:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x7, 0x1184282) r1 = socket$packet(0x11, 0x2, 0x300) pwritev(r1, &(0x7f0000000140), 0x0, 0x401081806, 0x8001) r2 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1016c0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x1f) openat(r2, &(0x7f0000000080)='./file0\x00', 0x410800, 0x30) openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x100, 0x0) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r4, 0x0, 0x0) close(r4) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000001c0)='ip_vti0\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:34:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x1104082) r1 = memfd_create(&(0x7f0000000000), 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x1a1e42, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x1f) fcntl$dupfd(r0, 0x0, r2) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x800, 0x3ea]}, &(0x7f0000000040), &(0x7f0000000100)={r3, r4+10000000}, 0x8) sendfile(r0, r0, 0x0, 0x2000005) r5 = epoll_create1(0x0) r6 = socket(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)={0x20002007}) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000380)=""/4096, 0x5}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0)=0x7, 0x4) 00:34:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x401070cd) [ 488.406147][T11927] ===================================================== [ 488.413178][T11927] BUG: KMSAN: uninit-value in radix_tree_lookup+0x409/0x420 [ 488.420759][T11927] CPU: 0 PID: 11927 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 488.429543][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.439657][T11927] Call Trace: [ 488.442995][T11927] dump_stack+0x21c/0x280 [ 488.447398][T11927] kmsan_report+0xf7/0x1e0 [ 488.451883][T11927] __msan_warning+0x55/0x90 [ 488.456434][T11927] radix_tree_lookup+0x409/0x420 [ 488.461498][T11927] qrtr_endpoint_post+0x1172/0x1700 [ 488.466791][T11927] qrtr_tun_write_iter+0x216/0x370 [ 488.471972][T11927] ? qrtr_tun_read_iter+0x810/0x810 [ 488.477206][T11927] vfs_write+0xfba/0x1870 [ 488.481616][T11927] ksys_write+0x2af/0x4d0 [ 488.486006][T11927] __se_sys_write+0x92/0xb0 [ 488.490569][T11927] __ia32_sys_write+0x4a/0x70 [ 488.495293][T11927] __do_fast_syscall_32+0x129/0x180 [ 488.500539][T11927] do_fast_syscall_32+0x6a/0xc0 [ 488.505438][T11927] do_SYSENTER_32+0x73/0x90 [ 488.509985][T11927] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.516342][T11927] RIP: 0023:0xf7f8a549 [ 488.520440][T11927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 488.540683][T11927] RSP: 002b:00000000f55840cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 488.549132][T11927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 488.557133][T11927] RDX: 00000000000000e4 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.565482][T11927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.573492][T11927] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 488.581666][T11927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.590280][T11927] [ 488.592634][T11927] Uninit was created at: [ 488.596930][T11927] kmsan_save_stack_with_flags+0x3c/0x90 [ 488.602603][T11927] kmsan_alloc_page+0xce/0x1d0 [ 488.607472][T11927] __alloc_pages_nodemask+0x84e/0x1040 [ 488.612980][T11927] page_frag_alloc+0x35b/0x890 [ 488.617851][T11927] __netdev_alloc_skb+0xbee/0xc50 [ 488.623020][T11927] batadv_iv_ogm_queue_add+0x13ba/0x1c60 [ 488.628690][T11927] batadv_iv_ogm_schedule+0x127a/0x1640 [ 488.634270][T11927] batadv_iv_send_outstanding_bat_ogm_packet+0xd7b/0xf00 [ 488.641461][T11927] process_one_work+0x1224/0x20a0 [ 488.646530][T11927] worker_thread+0x10cc/0x2740 [ 488.651375][T11927] kthread+0x51c/0x560 [ 488.655502][T11927] ret_from_fork+0x1f/0x30 [ 488.660190][T11927] ===================================================== [ 488.667136][T11927] Disabling lock debugging due to kernel taint [ 488.673309][T11927] Kernel panic - not syncing: panic_on_warn set ... [ 488.679934][T11927] CPU: 0 PID: 11927 Comm: syz-executor.5 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 488.690526][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.700599][T11927] Call Trace: [ 488.703931][T11927] dump_stack+0x21c/0x280 [ 488.708390][T11927] panic+0x4ca/0xed7 [ 488.712341][T11927] ? add_taint+0x17c/0x210 [ 488.716790][T11927] kmsan_report+0x1da/0x1e0 [ 488.721340][T11927] __msan_warning+0x55/0x90 [ 488.725888][T11927] radix_tree_lookup+0x409/0x420 [ 488.730881][T11927] qrtr_endpoint_post+0x1172/0x1700 [ 488.736167][T11927] qrtr_tun_write_iter+0x216/0x370 [ 488.741327][T11927] ? qrtr_tun_read_iter+0x810/0x810 [ 488.746590][T11927] vfs_write+0xfba/0x1870 [ 488.750996][T11927] ksys_write+0x2af/0x4d0 [ 488.755375][T11927] __se_sys_write+0x92/0xb0 [ 488.759918][T11927] __ia32_sys_write+0x4a/0x70 [ 488.764635][T11927] __do_fast_syscall_32+0x129/0x180 [ 488.769875][T11927] do_fast_syscall_32+0x6a/0xc0 [ 488.774759][T11927] do_SYSENTER_32+0x73/0x90 [ 488.779300][T11927] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.785668][T11927] RIP: 0023:0xf7f8a549 [ 488.789758][T11927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 488.809382][T11927] RSP: 002b:00000000f55840cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 488.817822][T11927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 488.825812][T11927] RDX: 00000000000000e4 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.833803][T11927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.841796][T11927] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 488.849789][T11927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.859050][T11927] Kernel Offset: disabled [ 488.863391][T11927] Rebooting in 86400 seconds..